Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F983FF00DCD711EF96363664762E951A.roa
File: F983FF00DCD711EF96363664762E951A.roa (raw, json)
Hash identifier: 87fCpIX7tE9jIn34BtLvRbTcWRIG2/TqW6BQ8VYwcGg=
Subject key identifier: 15:8D:D5:F7:56:D4:D9:F6:BE:B3:17:33:7E:D9:E6:E1:1C:8C:63:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01156F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F983FF00DCD711EF96363664762E951A.roa
Signing time: Mon 27 Jan 2025 17:56:03 +0000
ROA not before: Mon 27 Jan 2025 17:56:00 +0000
ROA not after: Sun 16 Feb 2025 17:56:00 +0000
asID: 135097
IP address blocks: 156.226.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71023 (0x1156f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:56:00 2025 GMT
Not After : Feb 16 17:56:00 2025 GMT
Subject: CN=6797c8b3-0fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e1:64:2c:5f:c0:23:b6:3f:b5:7a:13:e8:0f:
78:ab:54:cc:bd:b7:ee:11:e8:66:bb:25:78:e4:2c:
e4:3d:87:84:2c:59:66:55:11:87:ea:3b:48:24:14:
5f:d9:8f:b3:84:00:bb:c6:c5:69:39:0b:b5:a9:f0:
ad:01:c3:e0:c5:31:6a:23:e2:a0:97:33:dd:04:78:
45:ff:ea:a0:68:7b:5d:49:fc:81:b4:a3:f7:e6:91:
7e:da:9e:4a:2d:6e:e5:60:25:61:4f:27:dc:54:ef:
fa:e1:be:3a:16:de:95:33:0d:2e:b8:06:bc:8f:42:
d3:ae:41:ee:16:6e:bc:bf:1b:32:80:5b:b0:1c:7a:
80:b1:41:ef:b6:0d:dc:e2:a3:aa:39:a6:49:8c:7a:
7f:db:97:12:83:d6:53:81:62:d9:b3:1a:c7:0a:c7:
9c:b8:ba:fd:22:7b:ff:ef:35:1f:cb:88:5b:d8:8f:
56:f4:13:4e:99:9e:04:52:82:4f:74:20:fb:84:13:
98:a5:fd:49:20:cc:27:a0:37:27:bc:77:0d:a0:ca:
14:b4:c9:8b:98:79:0b:03:37:0a:7a:7a:7e:50:f5:
46:3c:63:e4:62:be:ae:f9:28:c1:29:0b:22:37:01:
2c:18:a9:c4:97:90:14:83:54:ce:24:a6:b9:62:e0:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8D:D5:F7:56:D4:D9:F6:BE:B3:17:33:7E:D9:E6:E1:1C:8C:63:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F983FF00DCD711EF96363664762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.32.0/19
Signature Algorithm: sha256WithRSAEncryption
45:c0:54:23:3f:b3:81:fc:49:35:01:25:10:1f:ef:1e:3b:4d:
d7:87:7d:b4:19:9b:7a:5c:e4:af:8b:73:b5:8d:c6:7c:0a:db:
17:f8:c4:79:0b:74:99:76:43:3e:92:71:cb:cd:dd:f5:ad:43:
d3:e5:b6:27:42:e0:d1:aa:87:f0:dd:37:ad:75:1a:0c:c9:d0:
bb:70:84:1d:37:c2:3a:5b:25:86:7c:b5:69:8f:43:7e:7f:1d:
a9:c9:db:e3:a0:9b:cc:44:b6:6c:95:b7:2b:23:91:5b:1a:8b:
29:d4:9b:c0:a1:e5:29:a6:e9:d4:82:16:7a:74:16:89:ad:57:
08:05:7c:93:00:4f:b3:ea:10:45:ec:4a:e2:96:59:51:2b:e3:
3f:5c:b8:6d:34:3c:35:83:40:c3:c2:bd:c2:05:f6:8b:0e:01:
6c:aa:d4:ee:24:8d:ea:c6:d2:28:36:1c:26:17:26:e9:44:eb:
54:69:05:41:ca:bb:40:79:f9:96:5e:b0:69:47:bf:a0:47:74:
2d:a3:1f:b6:0d:aa:be:4a:87:4d:19:96:91:17:2a:10:1d:ae:
9e:22:cc:29:15:e9:c1:d4:ed:63:cb:1c:ba:0d:45:d4:b3:c4:
2d:f4:94:31:51:f9:e7:44:32:de:ab:4c:2f:b8:6d:7e:f8:16:
3a:0f:98:2e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARVvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MTc1NjAwWhcNMjUwMjE2MTc1NjAwWjAYMRYw
FAYDVQQDEw02Nzk3YzhiMy0wZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAveFkLF/AI7Y/tXoT6A94q1TMvbfuEehmuyV45CzkPYeELFlmVRGH6jtI
JBRf2Y+zhAC7xsVpOQu1qfCtAcPgxTFqI+KglzPdBHhF/+qgaHtdSfyBtKP35pF+
2p5KLW7lYCVhTyfcVO/64b46Ft6VMw0uuAa8j0LTrkHuFm68vxsygFuwHHqAsUHv
tg3c4qOqOaZJjHp/25cSg9ZTgWLZsxrHCsecuLr9Inv/7zUfy4hb2I9W9BNOmZ4E
UoJPdCD7hBOYpf1JIMwnoDcnvHcNoMoUtMmLmHkLAzcKenp+UPVGPGPkYr6u+SjB
KQsiNwEsGKnEl5AUg1TOJKa5YuC2EQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBWN
1fdW1Nn2vrMXM37Z5uEcjGNdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GOTgzRkYwMERDRDcxMUVGOTYzNjM2NjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnOIgMA0GCSqGSIb3DQEBCwUA
A4IBAQBFwFQjP7OB/Ek1ASUQH+8eO03Xh320GZt6XOSvi3O1jcZ8CtsX+MR5C3SZ
dkM+knHLzd31rUPT5bYnQuDRqofw3TetdRoMydC7cIQdN8I6WyWGfLVpj0N+fx2p
ydvjoJvMRLZslbcrI5FbGosp1JvAoeUppunUghZ6dBaJrVcIBXyTAE+z6hBF7Eri
lllRK+M/XLhtNDw1g0DDwr3CBfaLDgFsqtTuJI3qxtIoNhwmFybpROtUaQVByrtA
efmWXrBpR7+gR3Qtox+2Daq+SodNGZaRFyoQHa6eIswpFenB1O1jyxy6DUXUs8Qt
9JQxUfnnRDLeq0wvuG1++BY6D5gu
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:13 2025 by rpki-client