Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E98DC38EDFF611EF89E94373762E951A.roa
File: E98DC38EDFF611EF89E94373762E951A.roa (raw, json)
Hash identifier: HRXuFv9Lz6XdM4cJgiSuMP7Rwon9dWVILB9nRKsQ39M=
Subject key identifier: 8F:55:79:6F:88:B7:6C:2B:15:9A:5E:E6:B8:DE:2F:2F:86:22:58:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E98DC38EDFF611EF89E94373762E951A.roa
Signing time: Fri 31 Jan 2025 17:15:05 +0000
ROA not before: Fri 31 Jan 2025 17:15:01 +0000
ROA not after: Tue 11 Feb 2025 17:15:01 +0000
asID: 131471
IP address blocks: 156.238.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71343 (0x116af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 17:15:01 2025 GMT
Not After : Feb 11 17:15:01 2025 GMT
Subject: CN=679d0518-6f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:d0:de:ef:73:28:cd:a4:7a:c0:ea:26:a8:
8a:db:20:e6:cb:d2:f9:10:f2:9a:1e:1d:fb:4d:50:
39:97:fc:b8:12:4b:b0:1b:40:08:43:d8:a7:62:9a:
da:ae:51:c9:a2:51:9b:0a:61:00:7e:f8:79:11:e7:
12:1d:75:c6:ba:4f:e0:c8:f1:8d:db:92:be:21:0f:
69:23:58:b2:4e:17:34:5e:54:78:14:bd:d6:88:b6:
fb:35:55:6d:44:6b:fd:f6:36:35:51:4a:1b:73:f0:
47:d1:56:9e:76:e5:d5:c9:89:c0:70:d0:c0:86:43:
f8:f6:47:42:21:75:5c:35:44:b3:44:67:c2:ac:7c:
76:78:2a:04:84:de:92:9d:d5:b5:7c:5c:2a:fc:f9:
7a:ef:5c:be:a3:9e:4f:b5:0c:f1:b5:a2:d8:9e:1b:
71:ad:59:43:d2:4d:14:df:88:62:03:a7:15:90:f7:
4b:38:e5:0c:a7:c6:99:f1:10:4c:b4:bd:eb:b8:f3:
59:c1:e2:a3:ba:dc:0e:d7:d2:41:d1:46:e8:8f:7c:
f4:c5:e7:99:f1:3a:49:1b:c7:ba:9b:e2:f5:6f:ba:
35:67:8a:7d:85:9c:94:7d:34:db:84:a4:2f:00:88:
b3:f0:3b:8f:d2:9d:90:09:8f:97:f7:46:17:96:b8:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:55:79:6F:88:B7:6C:2B:15:9A:5E:E6:B8:DE:2F:2F:86:22:58:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E98DC38EDFF611EF89E94373762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.68.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a2:4b:20:7b:a0:ec:2b:2b:b5:35:34:82:41:d2:53:25:af:
9b:b5:a3:db:fd:ff:25:a7:b7:4d:4c:9d:e2:6d:00:a3:51:71:
0d:7b:33:08:c2:87:43:a5:da:c2:4e:23:5b:94:5c:46:1d:d0:
4d:b6:9e:d2:67:08:56:78:ad:14:85:48:59:65:10:60:7e:8c:
31:4b:51:34:06:70:70:34:0f:2b:a2:0c:b0:65:46:6a:22:28:
24:65:88:f1:bb:c2:6f:bc:ac:ec:23:36:f1:5a:21:1b:4b:94:
8c:d8:0b:31:28:2a:93:49:18:b2:a7:67:4c:c9:22:7a:3d:6f:
56:4f:50:c5:a9:a9:73:61:c8:f6:01:34:54:38:6b:1d:7a:11:
99:e3:aa:e5:21:1d:d5:3d:3f:5f:b4:b8:13:fe:91:ff:4e:4c:
64:df:9d:68:17:2f:22:ed:54:ad:28:0c:a2:a2:af:e8:81:ee:
6d:0c:cb:55:f5:62:aa:ee:9d:39:d1:a8:b9:58:af:fc:0a:60:
cc:4d:d0:67:38:30:49:4b:45:ab:f8:8c:5b:28:99:46:30:ea:
df:15:17:b5:1a:49:ec:45:6a:ec:2e:d3:c6:b7:46:fb:d7:39:
b5:d6:d1:03:ea:3a:ba:ad:e2:4a:01:92:4a:b2:ae:6e:80:ad:
56:4c:52:78
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARavMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMxMTcxNTAxWhcNMjUwMjExMTcxNTAxWjAYMRYw
FAYDVQQDEw02NzlkMDUxOC02Zjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw/zQ3u9zKM2kesDqJqiK2yDmy9L5EPKaHh37TVA5l/y4EkuwG0AIQ9in
YprarlHJolGbCmEAfvh5EecSHXXGuk/gyPGN25K+IQ9pI1iyThc0XlR4FL3WiLb7
NVVtRGv99jY1UUobc/BH0VaeduXVyYnAcNDAhkP49kdCIXVcNUSzRGfCrHx2eCoE
hN6SndW1fFwq/Pl671y+o55PtQzxtaLYnhtxrVlD0k0U34hiA6cVkPdLOOUMp8aZ
8RBMtL3ruPNZweKjutwO19JB0Uboj3z0xeeZ8TpJG8e6m+L1b7o1Z4p9hZyUfTTb
hKQvAIiz8DuP0p2QCY+X90YXlrhwWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI9V
eW+It2wrFZpe5rjeLy+GIlhEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOThEQzM4RURGRjYxMUVGODlFOTQzNzM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5EMA0GCSqGSIb3DQEBCwUA
A4IBAQCZoksge6DsKyu1NTSCQdJTJa+btaPb/f8lp7dNTJ3ibQCjUXENezMIwodD
pdrCTiNblFxGHdBNtp7SZwhWeK0UhUhZZRBgfowxS1E0BnBwNA8rogywZUZqIigk
ZYjxu8JvvKzsIzbxWiEbS5SM2AsxKCqTSRiyp2dMySJ6PW9WT1DFqalzYcj2ATRU
OGsdehGZ46rlIR3VPT9ftLgT/pH/Tkxk351oFy8i7VStKAyioq/oge5tDMtV9WKq
7p050ai5WK/8CmDMTdBnODBJS0Wr+IxbKJlGMOrfFRe1GknsRWrsLtPGt0b71zm1
1tED6jq6reJKAZJKsq5ugK1WTFJ4
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:48 2025 by rpki-client