Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A488080F88611EF9DA38D78762E951A.roa
File: 0A488080F88611EF9DA38D78762E951A.roa (raw, json)
Hash identifier: 8DZDxmmMD/NcHmGziFmkdDXMNzTpovK83vkxR+QFyWI=
Subject key identifier: 71:ED:29:D6:ED:31:F5:F5:B2:17:1E:D7:E7:B4:3A:AB:0C:45:AD:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014283
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A488080F88611EF9DA38D78762E951A.roa
Signing time: Mon 03 Mar 2025 23:20:05 +0000
ROA not before: Mon 03 Mar 2025 23:20:02 +0000
ROA not after: Sat 12 Apr 2025 23:20:02 +0000
asID: 61112
IP address blocks: 156.224.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82563 (0x14283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 23:20:02 2025 GMT
Not After : Apr 12 23:20:02 2025 GMT
Subject: CN=67c63925-d87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:6a:95:d7:92:3d:50:6c:11:86:4c:ef:8f:
a1:a7:f2:36:58:9d:a9:fa:a5:ce:7e:77:4a:6c:35:
b7:13:69:eb:c9:0f:f0:98:ef:5d:26:7a:f9:ce:ec:
2c:f5:19:d3:65:f0:c4:23:af:53:12:8f:4f:ed:f3:
27:3c:8c:c4:ab:c9:44:ed:f6:8f:ca:66:2c:ae:a1:
6c:b7:7d:28:17:87:49:ad:2d:29:22:60:88:fa:3e:
b2:bd:30:77:e9:e3:e7:b8:66:20:ef:9c:37:eb:c0:
c4:6b:dc:49:8a:5f:40:b3:e2:8d:4c:b6:bd:9c:e5:
1e:31:d8:96:24:63:6a:87:20:41:90:db:e6:92:8a:
1d:b3:04:03:ab:29:d1:07:38:e7:b7:ab:cb:91:02:
d5:9c:62:57:5b:f6:da:00:78:2f:21:83:4b:16:df:
cd:9e:f0:fe:5b:d2:40:b3:5a:c4:2d:87:3c:f4:5f:
bf:84:e8:05:4c:33:43:5f:08:51:b9:1b:e0:25:dc:
79:40:46:7f:f7:62:8f:81:23:f3:14:af:76:a0:80:
4d:51:62:0f:ad:75:62:2c:fd:0e:b4:34:b7:42:48:
8c:33:79:e9:5b:6c:64:12:2a:4e:0e:f3:e3:b4:ea:
b3:6b:0b:a2:ab:2d:22:87:01:2d:bf:e3:d2:2b:11:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:ED:29:D6:ED:31:F5:F5:B2:17:1E:D7:E7:B4:3A:AB:0C:45:AD:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A488080F88611EF9DA38D78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.76.0/22
Signature Algorithm: sha256WithRSAEncryption
94:aa:b6:92:0c:aa:83:6e:23:0c:e9:d8:89:2c:03:05:22:ed:
51:71:cf:19:ac:25:1d:6d:47:75:e8:9e:0e:6c:f8:bf:85:1d:
99:31:86:af:05:b0:78:d8:9f:80:40:a1:4e:a4:b8:fa:dc:68:
7f:52:da:ca:23:dc:91:1c:73:dd:a3:db:12:83:1e:a0:d7:7d:
7b:bd:91:d9:40:75:b3:05:5d:a2:a9:6e:20:0d:f5:03:a7:dd:
b9:46:02:51:00:cf:ca:9f:ea:0d:8c:a3:9a:52:de:b0:e2:b1:
41:50:6b:db:08:34:83:f4:71:75:60:fd:ce:8c:28:2a:7a:8e:
d9:31:05:2c:82:0a:8c:dd:45:56:6a:fb:7d:e8:1e:69:e9:9a:
51:61:6b:1b:81:85:c0:58:2d:94:90:aa:a0:7f:e5:c5:46:ad:
4a:6d:67:f2:98:13:1d:7d:d0:50:f4:27:9d:d2:06:f4:4f:84:
9b:fb:a6:9b:35:2d:ee:b3:8a:b3:c8:ae:99:de:04:42:1a:83:
ed:3a:8c:b8:f7:f3:03:b9:bd:61:95:4b:08:20:1f:f2:17:93:
47:22:34:ac:31:84:45:54:1c:cd:d6:7a:1e:2f:5d:e4:21:52:
9a:8a:92:21:42:63:b4:7b:9a:f1:21:52:ac:89:08:33:1e:a1:
ca:fa:3b:a5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUKDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzAzMjMyMDAyWhcNMjUwNDEyMjMyMDAyWjAYMRYw
FAYDVQQDEw02N2M2MzkyNS1kODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAusNqldeSPVBsEYZM74+hp/I2WJ2p+qXOfndKbDW3E2nryQ/wmO9dJnr5
zuws9RnTZfDEI69TEo9P7fMnPIzEq8lE7faPymYsrqFst30oF4dJrS0pImCI+j6y
vTB36ePnuGYg75w368DEa9xJil9As+KNTLa9nOUeMdiWJGNqhyBBkNvmkoodswQD
qynRBzjnt6vLkQLVnGJXW/baAHgvIYNLFt/NnvD+W9JAs1rELYc89F+/hOgFTDND
XwhRuRvgJdx5QEZ/92KPgSPzFK92oIBNUWIPrXViLP0OtDS3QkiMM3npW2xkEipO
DvPjtOqzawuiqy0ihwEtv+PSKxF8WQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHHt
KdbtMfX1shce1+e0OqsMRa0PMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQTQ4ODA4MEY4ODYxMUVGOURBMzhENzg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOBMMA0GCSqGSIb3DQEBCwUA
A4IBAQCUqraSDKqDbiMM6diJLAMFIu1Rcc8ZrCUdbUd16J4ObPi/hR2ZMYavBbB4
2J+AQKFOpLj63Gh/UtrKI9yRHHPdo9sSgx6g1317vZHZQHWzBV2iqW4gDfUDp925
RgJRAM/Kn+oNjKOaUt6w4rFBUGvbCDSD9HF1YP3OjCgqeo7ZMQUsggqM3UVWavt9
6B5p6ZpRYWsbgYXAWC2UkKqgf+XFRq1KbWfymBMdfdBQ9Ced0gb0T4Sb+6abNS3u
s4qzyK6Z3gRCGoPtOoy49/MDub1hlUsIIB/yF5NHIjSsMYRFVBzN1noeL13kIVKa
ipIhQmO0e5rxIVKsiQgzHqHK+jul
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:52 2025 by rpki-client