Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB28F7B2D7F411EFB9D7B58F762E951A.roa
File: FB28F7B2D7F411EFB9D7B58F762E951A.roa (raw, json)
Hash identifier: JnWv1rfhJmz7wjGDhJE66yge+/Sbuhqs8pzo3ay4uSg=
Subject key identifier: 86:A7:9B:CB:D8:FB:DA:15:71:DB:77:ED:8F:4D:A2:DC:7C:FE:C6:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB28F7B2D7F411EFB9D7B58F762E951A.roa
Signing time: Tue 21 Jan 2025 12:41:06 +0000
ROA not before: Tue 21 Jan 2025 12:40:56 +0000
ROA not after: Sat 01 Feb 2025 12:40:56 +0000
asID: 44559
IP address blocks: 156.246.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69036 (0x10dac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:40:56 2025 GMT
Not After : Feb 1 12:40:56 2025 GMT
Subject: CN=678f95e2-29df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:9b:42:af:28:71:ce:61:2c:88:5f:e0:5c:
dc:81:ea:cd:c2:91:a6:e3:c6:49:70:06:b3:41:1c:
ca:ab:f5:32:7f:bb:a4:14:63:54:ad:ae:f3:f7:99:
9d:58:6f:20:4b:90:c5:c7:66:cf:cb:fc:ca:69:42:
7a:1d:0e:db:b8:62:6e:69:f7:79:47:ce:c8:dd:b4:
d8:56:83:b3:2a:17:2f:6a:cc:ff:42:06:fb:0d:83:
bb:48:bb:d5:76:ac:1c:b2:fe:3b:2c:8b:3e:97:b9:
b6:29:c2:a5:5b:9b:2a:05:d9:a7:4b:20:fb:5f:5d:
31:42:f7:c8:59:43:8c:96:5f:66:f4:9f:df:90:e4:
15:e9:7b:40:f4:7b:5a:08:a0:c6:7a:ec:c7:1e:e2:
45:36:b7:ad:7c:3b:60:63:38:b5:3b:fe:e3:ec:d2:
ff:0d:02:c6:93:24:5b:07:19:cc:e4:cb:2b:d5:ac:
62:b3:58:dc:ca:58:a4:a5:26:18:65:9f:81:78:fe:
40:a6:44:bc:75:f3:9c:2b:d6:c8:dc:9a:28:59:0e:
df:62:40:7a:fc:81:2d:64:c5:d4:3d:94:47:4e:6b:
a0:a7:3a:b5:bd:49:2b:41:b2:04:7b:2a:03:dd:52:
34:49:4f:8d:72:ba:d3:75:e8:b9:5f:40:5c:3e:38:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A7:9B:CB:D8:FB:DA:15:71:DB:77:ED:8F:4D:A2:DC:7C:FE:C6:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB28F7B2D7F411EFB9D7B58F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.247.0/24
Signature Algorithm: sha256WithRSAEncryption
05:59:74:ea:d1:f7:bb:20:f2:ad:69:10:ee:20:0f:07:6a:0f:
3a:fa:49:36:73:6e:d3:f7:57:29:07:32:b8:4b:db:2c:64:8f:
af:a5:af:b6:9c:9e:0a:18:cf:87:80:2f:30:04:ed:40:42:cf:
8e:be:28:f6:e5:1f:86:e7:12:f7:1f:48:b7:8c:d7:22:72:6e:
87:fd:30:8f:80:33:c3:af:fd:32:11:c7:3a:ab:11:1a:1c:ca:
06:32:ef:42:cb:ee:02:3b:1c:21:47:aa:f7:ed:bf:77:ee:37:
0a:45:6b:a2:c8:d0:34:46:70:25:25:11:88:23:f4:50:78:77:
e4:05:ce:11:f8:6a:9a:87:cf:d5:e6:25:ab:1f:bc:91:ad:54:
51:a6:a1:ec:0d:b8:72:bf:af:53:ae:18:de:db:66:ed:88:f3:
ff:59:e2:ae:73:38:1c:9f:a7:9e:67:1f:b6:10:2c:c0:eb:05:
0e:7c:56:4a:9f:51:e6:c0:7a:56:99:6c:cf:d8:aa:e4:8d:12:
43:4c:d0:e7:75:54:aa:b3:12:6f:3f:1e:58:62:52:fe:4b:37:
27:f8:83:77:15:37:a6:8e:86:41:bd:d1:1f:3e:51:28:e8:8a:
a4:74:ba:d2:f9:ed:f1:95:de:c1:6f:b7:ae:29:38:15:e4:59:
cf:b5:a0:a1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ2sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTI0MDU2WhcNMjUwMjAxMTI0MDU2WjAYMRYw
FAYDVQQDEw02NzhmOTVlMi0yOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvwSbQq8occ5hLIhf4FzcgerNwpGm48ZJcAazQRzKq/Uyf7ukFGNUra7z
95mdWG8gS5DFx2bPy/zKaUJ6HQ7buGJuafd5R87I3bTYVoOzKhcvasz/Qgb7DYO7
SLvVdqwcsv47LIs+l7m2KcKlW5sqBdmnSyD7X10xQvfIWUOMll9m9J/fkOQV6XtA
9HtaCKDGeuzHHuJFNretfDtgYzi1O/7j7NL/DQLGkyRbBxnM5Msr1axis1jcylik
pSYYZZ+BeP5ApkS8dfOcK9bI3JooWQ7fYkB6/IEtZMXUPZRHTmugpzq1vUkrQbIE
eyoD3VI0SU+NcrrTdei5X0BcPjjIWQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIan
m8vY+9oVcdt37Y9Notx8/saDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQjI4RjdCMkQ3RjQxMUVGQjlEN0I1OEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPb3MA0GCSqGSIb3DQEBCwUA
A4IBAQAFWXTq0fe7IPKtaRDuIA8Hag86+kk2c27T91cpBzK4S9ssZI+vpa+2nJ4K
GM+HgC8wBO1AQs+Ovij25R+G5xL3H0i3jNcicm6H/TCPgDPDr/0yEcc6qxEaHMoG
Mu9Cy+4COxwhR6r37b937jcKRWuiyNA0RnAlJRGII/RQeHfkBc4R+Gqah8/V5iWr
H7yRrVRRpqHsDbhyv69Trhje22btiPP/WeKuczgcn6eeZx+2ECzA6wUOfFZKn1Hm
wHpWmWzP2KrkjRJDTNDndVSqsxJvPx5YYlL+Szcn+IN3FTemjoZBvdEfPlEo6Iqk
dLrS+e3xld7Bb7euKTgV5FnPtaCh
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:39 2025 by rpki-client