Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0ACEB7A2FB3511EFBD62ABAB762E951A.roa
File: 0ACEB7A2FB3511EFBD62ABAB762E951A.roa (raw, json)
Hash identifier: 1yAtHURDWbxzKgKulZco/mwztqnoDdQKHjZ/XdStgM8=
Subject key identifier: 6A:37:23:9C:0A:DA:97:AB:12:D9:3C:78:DE:5A:09:0B:38:50:49:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0ACEB7A2FB3511EFBD62ABAB762E951A.roa
Signing time: Fri 07 Mar 2025 09:17:51 +0000
ROA not before: Fri 07 Mar 2025 09:17:46 +0000
ROA not after: Fri 11 Apr 2025 09:17:46 +0000
asID: 400536
IP address blocks: 156.229.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82940 (0x143fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 09:17:46 2025 GMT
Not After : Apr 11 09:17:46 2025 GMT
Subject: CN=67cab9be-2b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:94:a3:6b:33:8a:6e:b1:ec:e5:ee:da:da:64:
97:24:77:58:49:4b:92:5a:6f:27:fe:2b:66:09:64:
85:e7:b0:4b:a8:96:71:bb:23:12:4a:76:6a:44:39:
fb:95:06:2e:e6:15:21:bf:d7:17:b6:b9:23:3a:6c:
3a:91:b6:9e:bc:30:18:3e:6f:53:02:0c:f4:15:10:
5d:6b:68:30:01:86:18:ce:14:3e:b4:f2:6e:39:d0:
af:ef:d4:aa:d3:a1:56:e5:cd:a8:1e:97:19:77:e5:
c9:c8:5e:b9:34:17:46:9c:a0:ef:b5:d3:7a:22:c2:
95:2b:ad:cb:c3:d3:df:0b:97:19:ed:d5:c6:6e:a8:
96:83:f2:e2:4f:c4:2a:90:c4:39:ac:85:c8:c9:6c:
d0:e5:8a:02:02:be:f2:27:bf:89:25:98:65:d7:9e:
a1:31:38:dc:30:78:d1:da:0d:6d:9d:63:83:1d:5a:
c8:4c:fd:a5:9d:b9:d0:3a:a7:2e:d1:c1:00:2c:34:
98:22:a9:16:47:9d:b7:23:ba:52:29:3f:e7:71:0d:
f5:9e:ef:a2:c4:1f:fd:82:c1:f0:f0:62:bc:59:5e:
37:3d:ed:87:20:b1:0f:c8:bf:74:f1:99:c1:27:fb:
44:8d:a0:21:a3:9f:8b:b4:30:d3:d8:da:a0:f0:17:
dc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:37:23:9C:0A:DA:97:AB:12:D9:3C:78:DE:5A:09:0B:38:50:49:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0ACEB7A2FB3511EFBD62ABAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.120.0/23
Signature Algorithm: sha256WithRSAEncryption
40:d1:49:22:b6:f5:60:06:24:d7:91:07:74:da:6d:22:44:66:
48:1e:35:7f:91:6f:7b:08:49:75:3c:bb:b7:90:ab:15:8f:77:
af:05:07:69:7f:71:64:aa:d8:e9:87:31:d5:b3:1c:58:72:be:
45:14:3f:9c:ea:c9:db:05:82:62:ef:58:1e:c1:47:df:cb:2d:
6c:06:00:5e:4f:ec:be:90:a0:47:b3:f2:ed:05:7d:db:5d:74:
ad:80:fe:88:32:00:07:fd:44:fd:75:26:fd:cd:3d:f5:a5:33:
f1:eb:66:4d:d8:9b:1a:11:31:65:72:26:69:cf:74:09:22:cf:
b0:f1:77:16:81:da:33:d1:be:19:87:1e:96:11:2a:81:eb:c4:
5d:c8:c5:52:94:c1:18:0d:80:fd:6f:a0:2b:4b:76:fc:8e:9c:
ca:aa:c3:16:22:1e:8e:cf:d9:c0:97:90:5d:68:31:73:55:75:
d9:3c:99:bc:38:2d:2a:50:af:d6:f7:62:0e:4a:cd:14:e5:e2:
ca:93:87:23:d9:1e:de:e8:20:25:b7:f0:8f:6d:e8:b1:ae:50:
71:00:a4:2d:74:ea:15:33:d6:86:75:da:b2:67:76:cc:29:41:
76:ec:0d:06:42:f0:6f:4d:ae:1c:e6:8b:c6:00:8a:90:2e:81:
97:36:10:d3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUP8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA3MDkxNzQ2WhcNMjUwNDExMDkxNzQ2WjAYMRYw
FAYDVQQDEw02N2NhYjliZS0yYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8pSjazOKbrHs5e7a2mSXJHdYSUuSWm8n/itmCWSF57BLqJZxuyMSSnZq
RDn7lQYu5hUhv9cXtrkjOmw6kbaevDAYPm9TAgz0FRBda2gwAYYYzhQ+tPJuOdCv
79Sq06FW5c2oHpcZd+XJyF65NBdGnKDvtdN6IsKVK63Lw9PfC5cZ7dXGbqiWg/Li
T8QqkMQ5rIXIyWzQ5YoCAr7yJ7+JJZhl156hMTjcMHjR2g1tnWODHVrITP2lnbnQ
Oqcu0cEALDSYIqkWR523I7pSKT/ncQ31nu+ixB/9gsHw8GK8WV43Pe2HILEPyL90
8ZnBJ/tEjaAho5+LtDDT2Nqg8BfcUwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGo3
I5wK2perEtk8eN5aCQs4UEk3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQUNFQjdBMkZCMzUxMUVGQkQ2MkFCQUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOV4MA0GCSqGSIb3DQEBCwUA
A4IBAQBA0UkitvVgBiTXkQd02m0iRGZIHjV/kW97CEl1PLu3kKsVj3evBQdpf3Fk
qtjphzHVsxxYcr5FFD+c6snbBYJi71gewUffyy1sBgBeT+y+kKBHs/LtBX3bXXSt
gP6IMgAH/UT9dSb9zT31pTPx62ZN2JsaETFlciZpz3QJIs+w8XcWgdoz0b4Zhx6W
ESqB68RdyMVSlMEYDYD9b6ArS3b8jpzKqsMWIh6Oz9nAl5BdaDFzVXXZPJm8OC0q
UK/W92IOSs0U5eLKk4cj2R7e6CAlt/CPbeixrlBxAKQtdOoVM9aGddqyZ3bMKUF2
7A0GQvBvTa4c5ovGAIqQLoGXNhDT
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:43 2025 by rpki-client