Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB2D3BA0D56B11EFBE27677D762E951A.roa
File: FB2D3BA0D56B11EFBE27677D762E951A.roa (raw, json)
Hash identifier: OAMZTgiCRQ+CQkPs0Uy6pR8g4yDBEW1kXajcJF9HTJk=
Subject key identifier: 0C:9E:1E:29:C9:66:98:77:4C:B5:FC:6D:36:E7:13:42:6E:5E:7C:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB2D3BA0D56B11EFBE27677D762E951A.roa
Signing time: Sat 18 Jan 2025 07:15:22 +0000
ROA not before: Sat 18 Jan 2025 07:15:19 +0000
ROA not after: Sat 22 Feb 2025 07:15:19 +0000
asID: 18013
IP address blocks: 156.239.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68369 (0x10b11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 07:15:19 2025 GMT
Not After : Feb 22 07:15:19 2025 GMT
Subject: CN=678b550a-37d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:92:c0:d2:c2:b8:a7:85:77:1a:15:ba:95:58:
08:8a:6a:24:69:9e:a7:3b:92:3e:14:18:06:93:69:
c7:a8:34:25:b6:ea:b0:55:2a:b1:a9:14:a9:ac:f8:
81:7b:9c:92:19:d2:8a:3f:f0:20:90:59:7a:21:02:
85:11:98:b5:00:20:90:85:9c:f5:95:62:b7:14:d8:
57:42:1e:a0:66:d8:90:38:f8:53:8b:7c:16:e3:d2:
df:8c:cf:23:82:89:21:70:f0:8d:85:87:36:e3:f7:
9c:b4:85:5e:0c:c2:26:5e:68:ca:38:87:ab:3d:19:
44:7b:97:0e:ef:44:13:5c:ef:5f:83:00:55:35:63:
b6:fa:b4:58:b3:ca:7c:82:3d:1d:fd:68:c0:d0:e5:
db:66:fe:b9:c8:f4:54:de:62:18:55:2a:d5:5c:fa:
38:9a:07:2f:38:f0:25:06:39:38:e6:e1:04:69:cc:
f2:be:6e:e1:98:2b:88:31:d2:dd:94:bc:7d:cc:ff:
2f:a4:e9:06:0f:6c:a4:3c:61:ae:b5:f0:a9:57:a3:
02:e6:22:b3:44:d1:bf:ce:e4:db:ea:c2:7a:c6:e9:
55:52:21:6b:00:f9:2c:02:e8:8c:00:17:ff:e2:d6:
4e:0b:4a:94:2e:25:e7:ea:84:e7:22:55:5d:09:a5:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9E:1E:29:C9:66:98:77:4C:B5:FC:6D:36:E7:13:42:6E:5E:7C:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB2D3BA0D56B11EFBE27677D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.48.0/22
Signature Algorithm: sha256WithRSAEncryption
87:f7:c0:ea:35:ae:07:5a:ae:ea:8d:06:9d:9d:83:15:5d:1a:
44:4f:bd:62:64:73:d8:fe:7d:3d:f3:d2:83:18:59:37:9e:fa:
04:32:9c:6b:36:a8:47:9c:f7:fb:f7:1f:48:a4:f7:d6:76:eb:
d7:3d:80:3b:ee:c3:fb:b9:11:d0:36:d0:95:da:e6:55:97:13:
43:ec:bc:dc:f2:ac:ab:c8:38:ed:82:e3:e3:d9:08:2a:4f:81:
6c:d1:9e:44:fb:a6:9b:5b:2e:28:dc:92:36:a4:08:03:69:55:
8f:7a:af:76:61:51:d1:c1:0f:94:5f:47:a3:5f:e5:34:01:78:
95:28:43:f9:81:f4:a3:bd:19:e9:71:13:9e:3c:de:2c:1f:0d:
0c:c3:34:da:96:4b:39:e9:66:4a:bc:91:0c:f6:9f:cb:be:6b:
50:05:71:b1:16:80:b3:56:6a:2d:e7:25:4b:f6:a7:06:fa:22:
b1:92:24:34:bf:75:f4:0b:7d:ee:ab:fe:b1:17:e2:70:45:07:
8a:66:ca:44:49:e2:03:e7:03:23:4f:cd:b2:d2:30:5b:e6:91:
39:5f:75:3e:22:03:55:05:fb:26:10:53:72:fe:61:7d:79:6e:
2e:97:a2:11:64:b0:2b:00:57:36:ea:ee:a7:87:2b:5f:29:c4:
fd:dd:76:73
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQsRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MDcxNTE5WhcNMjUwMjIyMDcxNTE5WjAYMRYw
FAYDVQQDEw02NzhiNTUwYS0zN2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA15LA0sK4p4V3GhW6lVgIimokaZ6nO5I+FBgGk2nHqDQltuqwVSqxqRSp
rPiBe5ySGdKKP/AgkFl6IQKFEZi1ACCQhZz1lWK3FNhXQh6gZtiQOPhTi3wW49Lf
jM8jgokhcPCNhYc24/ectIVeDMImXmjKOIerPRlEe5cO70QTXO9fgwBVNWO2+rRY
s8p8gj0d/WjA0OXbZv65yPRU3mIYVSrVXPo4mgcvOPAlBjk45uEEaczyvm7hmCuI
MdLdlLx9zP8vpOkGD2ykPGGutfCpV6MC5iKzRNG/zuTb6sJ6xulVUiFrAPksAuiM
ABf/4tZOC0qULiXn6oTnIlVdCaUijwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAye
HinJZph3TLX8bTbnE0JuXny3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQjJEM0JBMEQ1NkIxMUVGQkUyNzY3N0Q3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnO8wMA0GCSqGSIb3DQEBCwUA
A4IBAQCH98DqNa4HWq7qjQadnYMVXRpET71iZHPY/n0989KDGFk3nvoEMpxrNqhH
nPf79x9IpPfWduvXPYA77sP7uRHQNtCV2uZVlxND7Lzc8qyryDjtguPj2QgqT4Fs
0Z5E+6abWy4o3JI2pAgDaVWPeq92YVHRwQ+UX0ejX+U0AXiVKEP5gfSjvRnpcROe
PN4sHw0MwzTalks56WZKvJEM9p/LvmtQBXGxFoCzVmot5yVL9qcG+iKxkiQ0v3X0
C33uq/6xF+JwRQeKZspESeID5wMjT82y0jBb5pE5X3U+IgNVBfsmEFNy/mF9eW4u
l6IRZLArAFc26u6nhytfKcT93XZz
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:35 2025 by rpki-client