Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA70A80AD51B11EF9E843961762E951A.roa
File: FA70A80AD51B11EF9E843961762E951A.roa (raw, json)
Hash identifier: m/slLvuaIGab4tAlhdukTYd6G7VqWh/kVafWuAsDcKY=
Subject key identifier: AE:35:82:EC:86:22:93:83:C9:C4:B5:53:13:6A:69:94:77:22:38:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010ACC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA70A80AD51B11EF9E843961762E951A.roa
Signing time: Fri 17 Jan 2025 21:42:41 +0000
ROA not before: Fri 17 Jan 2025 21:42:38 +0000
ROA not after: Sat 22 Feb 2025 21:42:38 +0000
asID: 141883
IP address blocks: 156.240.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68300 (0x10acc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:42:38 2025 GMT
Not After : Feb 22 21:42:38 2025 GMT
Subject: CN=678aced1-54d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:2c:9d:8c:cc:76:43:0c:99:ea:1a:23:c8:
e4:6a:2b:01:4a:24:8f:ee:39:48:66:4a:4a:f7:f1:
83:3d:b6:6b:38:19:90:09:26:3d:0c:0f:42:94:83:
ee:3b:e5:cb:c4:bb:76:29:47:81:85:36:0e:87:d4:
a3:a7:e0:7e:e0:1a:ed:a9:f6:a2:05:0e:1d:6c:54:
b1:ff:45:b1:a5:05:ce:4a:11:5a:46:1e:ae:6a:b2:
58:52:cb:35:0a:e2:65:cf:13:89:f5:24:bf:95:3a:
45:11:82:51:35:97:8b:1c:bf:2c:81:c6:3d:bd:92:
f0:73:f0:c7:5a:f9:d3:31:08:81:3a:92:8a:0a:44:
e6:2c:75:f9:69:4c:cc:57:f9:4e:c0:6e:73:d1:77:
05:ef:63:59:01:da:b8:0c:5c:f6:20:46:d9:2c:72:
c2:ea:38:de:1a:3d:ed:c6:e9:b6:a5:38:57:4b:eb:
d2:c3:c7:1e:20:a2:fa:81:03:f4:5b:c5:45:fe:dc:
88:aa:5c:b1:e4:5c:de:3d:56:0c:b1:dc:45:5e:c0:
4e:12:20:80:ea:c8:ba:f1:d9:eb:4f:a2:5b:ba:59:
46:ff:bf:65:15:ed:e0:0d:b9:f0:16:67:34:ea:00:
6d:03:84:93:31:c0:c9:61:8d:64:d9:78:1e:d4:36:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:35:82:EC:86:22:93:83:C9:C4:B5:53:13:6A:69:94:77:22:38:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA70A80AD51B11EF9E843961762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.48.0/21
Signature Algorithm: sha256WithRSAEncryption
20:5c:e1:5e:53:a0:ce:3e:84:58:b9:02:24:7a:7d:7b:21:31:
f1:f9:62:30:6f:fc:e7:de:e5:1c:bd:89:9c:c3:9d:af:93:c4:
78:7a:7d:8b:b7:e4:26:51:2d:9c:fb:16:35:42:02:d6:57:e3:
3d:8e:ec:b6:e7:aa:e6:97:5f:1b:bb:c4:47:bb:ee:a6:89:9c:
ce:de:9d:36:9d:0f:23:db:27:60:be:ab:1c:9a:26:91:6d:3d:
6e:43:b1:92:1e:09:11:58:c7:77:49:e7:7b:1b:2d:91:16:de:
2c:ab:2d:c4:fd:e7:3c:dd:07:56:42:55:78:28:ce:3c:df:20:
b8:cd:52:f8:16:95:10:3d:1c:4c:17:25:c6:3e:35:33:e4:60:
74:8a:62:42:cf:f9:f9:23:c0:76:e4:07:ea:a9:b4:1f:74:54:
4b:e4:9d:5d:84:09:8d:13:1f:1e:ca:d8:fc:28:5d:92:c4:40:
67:2f:a9:a2:55:86:e0:5b:9c:0e:d2:cc:a0:46:71:30:ff:d7:
b2:98:76:70:66:1a:ee:9a:98:73:89:95:30:88:70:a8:1e:50:
75:d3:00:a9:14:c5:34:36:c9:34:c9:aa:9e:a3:f3:88:bd:8f:
e8:31:2d:d9:b5:4b:52:c5:19:af:1a:f4:25:71:d0:66:1b:32:
5f:f8:59:76
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQrMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MjE0MjM4WhcNMjUwMjIyMjE0MjM4WjAYMRYw
FAYDVQQDEw02NzhhY2VkMS01NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwCksnYzMdkMMmeoaI8jkaisBSiSP7jlIZkpK9/GDPbZrOBmQCSY9DA9C
lIPuO+XLxLt2KUeBhTYOh9Sjp+B+4BrtqfaiBQ4dbFSx/0WxpQXOShFaRh6uarJY
Uss1CuJlzxOJ9SS/lTpFEYJRNZeLHL8sgcY9vZLwc/DHWvnTMQiBOpKKCkTmLHX5
aUzMV/lOwG5z0XcF72NZAdq4DFz2IEbZLHLC6jjeGj3txum2pThXS+vSw8ceIKL6
gQP0W8VF/tyIqlyx5FzePVYMsdxFXsBOEiCA6si68dnrT6JbullG/79lFe3gDbnw
Fmc06gBtA4STMcDJYY1k2Xge1DZ1iwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK41
guyGIpODycS1UxNqaZR3IjhHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQTcwQTgwQUQ1MUIxMUVGOUU4NDM5NjE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnPAwMA0GCSqGSIb3DQEBCwUA
A4IBAQAgXOFeU6DOPoRYuQIken17ITHx+WIwb/zn3uUcvYmcw52vk8R4en2Lt+Qm
US2c+xY1QgLWV+M9juy256rml18bu8RHu+6miZzO3p02nQ8j2ydgvqscmiaRbT1u
Q7GSHgkRWMd3Sed7Gy2RFt4sqy3E/ec83QdWQlV4KM483yC4zVL4FpUQPRxMFyXG
PjUz5GB0imJCz/n5I8B25AfqqbQfdFRL5J1dhAmNEx8eytj8KF2SxEBnL6miVYbg
W5wO0sygRnEw/9eymHZwZhrumphziZUwiHCoHlB10wCpFMU0Nsk0yaqeo/OIvY/o
MS3ZtUtSxRmvGvQlcdBmGzJf+Fl2
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:58:14 2025 by rpki-client