Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4D4545ED71A11EFBDA6657D762E951A.roa
File: F4D4545ED71A11EFBDA6657D762E951A.roa (raw, json)
Hash identifier: ivTt7bkgK3BjkMyojQxwRM2yZ/ZIniTd8nY2OBuXoCo=
Subject key identifier: A6:8A:C9:82:4B:D1:AC:49:62:05:0C:41:D9:AA:42:04:56:87:A7:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4D4545ED71A11EFBDA6657D762E951A.roa
Signing time: Mon 20 Jan 2025 10:40:25 +0000
ROA not before: Mon 20 Jan 2025 10:40:21 +0000
ROA not after: Sat 01 Feb 2025 10:40:21 +0000
asID: 44559
IP address blocks: 156.246.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68627 (0x10c13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 10:40:21 2025 GMT
Not After : Feb 1 10:40:21 2025 GMT
Subject: CN=678e2819-57b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:49:c6:46:f7:00:26:45:fb:28:e0:76:2c:
e4:86:2b:73:63:c4:fb:56:48:9d:1a:82:e1:8d:2c:
a7:f3:9a:c3:41:89:41:b7:0c:83:b5:97:fe:74:b7:
71:e8:32:57:0a:a4:8b:2e:d7:92:46:f9:68:f6:70:
11:0d:5a:c7:9b:1a:e4:76:82:5d:59:f4:24:f8:42:
4c:24:7f:0f:46:ca:f8:6b:fa:9c:3a:c6:49:e1:4d:
66:96:b4:8f:4b:5e:30:8d:aa:b8:05:66:5f:ac:36:
34:d0:d3:78:6b:e0:0f:d9:a5:65:b8:8a:c0:13:71:
fb:88:a4:cc:c6:c4:5e:17:11:a4:5e:2c:f7:e9:1e:
2d:a9:6e:84:41:ea:2f:8e:2c:0c:fb:66:33:65:11:
d4:f2:d5:8a:dc:bf:8a:8c:4a:be:15:09:67:9a:d3:
93:e4:ea:19:36:50:7e:97:78:a2:17:f1:db:56:fe:
ed:88:40:e9:99:4e:04:89:13:72:38:a4:ab:c2:86:
b4:de:da:2b:65:5f:5d:fd:6b:17:70:12:ef:fc:da:
37:8b:2d:a6:63:2f:af:03:21:60:42:8c:7c:8f:1b:
92:10:e6:58:d5:3d:d9:0a:ea:4e:d4:44:c9:c1:a5:
80:16:a5:70:7d:bd:aa:9b:cd:fc:bc:bf:cf:d3:0d:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8A:C9:82:4B:D1:AC:49:62:05:0C:41:D9:AA:42:04:56:87:A7:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4D4545ED71A11EFBDA6657D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.192.0/18
Signature Algorithm: sha256WithRSAEncryption
42:fa:d9:a7:73:98:ee:66:f1:7d:e9:29:6e:dd:82:53:f2:99:
c6:c3:b2:aa:8c:e8:cd:5f:6f:7a:42:b7:e7:31:e4:1e:26:84:
fd:8f:c9:ed:b1:7a:d3:41:ac:25:12:77:0f:a9:74:eb:86:e7:
de:d6:28:a7:b5:b1:17:e3:38:ee:b7:ec:d5:d2:b3:2b:04:63:
3b:bf:87:5c:48:c6:37:9f:84:9e:48:dd:ac:e9:3c:c9:2a:7c:
92:ac:4a:25:64:83:a9:33:73:c0:2f:db:a8:e7:3c:57:5a:1d:
52:f3:09:15:f3:e0:74:bf:95:fb:3f:90:ab:46:78:fb:22:19:
23:96:ce:e3:ca:6f:4a:c3:e5:ab:f8:ec:ba:b4:06:6f:fa:d1:
d1:52:90:04:59:a1:25:cf:7f:40:7c:b7:74:e8:16:ed:d0:75:
f8:58:4b:91:ae:73:69:db:9a:32:dc:f4:cb:83:2c:f3:f7:83:
ed:61:65:68:ec:c9:37:40:e3:c3:a8:15:0b:8d:47:58:01:2b:
25:9a:0e:b8:ae:2f:87:0f:1a:82:50:d3:d1:81:cf:5b:cb:7e:
37:c1:3f:b6:76:11:89:16:ae:85:06:b4:4e:3c:ec:1c:f9:9d:
d6:61:92:5e:8a:f4:68:77:3a:91:e9:1e:3d:55:20:61:90:88:
d8:c0:56:78
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQwTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIwMTA0MDIxWhcNMjUwMjAxMTA0MDIxWjAYMRYw
FAYDVQQDEw02NzhlMjgxOS01N2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsMBJxkb3ACZF+yjgdizkhitzY8T7VkidGoLhjSyn85rDQYlBtwyDtZf+
dLdx6DJXCqSLLteSRvlo9nARDVrHmxrkdoJdWfQk+EJMJH8PRsr4a/qcOsZJ4U1m
lrSPS14wjaq4BWZfrDY00NN4a+AP2aVluIrAE3H7iKTMxsReFxGkXiz36R4tqW6E
QeovjiwM+2YzZRHU8tWK3L+KjEq+FQlnmtOT5OoZNlB+l3iiF/HbVv7tiEDpmU4E
iRNyOKSrwoa03torZV9d/WsXcBLv/No3iy2mYy+vAyFgQox8jxuSEOZY1T3ZCupO
1ETJwaWAFqVwfb2qm838vL/P0w1HtwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKaK
yYJL0axJYgUMQdmqQgRWh6ctMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNEQ0NTQ1RUQ3MUExMUVGQkRBNjY1N0Q3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnPbAMA0GCSqGSIb3DQEBCwUA
A4IBAQBC+tmnc5juZvF96Slu3YJT8pnGw7KqjOjNX296QrfnMeQeJoT9j8ntsXrT
QawlEncPqXTrhufe1iintbEX4zjut+zV0rMrBGM7v4dcSMY3n4SeSN2s6TzJKnyS
rEolZIOpM3PAL9uo5zxXWh1S8wkV8+B0v5X7P5CrRnj7Ihkjls7jym9Kw+Wr+Oy6
tAZv+tHRUpAEWaElz39AfLd06Bbt0HX4WEuRrnNp25oy3PTLgyzz94PtYWVo7Mk3
QOPDqBULjUdYASslmg64ri+HDxqCUNPRgc9by343wT+2dhGJFq6FBrROPOwc+Z3W
YZJeivRodzqR6R49VSBhkIjYwFZ4
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:39 2025 by rpki-client