Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFFA4E9ED50C11EFA166BC7F762E951A.roa
File: EFFA4E9ED50C11EFA166BC7F762E951A.roa (raw, json)
Hash identifier: 9SA8j9qpqEyr1CJKz22HDpTW0ggXVkW6fvMnN2loP+Q=
Subject key identifier: 66:8D:F2:98:5C:C1:BC:83:76:0A:B5:97:F1:62:B5:30:95:2E:26:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFFA4E9ED50C11EFA166BC7F762E951A.roa
Signing time: Fri 17 Jan 2025 19:55:01 +0000
ROA not before: Fri 17 Jan 2025 19:54:58 +0000
ROA not after: Sat 22 Feb 2025 19:54:58 +0000
asID: 54801
IP address blocks: 156.246.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68232 (0x10a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 19:54:58 2025 GMT
Not After : Feb 22 19:54:58 2025 GMT
Subject: CN=678ab595-2d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:76:7f:76:81:de:52:06:ed:90:a2:8e:54:
a0:f7:65:5f:a5:69:42:04:5e:db:77:01:0f:88:a4:
19:cc:62:88:62:16:b5:85:61:0c:41:ee:c9:f3:18:
a3:c8:78:71:9d:b5:4a:25:19:fa:3f:f0:72:54:c2:
ac:56:f0:d0:36:d1:b5:ae:83:8c:47:67:b3:85:f4:
5a:3d:f3:f0:cb:b1:d5:6b:ea:96:5f:32:cf:2e:d7:
74:76:31:d4:f0:bd:f2:44:fa:e3:57:35:6a:df:16:
73:76:06:68:81:43:1c:b1:46:9c:51:d2:aa:70:d7:
32:22:ed:0a:8f:d6:05:2e:ce:ba:ba:98:a1:89:00:
8e:02:f7:91:a3:75:53:ff:ca:ac:30:a6:bd:90:1a:
ca:bc:87:e5:6d:5a:10:74:5f:16:12:43:4b:c0:c1:
c7:45:ba:f0:f9:db:d2:ad:70:5b:e4:98:b9:b7:01:
59:19:a2:3a:f4:bd:7d:c0:e4:0b:8f:6e:22:af:a8:
ad:bd:8f:34:0d:2e:49:5d:54:8a:4d:df:c9:b4:3e:
9a:26:bc:be:19:0a:40:3f:c0:74:7b:f2:ba:ed:47:
b1:ac:9c:db:db:2e:05:52:05:ab:56:83:58:1a:ed:
c1:72:cc:65:39:5e:38:9d:85:f5:96:50:7f:f7:59:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8D:F2:98:5C:C1:BC:83:76:0A:B5:97:F1:62:B5:30:95:2E:26:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFFA4E9ED50C11EFA166BC7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.16.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:84:08:59:62:4e:ca:1a:37:2e:46:6f:d1:08:7f:0d:87:de:
63:e8:39:85:6a:c4:5c:a9:51:82:4a:a8:0f:08:5d:92:06:d7:
d6:ad:7d:19:de:cf:84:66:17:b2:c8:d5:c7:e0:39:f0:08:04:
f9:96:da:61:bb:d3:57:5b:fe:6c:c1:bf:8e:25:3d:20:7e:5b:
3b:7f:72:2f:5e:0f:47:ce:56:ff:54:e5:c2:8c:d0:2c:ac:7a:
f4:80:3a:42:42:28:96:b2:90:21:d0:8f:0c:bd:d8:d6:62:38:
83:82:7e:c4:fa:5e:27:d8:25:f0:59:a7:fe:ce:75:5b:cb:4b:
60:cf:41:fd:26:6d:8a:0f:b8:83:1b:3e:b0:4d:70:4e:cd:bb:
0e:16:f3:08:58:7b:d3:db:a9:67:9a:c9:2d:96:db:c0:ff:63:
95:86:4c:a2:b1:83:0b:3d:76:d6:66:47:f1:7e:c1:cb:bb:5a:
ed:43:75:6a:46:8e:84:c5:7e:a3:05:73:4d:af:e2:df:9c:03:
42:ed:d9:4c:48:23:a5:bc:8a:7d:89:6a:54:f8:35:c5:69:b9:
4c:75:f5:28:36:d7:53:00:f4:2b:75:f7:77:29:cb:cf:b6:e7:
2e:05:3e:3a:0d:b6:e5:67:fb:10:87:d1:78:47:0a:52:7b:15:
8d:99:2d:4a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQqIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MTk1NDU4WhcNMjUwMjIyMTk1NDU4WjAYMRYw
FAYDVQQDEw02NzhhYjU5NS0yZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAozR2f3aB3lIG7ZCijlSg92VfpWlCBF7bdwEPiKQZzGKIYha1hWEMQe7J
8xijyHhxnbVKJRn6P/ByVMKsVvDQNtG1roOMR2ezhfRaPfPwy7HVa+qWXzLPLtd0
djHU8L3yRPrjVzVq3xZzdgZogUMcsUacUdKqcNcyIu0Kj9YFLs66upihiQCOAveR
o3VT/8qsMKa9kBrKvIflbVoQdF8WEkNLwMHHRbrw+dvSrXBb5Ji5twFZGaI69L19
wOQLj24ir6itvY80DS5JXVSKTd/JtD6aJry+GQpAP8B0e/K67UexrJzb2y4FUgWr
VoNYGu3BcsxlOV44nYX1llB/91l9eQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGaN
8phcwbyDdgq1l/FitTCVLiYjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRkZBNEU5RUQ1MEMxMUVGQTE2NkJDN0Y3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPYQMA0GCSqGSIb3DQEBCwUA
A4IBAQCPhAhZYk7KGjcuRm/RCH8Nh95j6DmFasRcqVGCSqgPCF2SBtfWrX0Z3s+E
ZheyyNXH4DnwCAT5ltphu9NXW/5swb+OJT0gfls7f3IvXg9Hzlb/VOXCjNAsrHr0
gDpCQiiWspAh0I8MvdjWYjiDgn7E+l4n2CXwWaf+znVby0tgz0H9Jm2KD7iDGz6w
TXBOzbsOFvMIWHvT26lnmsktltvA/2OVhkyisYMLPXbWZkfxfsHLu1rtQ3VqRo6E
xX6jBXNNr+LfnANC7dlMSCOlvIp9iWpU+DXFablMdfUoNtdTAPQrdfd3KcvPtucu
BT46DbblZ/sQh9F4RwpSexWNmS1K
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:51:06 2025 by rpki-client