Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6792B58D31211EFAB3AF5BE762E951A.roa
File: D6792B58D31211EFAB3AF5BE762E951A.roa (raw, json)
Hash identifier: vb1gQiX9jnrsjTzY3TZc0jiB1xfloRu6Vh2tWNCN4a4=
Subject key identifier: 0A:DE:7B:3E:2D:EA:3F:8B:65:15:DB:FB:7C:7E:49:B3:BD:13:8C:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010857
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6792B58D31211EFAB3AF5BE762E951A.roa
Signing time: Wed 15 Jan 2025 07:32:13 +0000
ROA not before: Wed 15 Jan 2025 07:32:10 +0000
ROA not after: Sat 03 Jan 2026 07:32:10 +0000
asID: 984
IP address blocks: 156.254.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67671 (0x10857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 15 07:32:10 2025 GMT
Not After : Jan 3 07:32:10 2026 GMT
Subject: CN=6787647d-0699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:37:f1:7c:81:a9:88:0d:67:44:e8:04:33:90:
2a:54:54:54:67:47:eb:b3:1b:15:9e:88:93:8f:7b:
1c:1c:9a:55:30:4e:2f:be:c2:f8:e8:ea:80:94:2b:
5b:3d:2a:6f:0e:f0:29:af:2c:a1:84:76:72:5f:ff:
a2:54:c4:6f:fb:27:f4:bb:08:35:13:bb:81:44:69:
93:14:9b:45:17:6f:b6:38:56:f2:77:3e:12:d0:aa:
d7:0e:b3:ec:2a:32:af:c3:e9:b9:8f:fd:44:49:ea:
e4:5a:b9:57:4b:90:2a:d8:25:f5:66:23:f1:20:74:
31:17:c4:47:15:ee:ef:4b:48:4d:42:36:1c:fa:1c:
36:6d:14:21:0b:ef:ab:62:e0:f8:71:20:21:4f:89:
5d:c5:f7:3a:0b:31:5a:f2:0b:83:48:15:11:21:b9:
8c:d2:ae:3b:20:9c:eb:6c:14:9f:af:d7:bb:54:f6:
bd:d5:18:da:0a:f4:42:41:0e:d1:be:51:24:c7:6e:
0c:82:51:ab:de:ed:0d:23:6e:2a:6a:fe:61:3b:18:
4c:1b:83:9c:17:70:40:41:22:db:89:98:fb:0c:d1:
69:12:ce:6e:7a:62:69:13:31:35:1a:bd:c7:89:5b:
f8:4e:da:46:53:f7:3b:33:12:97:fa:1e:16:21:97:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DE:7B:3E:2D:EA:3F:8B:65:15:DB:FB:7C:7E:49:B3:BD:13:8C:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6792B58D31211EFAB3AF5BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.65.0/24
Signature Algorithm: sha256WithRSAEncryption
06:cc:71:6d:c9:85:4c:1c:c5:76:fa:16:6d:e2:87:e5:d0:c6:
cb:63:a0:0c:e7:36:b3:08:7d:81:ba:35:c3:9d:00:51:15:c9:
3d:91:ec:de:5f:45:73:df:0f:24:e0:d3:b7:39:81:48:26:dc:
62:f9:18:c5:25:ca:ce:2b:6a:47:93:1a:c6:d0:b2:67:d1:b5:
59:d5:a1:e1:f4:cc:35:4a:a0:54:ab:2f:49:43:5a:d4:d4:6b:
49:99:a6:53:8e:d0:c9:03:13:c8:47:ae:61:85:da:1a:fb:8f:
b7:6c:46:99:6a:f1:6b:4a:ac:a0:28:2c:65:59:85:f3:a7:70:
fe:52:dc:c2:fe:ae:68:10:ab:1e:26:df:32:4a:b6:61:58:1f:
f8:84:7c:97:01:9a:de:e1:98:f1:66:2d:4c:69:f8:dc:da:ae:
7b:65:64:35:31:93:47:1d:8a:37:55:d5:6f:56:92:2c:4d:86:
cd:36:81:e8:7a:98:dd:cb:ba:11:94:3c:44:46:23:31:b2:0d:
25:79:1d:0f:7c:c3:14:6b:68:dd:5f:76:d7:fa:4c:0a:1a:9f:
8b:14:52:4f:33:c3:e8:b4:3d:7a:5d:06:ea:9a:4e:69:57:b0:
21:83:39:c6:79:7b:b2:f0:df:b2:0d:fc:40:21:ec:52:2a:87:
a3:7e:c4:83
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQhXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE1MDczMjEwWhcNMjYwMTAzMDczMjEwWjAYMRYw
FAYDVQQDEw02Nzg3NjQ3ZC0wNjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4TfxfIGpiA1nROgEM5AqVFRUZ0frsxsVnoiTj3scHJpVME4vvsL46OqA
lCtbPSpvDvApryyhhHZyX/+iVMRv+yf0uwg1E7uBRGmTFJtFF2+2OFbydz4S0KrX
DrPsKjKvw+m5j/1ESerkWrlXS5Aq2CX1ZiPxIHQxF8RHFe7vS0hNQjYc+hw2bRQh
C++rYuD4cSAhT4ldxfc6CzFa8guDSBURIbmM0q47IJzrbBSfr9e7VPa91RjaCvRC
QQ7RvlEkx24MglGr3u0NI24qav5hOxhMG4OcF3BAQSLbiZj7DNFpEs5uemJpEzE1
Gr3HiVv4TtpGU/c7MxKX+h4WIZf7HwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAre
ez4t6j+LZRXb+3x+SbO9E4zfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENjc5MkI1OEQzMTIxMUVGQUIzQUY1QkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP5BMA0GCSqGSIb3DQEBCwUA
A4IBAQAGzHFtyYVMHMV2+hZt4ofl0MbLY6AM5zazCH2BujXDnQBRFck9kezeX0Vz
3w8k4NO3OYFIJtxi+RjFJcrOK2pHkxrG0LJn0bVZ1aHh9Mw1SqBUqy9JQ1rU1GtJ
maZTjtDJAxPIR65hhdoa+4+3bEaZavFrSqygKCxlWYXzp3D+UtzC/q5oEKseJt8y
SrZhWB/4hHyXAZre4ZjxZi1Mafjc2q57ZWQ1MZNHHYo3VdVvVpIsTYbNNoHoepjd
y7oRlDxERiMxsg0leR0PfMMUa2jdX3bX+kwKGp+LFFJPM8PotD16XQbqmk5pV7Ah
gznGeXuy8N+yDfxAIexSKoejfsSD
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:26:55 2025 by rpki-client