Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/249EAC0AFE4B11EF9CAF087A762E951A.roa
File: 249EAC0AFE4B11EF9CAF087A762E951A.roa (raw, json)
Hash identifier: e5j8472xvE8NiUqBiT8nHFggCI72G0V0z8jBEyzu56o=
Subject key identifier: 75:FB:1A:DB:50:E8:2D:B1:88:C1:61:31:17:27:4D:44:4A:19:FD:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/249EAC0AFE4B11EF9CAF087A762E951A.roa
Signing time: Tue 11 Mar 2025 07:33:36 +0000
ROA not before: Tue 11 Mar 2025 07:33:32 +0000
ROA not after: Mon 21 Apr 2025 07:33:32 +0000
asID: 30781
IP address blocks: 156.233.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83155 (0x144d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 07:33:32 2025 GMT
Not After : Apr 21 07:33:32 2025 GMT
Subject: CN=67cfe750-44ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:13:85:99:16:ce:a2:94:33:3d:59:84:69:
04:be:c6:ff:24:97:b0:62:c2:0c:fd:b1:55:ee:2f:
b9:cf:8c:be:60:1a:16:70:2c:a4:0d:ee:91:0b:11:
a2:24:cb:dc:bb:4e:d3:21:c1:87:e3:d6:33:01:a9:
cd:f2:24:fd:2f:4a:ae:c3:13:c8:80:a5:42:f4:b4:
61:48:77:0b:08:75:53:3a:f1:a8:62:f4:c9:fe:46:
28:d1:9d:b3:f9:d8:94:c9:ab:03:46:a3:83:14:3e:
43:2c:f1:45:e6:c7:fd:76:1c:99:84:e4:df:ab:ef:
52:ef:a6:5d:14:98:f6:db:39:21:60:30:f8:c0:04:
10:72:9e:e3:85:6d:58:33:b3:44:9d:96:44:02:54:
fd:81:34:eb:14:8e:14:cb:3e:12:df:b9:41:6c:97:
56:6c:80:e1:17:57:7a:f2:35:ac:aa:ad:7e:fc:49:
c4:8a:17:0b:a6:cd:4f:a9:1e:34:a6:f3:16:ec:61:
f5:65:90:47:35:18:09:ee:a9:3f:72:fa:4d:a9:ee:
4d:f0:e4:13:05:d7:ba:00:ff:cf:20:d7:e6:d1:1e:
3e:ed:ca:f4:50:cc:82:6b:54:cc:82:12:34:ff:3b:
18:71:51:4a:ab:63:03:19:0d:cc:a0:a2:89:6a:82:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FB:1A:DB:50:E8:2D:B1:88:C1:61:31:17:27:4D:44:4A:19:FD:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/249EAC0AFE4B11EF9CAF087A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.176.0/22
Signature Algorithm: sha256WithRSAEncryption
64:e8:60:b0:1b:0b:e0:7f:ef:5e:65:73:51:29:7e:fb:cd:39:
73:c5:58:39:d1:c1:20:69:97:22:47:9f:19:24:73:40:e0:33:
8c:09:e2:f0:df:cf:01:2a:9b:82:78:60:29:de:c6:31:a3:2c:
dd:e7:33:e3:01:79:ec:74:71:b6:67:2a:31:06:0c:d2:eb:32:
93:6c:c0:bf:5b:44:3d:9a:d5:9e:3f:c5:05:82:26:55:94:2e:
61:4e:b1:46:4a:17:98:0b:a2:9e:39:5c:4b:1f:d5:97:f4:1b:
4b:c8:42:c9:06:26:c6:f0:b3:c8:20:ab:ee:c5:ee:ab:f9:bb:
77:d3:bb:65:09:d4:58:64:57:dc:cb:eb:e2:a4:ec:89:60:26:
dd:ab:97:bc:c3:ef:a9:63:a0:e3:8d:81:38:34:ab:d1:75:d0:
5e:8f:62:74:0b:20:66:26:db:dd:9c:d7:67:6f:44:a1:75:4e:
00:3c:52:4c:5e:e9:59:52:65:bf:2a:dd:45:b1:3e:ce:88:62:
8e:3f:c3:dd:9a:3d:ae:ec:0d:ad:63:14:23:ba:92:c0:ff:ff:
e1:f9:3a:c6:0e:e9:d2:88:c0:df:ce:cc:7d:f9:af:d2:ed:e0:
61:04:3d:7d:3d:c1:dc:88:7f:48:d0:8a:48:d7:eb:3c:3c:80:
a1:00:fa:2e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUTTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzExMDczMzMyWhcNMjUwNDIxMDczMzMyWjAYMRYw
FAYDVQQDEw02N2NmZTc1MC00NGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApKAThZkWzqKUMz1ZhGkEvsb/JJewYsIM/bFV7i+5z4y+YBoWcCykDe6R
CxGiJMvcu07TIcGH49YzAanN8iT9L0quwxPIgKVC9LRhSHcLCHVTOvGoYvTJ/kYo
0Z2z+diUyasDRqODFD5DLPFF5sf9dhyZhOTfq+9S76ZdFJj22zkhYDD4wAQQcp7j
hW1YM7NEnZZEAlT9gTTrFI4Uyz4S37lBbJdWbIDhF1d68jWsqq1+/EnEihcLps1P
qR40pvMW7GH1ZZBHNRgJ7qk/cvpNqe5N8OQTBde6AP/PINfm0R4+7cr0UMyCa1TM
ghI0/zsYcVFKq2MDGQ3MoKKJaoJMewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHX7
GttQ6C2xiMFhMRcnTURKGf1VMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNDlFQUMwQUZFNEIxMUVGOUNBRjA4N0E3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOmwMA0GCSqGSIb3DQEBCwUA
A4IBAQBk6GCwGwvgf+9eZXNRKX77zTlzxVg50cEgaZciR58ZJHNA4DOMCeLw388B
KpuCeGAp3sYxoyzd5zPjAXnsdHG2ZyoxBgzS6zKTbMC/W0Q9mtWeP8UFgiZVlC5h
TrFGSheYC6KeOVxLH9WX9BtLyELJBibG8LPIIKvuxe6r+bt307tlCdRYZFfcy+vi
pOyJYCbdq5e8w++pY6DjjYE4NKvRddBej2J0CyBmJtvdnNdnb0ShdU4APFJMXulZ
UmW/Kt1FsT7OiGKOP8Pdmj2u7A2tYxQjupLA///h+TrGDunSiMDfzsx9+a/S7eBh
BD19PcHciH9I0IpI1+s8PIChAPou
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:37 2025 by rpki-client