Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3A6B4DCD7D311EF98646EB9762E951A.roa
File: F3A6B4DCD7D311EF98646EB9762E951A.roa (raw, json)
Hash identifier: U1q94tMY9F8ISR9aPAc/KERojaBTICmqx2/rGh090mA=
Subject key identifier: C3:0B:43:3B:B4:04:6D:C9:79:C8:0B:60:2C:43:0E:70:4A:41:CA:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3A6B4DCD7D311EF98646EB9762E951A.roa
Signing time: Tue 21 Jan 2025 08:44:40 +0000
ROA not before: Tue 21 Jan 2025 08:44:36 +0000
ROA not after: Sat 01 Feb 2025 08:44:36 +0000
asID: 44559
IP address blocks: 156.246.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68880 (0x10d10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 08:44:36 2025 GMT
Not After : Feb 1 08:44:36 2025 GMT
Subject: CN=678f5e78-c773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:9c:fb:58:07:28:7c:f7:44:6f:b9:1a:db:
94:34:03:31:a0:0c:ac:89:98:44:c8:4f:4b:5b:35:
67:be:16:a4:88:4f:c6:5f:a1:4e:6d:5e:03:b8:c5:
e0:dd:9f:78:7b:29:c4:ef:1e:ce:d9:5c:55:88:a7:
8f:00:4b:11:45:28:d2:f6:3b:0d:c6:1b:6c:49:b9:
f7:f1:7b:21:dc:b2:ab:62:4b:45:8c:c3:9a:2d:9d:
df:4f:0c:29:63:ff:8b:72:1f:e2:90:ff:0d:66:19:
00:f3:03:98:82:23:bb:6e:a0:f7:2f:8e:13:eb:13:
55:42:f9:e2:13:2e:a2:11:ed:48:18:46:e4:2c:ca:
b8:b2:5f:bf:9f:ac:fe:5e:c2:f5:ed:db:11:e1:bd:
21:45:b5:8e:0e:91:2e:0d:63:e0:df:33:a2:67:d3:
9e:94:d3:51:77:2d:0f:90:d4:b7:48:01:fc:b5:19:
1b:92:25:dc:d2:e6:0a:83:1b:07:1d:5e:c9:86:94:
4a:cb:78:5e:f9:28:77:f6:89:6d:fe:e1:39:9a:40:
e1:62:a3:e8:ef:ef:26:66:29:68:cd:0a:69:73:1c:
30:32:0e:7f:75:5b:93:31:1d:04:2a:c8:8e:71:20:
fe:7a:65:cb:42:0b:5d:84:96:d9:d0:cc:31:c7:c9:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0B:43:3B:B4:04:6D:C9:79:C8:0B:60:2C:43:0E:70:4A:41:CA:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3A6B4DCD7D311EF98646EB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:74:4c:87:ff:1e:5f:d6:fb:5e:83:d0:5e:81:9b:1a:47:64:
9a:91:94:68:72:84:4c:0c:8f:ad:7b:82:6c:ba:74:7a:9d:c4:
d4:22:c9:ae:05:6c:9f:5f:e9:d5:26:d5:e6:d9:e9:4b:9d:ce:
2f:0a:94:8e:44:b9:45:99:56:87:e8:ad:76:f4:85:4b:a7:27:
33:d3:89:f9:f4:ee:23:d5:65:a5:aa:52:6f:16:86:7a:11:06:
09:b6:48:59:14:e7:a2:70:c7:12:82:66:2e:76:a6:8e:f7:c1:
20:d3:cc:91:7d:54:a6:88:de:46:45:bc:cd:8e:7a:ca:32:24:
9b:38:24:69:06:8a:a4:18:3e:7c:52:c9:8b:f6:ed:4f:4d:ad:
a4:ff:53:9e:d6:47:64:39:cb:32:c4:e8:f6:71:bd:f2:f1:46:
85:5d:27:d6:9c:2b:67:a5:39:5c:49:19:f5:09:9b:fc:61:cb:
db:55:df:2f:8d:40:a1:73:17:d2:07:0f:26:3d:51:cb:29:3b:
28:e2:4e:b8:3c:9a:c0:f2:24:80:79:73:d8:8c:d8:0d:40:f2:
79:43:25:a4:13:ef:1d:5a:3e:9d:b2:2b:c6:d9:49:0d:54:25:
b2:38:70:4b:2d:c6:27:95:f0:2c:d9:9c:d8:ad:f7:c3:47:cb:
43:87:e2:e6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ0QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMDg0NDM2WhcNMjUwMjAxMDg0NDM2WjAYMRYw
FAYDVQQDEw02NzhmNWU3OC1jNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw9Oc+1gHKHz3RG+5GtuUNAMxoAysiZhEyE9LWzVnvhakiE/GX6FObV4D
uMXg3Z94eynE7x7O2VxViKePAEsRRSjS9jsNxhtsSbn38Xsh3LKrYktFjMOaLZ3f
TwwpY/+Lch/ikP8NZhkA8wOYgiO7bqD3L44T6xNVQvniEy6iEe1IGEbkLMq4sl+/
n6z+XsL17dsR4b0hRbWODpEuDWPg3zOiZ9OelNNRdy0PkNS3SAH8tRkbkiXc0uYK
gxsHHV7JhpRKy3he+Sh39olt/uE5mkDhYqPo7+8mZilozQppcxwwMg5/dVuTMR0E
KsiOcSD+emXLQgtdhJbZ0Mwxx8ksgwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMML
Qzu0BG3JecgLYCxDDnBKQcqfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GM0E2QjREQ0Q3RDMxMUVGOTg2NDZFQjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPaeMA0GCSqGSIb3DQEBCwUA
A4IBAQCwdEyH/x5f1vteg9BegZsaR2SakZRocoRMDI+te4JsunR6ncTUIsmuBWyf
X+nVJtXm2elLnc4vCpSORLlFmVaH6K129IVLpycz04n59O4j1WWlqlJvFoZ6EQYJ
tkhZFOeicMcSgmYudqaO98Eg08yRfVSmiN5GRbzNjnrKMiSbOCRpBoqkGD58UsmL
9u1PTa2k/1Oe1kdkOcsyxOj2cb3y8UaFXSfWnCtnpTlcSRn1CZv8YcvbVd8vjUCh
cxfSBw8mPVHLKTso4k64PJrA8iSAeXPYjNgNQPJ5QyWkE+8dWj6dsivG2UkNVCWy
OHBLLcYnlfAs2ZzYrffDR8tDh+Lm
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:23 2025 by rpki-client