Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/C5A3761CEDD911EFA5DF909F762E951A.roa
File: C5A3761CEDD911EFA5DF909F762E951A.roa (raw, json)
Hash identifier: hZfV1xEAL1sT3W1eG7s8f3Z0rtLuoAUEZBkWsBcTbHY=
Subject key identifier: 07:47:84:04:A5:15:05:AA:1B:07:B3:24:9A:BD:8D:02:AA:DD:B7:E3
Certificate issuer: /CN=F364FE7FAR/serialNumber=651E91968E3171C17CEEC0C449178EE7E1497418
Certificate serial: 0324
Authority key identifier: 65:1E:91:96:8E:31:71:C1:7C:EE:C0:C4:49:17:8E:E7:E1:49:74:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/ZR6Rlo4xccF87sDESReO5-FJdBg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/C5A3761CEDD911EFA5DF909F762E951A.roa
Signing time: Tue 18 Feb 2025 09:21:45 +0000
ROA not before: Tue 18 Feb 2025 09:21:41 +0000
ROA not after: Thu 28 Feb 2030 09:21:41 +0000
asID: 328200
IP address blocks: 156.38.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804 (0x324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364FE7FAR
Validity
Not Before: Feb 18 09:21:41 2025 GMT
Not After : Feb 28 09:21:41 2030 GMT
Subject: CN=67b45129-9fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:b8:39:13:18:ba:11:b9:96:48:48:4f:e8:
03:ff:15:36:fb:b5:93:2d:37:15:f7:7a:f1:a7:f2:
a9:10:00:11:c2:2a:1b:6f:14:b6:0f:83:dd:70:7d:
63:71:76:cd:21:80:58:70:9c:88:25:e5:a6:64:7e:
4f:ee:07:26:f0:35:58:97:f5:a1:41:b2:3a:26:8e:
eb:22:8d:f9:3c:e3:90:d2:ea:1e:16:e9:c5:2f:23:
22:b1:59:1e:d8:29:34:69:39:29:f4:77:bf:66:2d:
91:3c:fe:eb:54:9d:40:e5:91:d0:27:2b:65:f0:54:
07:d4:a6:d7:a5:f3:46:af:d8:e4:cb:7c:bf:fa:39:
c8:ff:7f:81:d5:7b:2c:1c:74:bb:49:99:6b:40:03:
e4:64:69:2a:17:42:83:56:49:ca:19:38:06:73:b9:
38:c0:cf:33:dd:8a:74:07:e6:9e:b3:e1:ad:f6:83:
c4:c7:ba:9d:56:bd:37:dc:e6:0e:0a:61:11:ca:bd:
0c:d5:12:bb:b7:c4:7d:34:e6:40:07:71:cf:57:04:
27:56:6d:66:06:a9:8a:e3:c5:a6:94:50:4e:63:b0:
47:e1:42:10:47:64:90:72:2c:b5:a8:11:8b:1c:3c:
4d:f9:32:00:df:86:77:f1:ec:d5:08:21:3d:d0:3d:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:84:04:A5:15:05:AA:1B:07:B3:24:9A:BD:8D:02:AA:DD:B7:E3
X509v3 Authority Key Identifier:
keyid:65:1E:91:96:8E:31:71:C1:7C:EE:C0:C4:49:17:8E:E7:E1:49:74:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZR6Rlo4xccF87sDESReO5-FJdBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/C5A3761CEDD911EFA5DF909F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.38.32.0/19
Signature Algorithm: sha256WithRSAEncryption
37:44:db:93:91:5e:53:29:d2:ee:51:fe:ee:60:51:8a:94:e3:
65:f2:22:a8:ca:b4:ff:de:8c:1d:89:b8:ff:24:01:61:9e:b2:
42:60:94:df:8e:45:52:9a:46:8f:bf:86:72:b4:f9:5b:50:14:
08:40:e6:1a:cd:d1:89:11:bc:09:be:1a:65:f8:42:f6:61:10:
02:ea:16:a6:3c:6c:65:a8:b3:bf:d7:da:11:0b:fb:4a:70:43:
5d:c3:de:8c:02:4d:75:71:8a:06:f1:30:0a:c0:7d:0a:c8:4d:
98:10:a9:57:3a:36:cb:92:b8:2b:fe:a7:11:40:40:de:0f:df:
b9:8f:87:19:fc:5b:82:d2:e5:8f:bd:89:56:ae:f3:cd:e2:f8:
a7:c5:34:2e:e1:1d:ea:a5:58:93:c3:07:71:26:41:6c:8e:8a:
53:fc:1d:2e:82:ba:6c:da:ec:d1:b2:81:90:3a:e9:b8:7a:ee:
ba:39:76:9f:15:7d:6b:3d:6b:33:5c:5a:df:b6:4a:89:f2:95:
72:1a:bf:9c:0f:83:02:ed:13:37:a4:38:7a:52:52:f4:4a:4c:
ae:0c:90:d7:63:52:cf:76:a2:34:e0:26:25:28:5c:8e:78:0a:
87:ab:48:ee:3d:fe:c4:61:fe:b6:1e:a8:05:6d:2f:ab:cb:99:
60:51:78:ca
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEZFN0ZBUjExMC8GA1UEBRMoNjUxRTkxOTY4RTMxNzFDMTdDRUVDMEM0NDkxNzhF
RTdFMTQ5NzQxODAeFw0yNTAyMTgwOTIxNDFaFw0zMDAyMjgwOTIxNDFaMBgxFjAU
BgNVBAMTDTY3YjQ1MTI5LTlmY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNiLg5Exi6EbmWSEhP6AP/FTb7tZMtNxX3evGn8qkQABHCKhtvFLYPg91w
fWNxds0hgFhwnIgl5aZkfk/uBybwNViX9aFBsjomjusijfk845DS6h4W6cUvIyKx
WR7YKTRpOSn0d79mLZE8/utUnUDlkdAnK2XwVAfUptel80av2OTLfL/6Ocj/f4HV
eywcdLtJmWtAA+RkaSoXQoNWScoZOAZzuTjAzzPdinQH5p6z4a32g8THup1WvTfc
5g4KYRHKvQzVEru3xH005kAHcc9XBCdWbWYGqYrjxaaUUE5jsEfhQhBHZJByLLWo
EYscPE35MgDfhnfx7NUIIT3QPfWRAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUB0eE
BKUVBaobB7Mkmr2NAqrdt+MwHwYDVR0jBBgwFoAUZR6Rlo4xccF87sDESReO5+FJ
dBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRGRTdGLzc4RTMxQjFFOTBCODExRURCRTI3N0RFQ0YxMjIyNDY4L1pSNlJs
bzR4Y2NGODdzREVTUmVPNS1GSmRCZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1pSNlJsbzR4Y2NGODdzREVTUmVPNS1GSmRCZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjRGRTdGLzc4RTMxQjFFOTBCODExRURCRTI3N0RFQ0YxMjIy
NDY4L0M1QTM3NjFDRUREOTExRUZBNURGOTA5Rjc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWcJiAwDQYJKoZIhvcNAQELBQAD
ggEBADdE25ORXlMp0u5R/u5gUYqU42XyIqjKtP/ejB2JuP8kAWGeskJglN+ORVKa
Ro+/hnK0+VtQFAhA5hrN0YkRvAm+GmX4QvZhEALqFqY8bGWos7/X2hEL+0pwQ13D
3owCTXVxigbxMArAfQrITZgQqVc6NsuSuCv+pxFAQN4P37mPhxn8W4LS5Y+9iVau
883i+KfFNC7hHeqlWJPDB3EmQWyOilP8HS6Cumza7NGygZA66bh67ro5dp8VfWs9
azNcWt+2SonylXIav5wPgwLtEzekOHpSUvRKTK4MkNdjUs92ojTgJiUoXI54Coer
SO49/sRh/rYeqAVtL6vLmWBReMo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:15:55 2025 by rpki-client