Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF2853CCD56511EFB57CB654762E951A.roa
File: EF2853CCD56511EFB57CB654762E951A.roa (raw, json)
Hash identifier: AkDcAcEsgdWn6+HbXNxQH/2Te9F4WQlt6YfFNePXFD0=
Subject key identifier: 4E:C8:3D:8F:77:68:D9:4A:D5:93:9C:8F:BC:C8:EE:E7:42:6C:11:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF2853CCD56511EFB57CB654762E951A.roa
Signing time: Sat 18 Jan 2025 06:32:05 +0000
ROA not before: Sat 18 Jan 2025 06:32:02 +0000
ROA not after: Sat 22 Feb 2025 06:32:02 +0000
asID: 8796
IP address blocks: 156.239.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68351 (0x10aff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 06:32:02 2025 GMT
Not After : Feb 22 06:32:02 2025 GMT
Subject: CN=678b4ae5-34ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:8c:bc:9a:84:71:55:3a:9a:a4:c9:e5:8c:
bd:60:da:b4:22:1f:5e:31:72:08:09:f7:55:96:b5:
40:5a:d6:f9:c5:e5:b4:ec:86:71:fa:0a:a3:ee:e7:
4a:b6:81:50:3d:2c:4a:b7:6c:08:95:33:3e:33:11:
05:30:da:17:cc:ee:3b:b3:d9:31:ee:01:1b:ab:dc:
b5:57:e8:4c:ee:93:5b:b5:ff:e8:47:bd:76:de:d8:
fc:72:65:96:b6:51:a3:7d:65:11:ab:2e:2e:e8:18:
f1:b2:b3:a3:cc:2e:6b:b1:31:0a:19:b7:86:20:03:
6c:e3:b7:c5:fb:ae:7c:3c:29:57:5c:75:90:6f:1e:
90:57:5f:70:8a:b4:61:9c:a8:8e:f5:84:2a:09:88:
99:7e:a2:25:8b:51:2d:38:06:ed:37:2d:e2:53:0a:
dd:0e:04:4f:9a:58:fc:ae:55:f1:7f:3f:79:9d:8c:
63:f6:35:58:2b:27:d3:12:04:35:87:be:ca:3a:74:
f9:f8:8a:d8:f6:29:94:62:ab:fe:4d:17:fc:e9:bd:
20:e1:3d:28:88:ef:1e:25:c7:3c:7d:52:a4:f9:66:
2a:1e:e4:ce:58:a9:b6:96:f0:c4:87:1e:e7:96:08:
fc:d6:3d:cd:7c:07:ce:61:44:c3:6a:c6:45:48:8d:
e2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C8:3D:8F:77:68:D9:4A:D5:93:9C:8F:BC:C8:EE:E7:42:6C:11:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF2853CCD56511EFB57CB654762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:f8:40:f9:00:c3:34:55:f1:d8:cf:8b:d7:aa:74:fb:f5:7e:
c0:48:a9:18:ed:fa:87:42:ab:fa:2c:64:68:15:39:6d:a0:2b:
74:0c:03:fd:56:e6:9e:aa:a0:67:a3:0f:96:e3:45:79:30:f2:
93:6b:ef:58:a4:01:bf:61:98:32:ef:c6:9c:3f:c5:d0:ba:32:
bc:db:db:6f:26:0c:4d:98:31:6b:e3:f8:06:61:23:f6:5b:1a:
c0:f2:48:3a:79:0a:d6:62:7b:37:68:f5:e6:6c:33:fc:02:37:
79:9c:16:a9:e7:57:22:7a:24:c7:31:07:44:bf:4f:9b:06:3e:
96:0d:5a:36:d8:05:e9:6b:60:8d:d2:41:2f:e3:2d:b3:d3:1a:
17:17:d2:06:d9:a6:02:11:3c:c6:61:56:35:a3:49:72:7c:bb:
3d:53:31:21:85:9c:c0:89:7e:ca:58:15:75:06:89:15:5d:1c:
61:81:22:8f:b1:b0:f1:c5:6b:b9:d0:26:f5:33:e2:0e:ac:18:
23:dd:49:1f:70:fd:9b:aa:4a:62:ca:91:05:1c:67:ad:9f:be:
77:1d:da:a9:88:24:84:c0:06:19:44:70:a3:14:27:18:cf:71:
6c:22:02:e9:e2:b3:dd:bf:7b:b2:c4:98:ad:bf:e2:0c:60:65:
0a:38:43:0c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQr/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MDYzMjAyWhcNMjUwMjIyMDYzMjAyWjAYMRYw
FAYDVQQDEw02NzhiNGFlNS0zNGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAssWMvJqEcVU6mqTJ5Yy9YNq0Ih9eMXIICfdVlrVAWtb5xeW07IZx+gqj
7udKtoFQPSxKt2wIlTM+MxEFMNoXzO47s9kx7gEbq9y1V+hM7pNbtf/oR7123tj8
cmWWtlGjfWURqy4u6BjxsrOjzC5rsTEKGbeGIANs47fF+658PClXXHWQbx6QV19w
irRhnKiO9YQqCYiZfqIli1EtOAbtNy3iUwrdDgRPmlj8rlXxfz95nYxj9jVYKyfT
EgQ1h77KOnT5+IrY9imUYqv+TRf86b0g4T0oiO8eJcc8fVKk+WYqHuTOWKm2lvDE
hx7nlgj81j3NfAfOYUTDasZFSI3ioQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE7I
PY93aNlK1ZOcj7zI7udCbBF1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRjI4NTNDQ0Q1NjUxMUVGQjU3Q0I2NTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnO80MA0GCSqGSIb3DQEBCwUA
A4IBAQAc+ED5AMM0VfHYz4vXqnT79X7ASKkY7fqHQqv6LGRoFTltoCt0DAP9Vuae
qqBnow+W40V5MPKTa+9YpAG/YZgy78acP8XQujK829tvJgxNmDFr4/gGYSP2WxrA
8kg6eQrWYns3aPXmbDP8Ajd5nBap51cieiTHMQdEv0+bBj6WDVo22AXpa2CN0kEv
4y2z0xoXF9IG2aYCETzGYVY1o0lyfLs9UzEhhZzAiX7KWBV1BokVXRxhgSKPsbDx
xWu50Cb1M+IOrBgj3UkfcP2bqkpiypEFHGetn753HdqpiCSEwAYZRHCjFCcYz3Fs
IgLp4rPdv3uyxJitv+IMYGUKOEMM
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:33 2025 by rpki-client