Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046C4990F46111EF959BA4AB762E951A.roa
File: 046C4990F46111EF959BA4AB762E951A.roa (raw, json)
Hash identifier: BEo9XerWVAWJSEAojiKi70MztgzwpNxm/z3SGxHezr8=
Subject key identifier: B6:9D:EC:1A:7B:18:92:A5:92:E1:D5:EE:F9:EC:0B:81:E2:0C:BE:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013505
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046C4990F46111EF959BA4AB762E951A.roa
Signing time: Wed 26 Feb 2025 16:44:59 +0000
ROA not before: Wed 26 Feb 2025 16:44:56 +0000
ROA not after: Sat 19 Feb 2028 16:44:56 +0000
asID: 17561
IP address blocks: 156.233.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79109 (0x13505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:44:56 2025 GMT
Not After : Feb 19 16:44:56 2028 GMT
Subject: CN=67bf450b-3487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:1b:07:ab:fd:bb:c2:9c:32:e2:08:05:4d:
70:50:e6:b0:d8:a6:c7:d7:bd:95:61:e8:ac:46:fd:
1c:1a:3a:b3:75:a5:a2:19:c1:93:5c:c1:c9:49:d3:
2a:b0:73:7b:d8:e4:f0:f4:f7:17:68:e7:23:9b:aa:
7e:fc:01:3a:57:88:6d:b9:f3:59:a2:62:f7:ed:9b:
03:99:a0:ff:94:46:80:98:e0:36:d3:3d:bd:36:09:
20:3a:14:bc:ad:82:1e:c5:7d:54:dd:51:51:91:96:
a0:7f:d1:21:6f:1b:dc:39:f0:b0:16:bc:32:b1:c1:
e9:55:5e:1a:fb:b5:f8:14:1e:7a:e3:97:8d:f0:07:
f6:27:b7:63:6a:1d:41:96:b8:ce:2d:62:1b:d1:c8:
b4:32:89:13:a5:be:bf:24:61:e9:2c:f7:2a:e9:d6:
08:57:53:52:a8:f1:78:4b:ce:58:40:cd:3e:2f:0b:
fd:bd:d6:7b:e7:34:0c:5a:ef:03:e0:98:10:4b:9e:
0e:19:d0:b8:5a:e7:e3:5a:3d:6e:c1:f0:aa:a1:7d:
83:a2:de:80:32:a4:8f:78:40:ad:4b:4f:e1:70:0c:
c1:f8:84:fc:c7:d6:5b:95:79:be:6a:17:d8:21:3a:
d0:4c:d3:80:c1:62:6e:6a:e7:25:c5:11:04:c6:de:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9D:EC:1A:7B:18:92:A5:92:E1:D5:EE:F9:EC:0B:81:E2:0C:BE:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046C4990F46111EF959BA4AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.37.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c2:1d:ba:df:9c:48:db:14:f9:b4:61:1f:05:5e:8b:49:7d:
20:bc:a7:66:a6:ae:ee:ad:0d:ac:d8:86:ef:9e:cc:2c:13:47:
2a:e1:05:44:71:bc:38:03:23:32:f9:13:91:7b:21:ac:f0:fe:
c6:4a:53:65:d5:f0:50:1c:5c:1a:58:cc:bb:df:7e:d0:3e:1d:
28:68:64:c8:32:b8:87:d4:43:36:60:02:0b:8c:43:0f:97:c1:
7a:d8:6a:6d:83:76:a2:8b:61:6e:77:98:7d:9e:08:fc:76:60:
9e:cb:79:c7:c3:9d:62:fa:06:f7:57:70:52:94:dd:85:c9:03:
95:02:63:4f:59:99:6f:eb:77:50:c2:c5:01:47:70:56:26:99:
57:bc:b4:3c:73:13:02:e4:4d:0b:ae:f4:2f:fb:73:16:33:1e:
04:e2:7d:2b:68:74:80:25:0b:06:37:88:36:4d:d9:56:a0:9e:
80:4b:ce:17:e8:10:49:dd:1a:58:08:3d:9f:96:66:8d:58:b0:
34:4b:38:ee:81:02:99:03:49:30:31:25:27:94:77:f9:de:ff:
18:ed:a8:01:fb:07:39:0e:27:3f:6e:1c:c7:ae:70:69:5c:b4:
cd:78:74:c0:8a:d1:34:43:8d:a4:b1:0c:00:a3:62:30:5d:e4:
8e:ae:81:cc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATUFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTY0NDU2WhcNMjgwMjE5MTY0NDU2WjAYMRYw
FAYDVQQDEw02N2JmNDUwYi0zNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwoQbB6v9u8KcMuIIBU1wUOaw2KbH172VYeisRv0cGjqzdaWiGcGTXMHJ
SdMqsHN72OTw9PcXaOcjm6p+/AE6V4htufNZomL37ZsDmaD/lEaAmOA20z29Ngkg
OhS8rYIexX1U3VFRkZagf9EhbxvcOfCwFrwyscHpVV4a+7X4FB5645eN8Af2J7dj
ah1BlrjOLWIb0ci0MokTpb6/JGHpLPcq6dYIV1NSqPF4S85YQM0+Lwv9vdZ75zQM
Wu8D4JgQS54OGdC4WufjWj1uwfCqoX2Dot6AMqSPeECtS0/hcAzB+IT8x9ZblXm+
ahfYITrQTNOAwWJuauclxREExt4z9wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLad
7Bp7GJKlkuHV7vnsC4HiDL6NMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNDZDNDk5MEY0NjExMUVGOTU5QkE0QUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOklMA0GCSqGSIb3DQEBCwUA
A4IBAQAiwh2635xI2xT5tGEfBV6LSX0gvKdmpq7urQ2s2IbvnswsE0cq4QVEcbw4
AyMy+ROReyGs8P7GSlNl1fBQHFwaWMy7337QPh0oaGTIMriH1EM2YAILjEMPl8F6
2Gptg3aii2Fud5h9ngj8dmCey3nHw51i+gb3V3BSlN2FyQOVAmNPWZlv63dQwsUB
R3BWJplXvLQ8cxMC5E0LrvQv+3MWMx4E4n0raHSAJQsGN4g2TdlWoJ6AS84X6BBJ
3RpYCD2flmaNWLA0SzjugQKZA0kwMSUnlHf53v8Y7agB+wc5Dic/bhzHrnBpXLTN
eHTAitE0Q42ksQwAo2IwXeSOroHM
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:04 2025 by rpki-client