Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F7F4236F53911EFAF2EC680762E951A.roa
File: 1F7F4236F53911EFAF2EC680762E951A.roa (raw, json)
Hash identifier: 8HARQxnEtiW0FpulaOUUSShAdJ+jp3REWZ1tNcLIAUI=
Subject key identifier: FC:FA:B3:2B:FE:35:D9:7F:7E:A6:16:19:3F:03:6D:B5:35:7B:25:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013B66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F7F4236F53911EFAF2EC680762E951A.roa
Signing time: Thu 27 Feb 2025 18:31:56 +0000
ROA not before: Thu 27 Feb 2025 18:31:52 +0000
ROA not after: Sat 05 Apr 2025 18:31:52 +0000
asID: 205125
IP address blocks: 156.255.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80742 (0x13b66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 18:31:52 2025 GMT
Not After : Apr 5 18:31:52 2025 GMT
Subject: CN=67c0af9c-0357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1a:3e:f9:ef:74:c7:25:ab:bb:a1:93:1d:c6:
41:ef:8f:50:60:4e:97:53:dd:6a:8d:5b:ba:a6:03:
a1:80:e7:2e:3d:4c:7f:ff:1e:fa:d1:c9:5d:ea:49:
50:18:5d:bf:ac:86:c4:e9:1d:63:75:db:ef:38:fe:
26:b8:99:cf:b8:ee:d6:96:f3:16:0c:7c:4a:4c:1f:
c9:8b:9e:84:d6:ed:53:84:ac:cf:44:51:c3:f4:9e:
25:ce:4a:a8:a1:69:c0:4c:69:dd:96:63:06:85:bd:
56:6d:7a:c5:8e:33:bd:10:95:03:78:34:2f:79:9f:
61:37:02:b0:92:a6:53:2c:40:a1:95:13:be:42:8e:
51:70:d7:d4:52:d4:6f:3e:29:e9:87:d0:14:a7:43:
5d:44:af:1d:dc:e3:52:8d:e1:e8:54:d1:cb:60:86:
ab:eb:b4:39:62:86:32:08:fa:c6:b4:da:12:e9:6c:
4c:c1:9e:3c:f5:f0:fb:c0:98:2a:11:64:dd:88:58:
78:40:b1:85:af:86:fc:50:84:07:38:e6:45:27:3e:
70:77:e7:81:f2:a4:70:71:d3:54:ad:ed:fb:4d:49:
f7:84:0d:8b:21:d8:d1:9c:84:b7:7b:45:cc:ca:06:
1e:45:a5:0c:0d:87:87:31:50:00:0b:c4:2a:fd:d6:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FA:B3:2B:FE:35:D9:7F:7E:A6:16:19:3F:03:6D:B5:35:7B:25:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F7F4236F53911EFAF2EC680762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:aa:73:d0:4b:2e:b8:ec:af:81:04:95:99:8e:80:b8:a5:ed:
64:7a:53:8c:40:9a:e1:79:cd:0b:88:0f:1d:c5:5d:23:07:a1:
55:7e:47:aa:fe:9d:b8:b5:0c:80:0e:ac:06:55:46:37:63:f3:
ed:5b:2d:e6:a0:93:23:aa:31:3b:64:fc:c5:68:89:35:6e:d8:
0a:d5:96:5c:0e:f5:75:52:49:1b:17:7b:a6:b3:3e:95:aa:79:
03:f1:9a:da:a7:20:3c:55:22:4a:94:7f:42:ec:3d:f6:8c:14:
5c:71:6e:9f:a1:4e:1f:50:fe:f6:4f:56:38:43:22:68:03:8e:
06:e0:4a:81:15:1f:31:9e:9d:e2:25:4a:e4:e9:3a:67:f3:6d:
91:27:74:7e:b9:95:72:c4:4b:b9:89:bf:d5:30:5e:e0:41:b8:
a0:e5:9a:17:6a:01:68:ee:9b:6f:11:8d:74:7d:f1:7f:9b:f4:
49:9d:23:e2:05:0c:e9:fe:2d:b5:b4:7b:5a:0f:fc:73:a5:7a:
b6:72:3a:40:7f:40:76:54:ca:fc:0a:b0:d4:a5:cc:e4:6d:76:
d9:ce:5b:d9:de:36:65:18:67:72:b7:e9:90:48:b2:39:27:0f:
80:7f:6e:9b:be:1c:c6:fb:ac:ad:86:60:03:f7:c8:79:4f:8e:
17:b2:a7:cb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATtmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MTgzMTUyWhcNMjUwNDA1MTgzMTUyWjAYMRYw
FAYDVQQDEw02N2MwYWY5Yy0wMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5xo++e90xyWru6GTHcZB749QYE6XU91qjVu6pgOhgOcuPUx//x760cld
6klQGF2/rIbE6R1jddvvOP4muJnPuO7WlvMWDHxKTB/Ji56E1u1ThKzPRFHD9J4l
zkqooWnATGndlmMGhb1WbXrFjjO9EJUDeDQveZ9hNwKwkqZTLEChlRO+Qo5RcNfU
UtRvPinph9AUp0NdRK8d3ONSjeHoVNHLYIar67Q5YoYyCPrGtNoS6WxMwZ489fD7
wJgqEWTdiFh4QLGFr4b8UIQHOOZFJz5wd+eB8qRwcdNUre37TUn3hA2LIdjRnIS3
e0XMygYeRaUMDYeHMVAAC8Qq/dZiuQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPz6
syv+Ndl/fqYWGT8DbbU1eyV3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRjdGNDIzNkY1MzkxMUVGQUYyRUM2ODA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP8JMA0GCSqGSIb3DQEBCwUA
A4IBAQC5qnPQSy647K+BBJWZjoC4pe1kelOMQJrhec0LiA8dxV0jB6FVfkeq/p24
tQyADqwGVUY3Y/PtWy3moJMjqjE7ZPzFaIk1btgK1ZZcDvV1UkkbF3umsz6VqnkD
8ZrapyA8VSJKlH9C7D32jBRccW6foU4fUP72T1Y4QyJoA44G4EqBFR8xnp3iJUrk
6Tpn822RJ3R+uZVyxEu5ib/VMF7gQbig5ZoXagFo7ptvEY10ffF/m/RJnSPiBQzp
/i21tHtaD/xzpXq2cjpAf0B2VMr8CrDUpczkbXbZzlvZ3jZlGGdyt+mQSLI5Jw+A
f26bvhzG+6ythmAD98h5T44XsqfL
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:34 2025 by rpki-client