Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF944CA8DA7E11EF81EFEB8F762E951A.roa
File: EF944CA8DA7E11EF81EFEB8F762E951A.roa (raw, json)
Hash identifier: xWdOcaiLYTaZ1yA3NblE3A38KjNeC4bPBeBqhj6DKh4=
Subject key identifier: AC:24:8C:AB:F3:E6:1B:E1:F6:82:22:1F:60:43:72:A9:BE:85:73:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011002
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF944CA8DA7E11EF81EFEB8F762E951A.roa
Signing time: Fri 24 Jan 2025 18:13:39 +0000
ROA not before: Fri 24 Jan 2025 18:13:36 +0000
ROA not after: Tue 25 Feb 2025 18:13:36 +0000
asID: 44559
IP address blocks: 156.246.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69634 (0x11002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:13:36 2025 GMT
Not After : Feb 25 18:13:36 2025 GMT
Subject: CN=6793d853-2eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:4e:15:40:35:61:3b:a9:17:7c:8e:f6:35:
da:54:d1:66:b8:3f:5e:8e:59:90:08:3f:c4:e1:dd:
75:0a:3e:77:10:46:ae:cf:9e:86:d5:7e:6f:a7:a8:
42:0a:71:67:1f:53:e7:c3:38:27:e9:23:ce:80:77:
58:12:41:74:c3:a9:b6:af:1c:83:51:bd:11:a7:e9:
89:e1:55:63:46:e7:fb:3c:00:47:40:ac:eb:7a:a9:
d9:8f:5f:83:80:a0:73:72:bb:98:6f:81:8d:c3:fb:
a1:52:67:bb:d2:ab:1c:fa:e4:8e:cc:8b:0d:9c:bb:
97:6a:e1:2c:be:ed:5c:ea:6b:46:e0:a9:df:13:b7:
81:5b:66:95:c2:5f:ba:7b:fd:f8:b2:b1:93:0c:74:
87:06:5e:95:f7:fc:e0:05:34:94:c1:ca:00:b9:06:
ba:a7:b7:27:ed:65:b5:12:3d:b0:33:31:f7:a4:c9:
a0:9a:52:76:b6:64:e8:44:71:13:df:61:81:27:c3:
16:24:e2:26:fa:c2:75:fb:91:77:43:de:1a:d6:e4:
ea:ba:d4:99:1d:9c:2e:f8:38:c2:fe:37:f2:90:3e:
e6:36:b3:b9:99:f8:52:1d:dd:7e:6d:0c:a1:9e:71:
1d:c7:b3:1d:25:97:cc:b3:b3:9e:72:e5:5b:c4:1d:
e1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:24:8C:AB:F3:E6:1B:E1:F6:82:22:1F:60:43:72:A9:BE:85:73:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF944CA8DA7E11EF81EFEB8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.158.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b5:e7:9c:e9:41:f6:23:03:7f:a3:e0:3c:f2:9c:84:48:d3:
4f:d1:01:45:d4:9f:8a:69:3d:81:3b:b5:f7:5d:79:db:ba:66:
6d:2b:9d:4b:a6:e2:51:56:95:84:03:26:f1:6d:ca:ce:cd:53:
2e:95:ec:83:24:df:af:de:73:5a:35:cc:b3:c2:df:f2:bd:13:
c2:66:da:a6:a3:18:d5:a7:0c:40:b3:1d:f6:3a:9c:da:06:54:
68:03:2b:c5:56:b3:8f:e4:93:16:a2:88:21:26:c6:be:3b:77:
a4:e4:e2:2b:0a:f0:fc:46:aa:3b:a6:2e:51:3f:17:48:52:ba:
fd:3c:75:17:b8:4a:e4:3a:d5:41:5e:6a:8f:f0:68:7a:8e:ea:
d3:c9:10:9e:0f:ac:25:df:7b:42:06:11:9e:14:be:75:c1:41:
e0:51:3c:c5:fa:ff:2e:f7:76:80:a1:38:c9:55:b2:d8:fa:4e:
78:d0:28:6d:d1:38:2e:8d:ac:e0:3c:33:fa:08:4c:81:97:27:
38:f4:e7:fe:22:b1:f1:1f:8b:4c:64:c8:fd:d6:ec:c1:c2:d8:
19:5b:50:e8:df:6b:d8:7a:6e:46:e7:b8:ad:b7:a4:a9:e0:ef:
f7:8c:1b:20:1b:13:e9:6f:a9:0b:70:71:31:18:ed:10:18:ea:
8c:d2:5f:ff
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARACMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTgxMzM2WhcNMjUwMjI1MTgxMzM2WjAYMRYw
FAYDVQQDEw02NzkzZDg1My0yZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2jROFUA1YTupF3yO9jXaVNFmuD9ejlmQCD/E4d11Cj53EEauz56G1X5v
p6hCCnFnH1Pnwzgn6SPOgHdYEkF0w6m2rxyDUb0Rp+mJ4VVjRuf7PABHQKzreqnZ
j1+DgKBzcruYb4GNw/uhUme70qsc+uSOzIsNnLuXauEsvu1c6mtG4KnfE7eBW2aV
wl+6e/34srGTDHSHBl6V9/zgBTSUwcoAuQa6p7cn7WW1Ej2wMzH3pMmgmlJ2tmTo
RHET32GBJ8MWJOIm+sJ1+5F3Q94a1uTqutSZHZwu+DjC/jfykD7mNrO5mfhSHd1+
bQyhnnEdx7MdJZfMs7OecuVbxB3hGQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKwk
jKvz5hvh9oIiH2BDcqm+hXMTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRjk0NENBOERBN0UxMUVGODFFRkVCOEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPaeMA0GCSqGSIb3DQEBCwUA
A4IBAQCIteec6UH2IwN/o+A88pyESNNP0QFF1J+KaT2BO7X3XXnbumZtK51LpuJR
VpWEAybxbcrOzVMuleyDJN+v3nNaNcyzwt/yvRPCZtqmoxjVpwxAsx32OpzaBlRo
AyvFVrOP5JMWooghJsa+O3ek5OIrCvD8Rqo7pi5RPxdIUrr9PHUXuErkOtVBXmqP
8Gh6jurTyRCeD6wl33tCBhGeFL51wUHgUTzF+v8u93aAoTjJVbLY+k540Cht0Tgu
jazgPDP6CEyBlyc49Of+IrHxH4tMZMj91uzBwtgZW1Do32vYem5G57itt6Sp4O/3
jBsgGxPpb6kLcHExGO0QGOqM0l//
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:19 2025 by rpki-client