Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14E03968FE4711EF9566D05E762E951A.roa
File: 14E03968FE4711EF9566D05E762E951A.roa (raw, json)
Hash identifier: ztpz729oUaCGRCr0NQcGGah7mGgUTVx3K3xNmyAF98Q=
Subject key identifier: AB:FF:F3:2E:9D:F8:53:83:18:A1:01:E1:17:FE:58:94:ED:8B:04:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14E03968FE4711EF9566D05E762E951A.roa
Signing time: Tue 11 Mar 2025 07:04:32 +0000
ROA not before: Tue 11 Mar 2025 07:04:28 +0000
ROA not after: Thu 08 May 2025 07:04:28 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83139 (0x144c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 07:04:28 2025 GMT
Not After : May 8 07:04:28 2025 GMT
Subject: CN=67cfe080-92cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:7b:a3:a9:73:b6:7b:7a:de:55:e0:b2:d2:
93:12:88:d6:ba:d9:5b:65:5b:75:be:c7:0d:47:b7:
7b:16:9a:4c:6f:72:4b:9c:01:d6:60:b2:05:e6:65:
87:b7:1a:51:6e:3a:94:a0:b6:66:95:58:b3:ad:a0:
a6:1e:bd:5f:d7:f0:a8:cf:6a:d2:ed:81:b4:9b:5d:
ef:4b:80:84:cc:1f:e7:74:fb:72:68:a8:7b:2d:ad:
ba:a3:fa:37:40:9a:f6:9b:03:0b:90:c1:9d:b9:a7:
4c:a1:29:05:8b:b0:34:58:40:dc:fe:f5:9e:91:cd:
7a:eb:f7:44:55:9d:55:52:70:92:29:a6:8a:97:6e:
e0:23:2c:a4:8e:2b:5b:01:68:24:9e:1d:c9:d4:48:
06:1b:d1:93:2d:49:d3:ec:98:ad:82:da:ff:62:68:
a8:a2:ad:30:d1:97:6e:90:db:df:a1:f3:ac:a7:68:
5c:e0:5c:63:2d:1a:04:16:50:39:7c:43:44:b3:3e:
f1:b5:d2:72:e5:86:be:7b:d0:48:55:dc:35:07:2e:
da:5b:53:99:65:51:77:59:be:5f:52:c4:e7:89:f2:
f4:f5:eb:52:83:82:7d:1e:9f:4c:be:e8:a2:a0:fc:
5b:b0:75:fd:60:74:80:5f:8d:6d:fb:e6:0e:cb:fb:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FF:F3:2E:9D:F8:53:83:18:A1:01:E1:17:FE:58:94:ED:8B:04:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14E03968FE4711EF9566D05E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.112.0/21
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:23:b9:7c:e0:70:0b:0e:27:e3:85:68:55:8a:29:ed:5f:92:
3e:2c:06:be:03:f1:f5:a6:49:f5:6a:33:e4:10:b2:ae:6d:d4:
09:43:04:1e:44:62:7a:12:52:80:c3:7b:7f:c5:c5:77:d9:c7:
bb:22:2f:77:35:11:42:04:fa:29:f0:13:a7:13:4b:f7:c7:b0:
8f:c5:ae:66:2c:c4:b7:6c:cc:dc:99:c1:e6:6c:10:4a:11:8a:
f5:dd:e6:1a:bb:26:f1:48:0c:55:12:51:7e:ca:91:a5:56:b1:
ba:3d:c0:e6:fc:d9:7c:03:10:1e:10:09:ec:00:c1:5d:90:4d:
77:c3:a4:b9:ee:a3:d7:d5:f6:5b:d3:a9:4d:4d:3c:aa:c8:95:
7f:25:75:cc:c1:68:b3:d1:3a:7e:13:51:1c:4e:4e:1a:92:14:
ba:0b:8e:f5:9d:db:b5:cb:6a:c0:80:35:0c:32:85:5d:b5:e0:
28:89:3d:1b:42:d4:d6:3e:94:58:25:48:1f:a4:17:e0:10:94:
09:8c:d4:b5:ed:02:7e:11:3a:7f:71:86:c5:e0:d4:b7:cd:f6:
19:8a:8f:62:b0:de:29:86:36:82:3b:dc:ed:91:9d:ab:a4:02:
8d:44:ee:11:bf:33:89:32:f2:16:43:ba:57:a6:37:16:01:85:
d5:72:d7:8a
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAUTDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzExMDcwNDI4WhcNMjUwNTA4MDcwNDI4WjAYMRYw
FAYDVQQDEw02N2NmZTA4MC05MmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsCJ7o6lztnt63lXgstKTEojWutlbZVt1vscNR7d7FppMb3JLnAHWYLIF
5mWHtxpRbjqUoLZmlVizraCmHr1f1/Coz2rS7YG0m13vS4CEzB/ndPtyaKh7La26
o/o3QJr2mwMLkMGduadMoSkFi7A0WEDc/vWekc166/dEVZ1VUnCSKaaKl27gIyyk
jitbAWgknh3J1EgGG9GTLUnT7Jitgtr/Ymiooq0w0ZdukNvfofOsp2hc4FxjLRoE
FlA5fENEsz7xtdJy5Ya+e9BIVdw1By7aW1OZZVF3Wb5fUsTnifL09etSg4J9Hp9M
vuiioPxbsHX9YHSAX41t++YOy/u3FwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFKv/
8y6d+FODGKEB4Rf+WJTtiwSkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNEUwMzk2OEZFNDcxMUVGOTU2NkQwNUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCnOxgAwQDnOxwAwQCnOx8MA0G
CSqGSIb3DQEBCwUAA4IBAQBLI7l84HALDifjhWhViintX5I+LAa+A/H1pkn1ajPk
ELKubdQJQwQeRGJ6ElKAw3t/xcV32ce7Ii93NRFCBPop8BOnE0v3x7CPxa5mLMS3
bMzcmcHmbBBKEYr13eYauybxSAxVElF+ypGlVrG6PcDm/Nl8AxAeEAnsAMFdkE13
w6S57qPX1fZb06lNTTyqyJV/JXXMwWiz0Tp+E1EcTk4akhS6C471ndu1y2rAgDUM
MoVdteAoiT0bQtTWPpRYJUgfpBfgEJQJjNS17QJ+ETp/cYbF4NS3zfYZio9isN4p
hjaCO9ztkZ2rpAKNRO4RvzOJMvIWQ7pXpjcWAYXVcteK
-----END CERTIFICATE-----
Generated at Fri Apr 11 20:46:44 2025 by rpki-client