Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC61185AD52211EF8671A18E762E951A.roa
File: FC61185AD52211EF8671A18E762E951A.roa (raw, json)
Hash identifier: WmDMHpZtPdqiBbX2KrSRBv41yMhnzIJCRClBZir0Qbo=
Subject key identifier: F3:9B:10:CE:95:CC:8C:70:2F:DC:CD:50:D6:E0:F2:26:87:D6:2A:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC61185AD52211EF8671A18E762E951A.roa
Signing time: Fri 17 Jan 2025 22:32:51 +0000
ROA not before: Fri 17 Jan 2025 22:32:48 +0000
ROA not after: Mon 03 Feb 2025 22:32:48 +0000
asID: 5068
IP address blocks: 156.224.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68336 (0x10af0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 22:32:48 2025 GMT
Not After : Feb 3 22:32:48 2025 GMT
Subject: CN=678ada93-7f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:fa:39:5d:89:9c:32:8d:b6:29:dd:43:2e:
c5:48:f5:77:7a:bd:16:b0:f6:d3:ff:3a:00:d1:46:
32:94:5f:e7:3e:e9:90:b6:d7:a0:91:5a:14:75:ef:
e9:57:f4:d6:19:eb:b0:45:68:30:9d:dc:ad:51:60:
4c:77:12:79:96:92:62:6e:73:0f:5d:c8:e1:d4:1c:
02:1a:4c:9b:ea:ea:4a:3a:2c:20:86:62:df:ae:3e:
6b:ae:f0:74:03:3f:60:8c:a9:bf:25:ee:6c:d5:2b:
1c:79:c9:be:53:10:0d:c7:2b:c0:6a:86:6e:f2:39:
fa:fa:fe:45:1a:4d:3a:77:f9:b2:c8:5a:5e:28:bb:
40:1b:d7:65:e3:a3:9a:fd:fa:90:1b:73:73:b5:2c:
2c:70:f1:00:02:64:21:da:78:ee:1b:3c:15:32:2a:
55:dc:8e:22:15:55:76:cb:e0:8c:b6:27:a9:eb:ba:
0c:e1:8d:33:f7:5d:1c:7b:a4:d1:43:15:46:b0:06:
05:f7:1f:11:e9:44:9c:51:b2:cb:7a:e1:98:09:22:
61:5f:cb:b3:47:14:ab:bb:77:b8:21:55:52:d3:68:
ad:19:17:5e:bf:07:a5:9b:b2:52:54:d9:da:3b:70:
b5:18:9a:03:a0:ab:a9:38:ba:2e:27:6e:3c:11:3a:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9B:10:CE:95:CC:8C:70:2F:DC:CD:50:D6:E0:F2:26:87:D6:2A:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC61185AD52211EF8671A18E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.92.0/22
Signature Algorithm: sha256WithRSAEncryption
64:ba:0e:72:f5:ec:fe:d2:ce:96:1f:4a:b2:cf:ef:6e:88:e5:
7b:ee:34:d7:a0:df:e9:70:4c:fa:94:d2:47:05:8e:69:24:fa:
ac:07:c6:e2:3d:a3:08:9c:ed:20:9c:b9:ce:f4:fb:8a:44:fa:
7c:10:9c:e5:e7:e5:93:2e:0c:ce:fd:11:6e:76:16:00:55:a9:
7b:dc:7a:7a:04:16:87:e7:a9:a4:5f:48:09:8b:31:6c:ba:6d:
a7:ee:ce:b8:1f:21:30:9e:7c:6c:f8:05:7a:a7:4a:c2:93:3b:
c9:16:a0:0f:96:53:ad:c1:b5:9b:06:bf:7e:0c:20:07:f1:51:
eb:25:f6:b4:e6:99:fe:25:0d:7a:69:dc:cf:2d:50:40:50:e4:
44:39:80:09:ba:ec:17:7d:77:38:bf:9e:e2:a6:fa:00:34:5a:
38:09:be:28:e6:55:7d:98:78:51:e8:42:1a:cc:37:cd:93:fc:
b0:3c:44:9c:d8:ca:25:1d:ef:4c:0d:70:1d:1a:52:6d:07:90:
69:bc:2c:3c:2e:67:70:0b:6a:57:fd:25:2e:51:e1:ca:17:c4:
bd:72:44:0f:ae:3a:5c:2b:23:ca:dd:df:5a:a2:f5:c2:8b:ec:
58:dc:5a:cd:91:63:00:8b:2f:ee:01:fc:1e:8e:a5:21:6c:0b:
0f:58:5c:77
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQrwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MjIzMjQ4WhcNMjUwMjAzMjIzMjQ4WjAYMRYw
FAYDVQQDEw02NzhhZGE5My03Zjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1tL6OV2JnDKNtindQy7FSPV3er0WsPbT/zoA0UYylF/nPumQttegkVoU
de/pV/TWGeuwRWgwndytUWBMdxJ5lpJibnMPXcjh1BwCGkyb6upKOiwghmLfrj5r
rvB0Az9gjKm/Je5s1Sscecm+UxANxyvAaoZu8jn6+v5FGk06d/myyFpeKLtAG9dl
46Oa/fqQG3NztSwscPEAAmQh2njuGzwVMipV3I4iFVV2y+CMtiep67oM4Y0z910c
e6TRQxVGsAYF9x8R6UScUbLLeuGYCSJhX8uzRxSru3e4IVVS02itGRdevwelm7JS
VNnaO3C1GJoDoKupOLouJ248ETqinwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPOb
EM6VzIxwL9zNUNbg8iaH1io6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQzYxMTg1QUQ1MjIxMUVGODY3MUExOEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOBcMA0GCSqGSIb3DQEBCwUA
A4IBAQBkug5y9ez+0s6WH0qyz+9uiOV77jTXoN/pcEz6lNJHBY5pJPqsB8biPaMI
nO0gnLnO9PuKRPp8EJzl5+WTLgzO/RFudhYAVal73Hp6BBaH56mkX0gJizFsum2n
7s64HyEwnnxs+AV6p0rCkzvJFqAPllOtwbWbBr9+DCAH8VHrJfa05pn+JQ16adzP
LVBAUOREOYAJuuwXfXc4v57ipvoANFo4Cb4o5lV9mHhR6EIazDfNk/ywPESc2Mol
He9MDXAdGlJtB5BpvCw8LmdwC2pX/SUuUeHKF8S9ckQPrjpcKyPK3d9aovXCi+xY
3FrNkWMAiy/uAfwejqUhbAsPWFx3
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:36 2025 by rpki-client