Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDD2053EDFEF11EFBEF3D344762E951A.roa
File: DDD2053EDFEF11EFBEF3D344762E951A.roa (raw, json)
Hash identifier: q9uQrM1ENIE19US59CD4B5SQUs3y/Dr3rWHpE/f0paY=
Subject key identifier: E6:17:18:AA:D1:89:51:85:2E:43:87:51:3D:1A:7B:9D:F9:A5:31:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011657
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDD2053EDFEF11EFBEF3D344762E951A.roa
Signing time: Fri 31 Jan 2025 16:24:38 +0000
ROA not before: Fri 31 Jan 2025 16:24:35 +0000
ROA not after: Tue 25 Feb 2025 16:24:35 +0000
asID: 152092
IP address blocks: 156.245.198.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71255 (0x11657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:24:35 2025 GMT
Not After : Feb 25 16:24:35 2025 GMT
Subject: CN=679cf946-ce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:a7:d8:c1:ad:ba:12:44:11:fb:74:de:b4:
f2:31:10:f5:5b:93:20:af:9f:66:d6:8b:34:8e:98:
30:2c:8c:fa:11:c2:73:1c:c5:e0:2f:34:b0:41:88:
61:82:63:41:79:05:39:82:3e:4e:06:98:99:50:0c:
20:a8:6a:64:25:a5:69:7b:bf:b9:c1:8e:34:10:b4:
21:51:ac:9c:ab:0a:84:77:4d:7c:f6:fd:58:98:0c:
d3:f3:54:65:04:c1:bd:87:ec:19:60:60:44:eb:6a:
e0:08:3f:50:00:2d:fd:93:d3:be:e1:30:2b:f4:d3:
0a:70:89:a1:1b:c9:52:82:06:e5:a4:1e:3a:41:a9:
3f:61:62:d8:b6:9d:c4:07:56:10:dd:96:b4:0a:dc:
9e:b4:85:04:5a:29:2d:79:90:59:bd:d1:63:44:42:
01:6e:25:4f:ae:8c:3a:68:af:de:5a:0a:1f:06:b9:
55:8f:78:3f:0d:a0:45:46:42:b2:7c:10:5d:ee:ea:
2f:2d:14:f7:83:d9:70:76:44:b0:ab:60:f3:4d:a2:
f4:55:21:1c:00:14:48:91:07:d3:c4:2e:95:c8:b2:
ea:eb:22:1c:f1:2c:68:57:a3:86:e5:38:e3:08:44:
a8:d7:36:99:45:3e:67:99:f6:58:9b:4c:58:4f:61:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:17:18:AA:D1:89:51:85:2E:43:87:51:3D:1A:7B:9D:F9:A5:31:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDD2053EDFEF11EFBEF3D344762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.198.0/23
Signature Algorithm: sha256WithRSAEncryption
17:77:5c:7b:30:a0:e7:20:ee:f0:ff:64:9f:d1:1f:c0:27:18:
d2:cb:4d:79:67:83:24:d7:f5:51:a7:6f:0b:b0:53:f8:18:6f:
f0:4a:60:32:1c:e9:23:d6:2a:1b:37:ae:90:8b:95:01:c3:c3:
2f:de:53:a2:13:95:c1:47:3e:db:06:0a:a7:20:c9:85:ac:f8:
eb:46:ea:39:bf:7f:0c:53:06:f7:7e:cd:5c:18:aa:99:82:a8:
0b:03:5d:a0:f5:ee:c9:6c:f8:84:fe:a2:f5:ae:a8:e3:0a:38:
d8:08:15:cc:e7:a1:ca:6b:74:e8:83:1e:5f:01:a5:78:48:77:
84:c3:03:f4:b0:d8:59:92:90:dc:70:45:eb:10:5b:05:a6:63:
20:c3:44:66:21:87:05:7a:b0:7e:16:c5:1e:cd:7d:d1:f8:6d:
15:36:57:f3:48:97:cb:ea:59:2d:3d:28:3f:2b:54:10:34:99:
78:d9:28:1a:be:0f:5e:64:84:57:9c:cc:31:01:1a:3e:a3:47:
b8:5e:33:96:f1:32:9c:e6:df:dc:64:1a:a3:06:67:da:6d:6f:
8b:cc:a2:34:fb:fd:38:2f:7e:b9:1d:0a:23:15:86:98:d7:b3:
e2:e7:0e:64:26:a5:ce:49:41:fe:04:78:b8:07:09:46:9b:7a:
ef:1e:ea:1c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARZXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMxMTYyNDM1WhcNMjUwMjI1MTYyNDM1WjAYMRYw
FAYDVQQDEw02NzljZjk0Ni1jZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqRKn2MGtuhJEEft03rTyMRD1W5Mgr59m1os0jpgwLIz6EcJzHMXgLzSw
QYhhgmNBeQU5gj5OBpiZUAwgqGpkJaVpe7+5wY40ELQhUaycqwqEd0189v1YmAzT
81RlBMG9h+wZYGBE62rgCD9QAC39k9O+4TAr9NMKcImhG8lSggblpB46Qak/YWLY
tp3EB1YQ3Za0CtyetIUEWikteZBZvdFjREIBbiVProw6aK/eWgofBrlVj3g/DaBF
RkKyfBBd7uovLRT3g9lwdkSwq2DzTaL0VSEcABRIkQfTxC6VyLLq6yIc8SxoV6OG
5TjjCESo1zaZRT5nmfZYm0xYT2EvgwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOYX
GKrRiVGFLkOHUT0ae535pTEQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EREQyMDUzRURGRUYxMUVGQkVGM0QzNDQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPXGMA0GCSqGSIb3DQEBCwUA
A4IBAQAXd1x7MKDnIO7w/2Sf0R/AJxjSy015Z4Mk1/VRp28LsFP4GG/wSmAyHOkj
1iobN66Qi5UBw8Mv3lOiE5XBRz7bBgqnIMmFrPjrRuo5v38MUwb3fs1cGKqZgqgL
A12g9e7JbPiE/qL1rqjjCjjYCBXM56HKa3Togx5fAaV4SHeEwwP0sNhZkpDccEXr
EFsFpmMgw0RmIYcFerB+FsUezX3R+G0VNlfzSJfL6lktPSg/K1QQNJl42Sgavg9e
ZIRXnMwxARo+o0e4XjOW8TKc5t/cZBqjBmfabW+LzKI0+/04L365HQojFYaY17Pi
5w5kJqXOSUH+BHi4BwlGm3rvHuoc
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:07 2025 by rpki-client