Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27FD1F9AF42C11EF94DDBEB8762E951A.roa
File: 27FD1F9AF42C11EF94DDBEB8762E951A.roa (raw, json)
Hash identifier: G+hhVeG2C4NUfPNYHNRJy+utPza+91E+0hGAr1themg=
Subject key identifier: CD:C5:1F:54:D8:1F:C3:37:45:E7:74:13:07:47:3F:05:39:A8:4A:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01310A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27FD1F9AF42C11EF94DDBEB8762E951A.roa
Signing time: Wed 26 Feb 2025 10:26:36 +0000
ROA not before: Wed 26 Feb 2025 10:26:32 +0000
ROA not after: Thu 19 Feb 2026 10:26:32 +0000
asID: 984
IP address blocks: 156.252.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78090 (0x1310a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:26:32 2025 GMT
Not After : Feb 19 10:26:32 2026 GMT
Subject: CN=67beec5c-6e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:99:ea:c2:39:b9:fd:83:b4:3e:ea:1a:8e:
93:71:d2:42:63:fc:3b:bf:35:f0:71:86:78:91:13:
92:dd:48:30:51:e5:a4:1a:5b:7f:b1:7c:2e:ed:84:
05:d6:6a:e7:dc:bf:5f:9b:d5:a9:46:60:dc:34:aa:
c0:a4:3d:7f:d8:0c:dd:71:67:f6:bd:6f:eb:5c:bd:
b3:68:78:d5:f6:7e:d3:8b:bb:a3:a1:87:c7:7c:b3:
63:c5:06:f2:e4:e1:b8:b8:17:3c:24:ed:9f:1a:e8:
40:e3:74:1a:35:87:75:5d:02:db:6e:b7:06:35:46:
e9:7d:42:4b:47:8c:b9:af:3e:07:6f:d6:75:73:61:
9b:8a:73:4f:e7:e4:a6:d0:be:84:cc:4e:6a:04:32:
4b:6b:30:5b:a8:a9:60:c1:6c:6b:a4:94:4f:27:f7:
5c:6e:90:a7:a2:7a:ef:b8:69:80:9c:2d:42:54:99:
d3:c4:ef:e0:da:69:e0:99:d5:9a:e4:2e:cf:13:41:
0b:fc:7f:21:2d:b4:89:58:32:27:7a:a6:29:97:e9:
f9:4f:cf:85:69:d2:60:bd:3c:b9:23:e9:2d:0a:30:
65:1a:2c:9d:f8:30:6c:3c:0e:f1:4d:20:a3:9e:41:
76:ae:7b:5f:45:b7:f0:c1:5c:a2:88:f9:58:bc:91:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C5:1F:54:D8:1F:C3:37:45:E7:74:13:07:47:3F:05:39:A8:4A:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27FD1F9AF42C11EF94DDBEB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.88.0/24
Signature Algorithm: sha256WithRSAEncryption
58:53:c1:71:f1:ce:97:d8:7b:c2:78:4c:5c:78:e4:12:3c:59:
b0:4c:d3:52:1a:e6:65:b2:1b:f5:70:24:a9:50:d6:f3:90:a7:
9e:55:26:ed:8f:1b:b7:d0:49:eb:5f:6e:27:72:3c:5a:92:a6:
65:67:08:2a:e4:35:86:18:4d:b0:27:d5:48:9b:7e:37:32:3f:
2a:8f:2b:09:ac:fe:26:79:e2:54:60:10:12:bd:c1:52:dd:e0:
71:a2:8a:83:a9:8e:77:7b:c7:c4:9c:33:cb:1e:c6:fa:82:ab:
90:8b:18:fe:b1:90:70:8a:97:00:83:6f:78:37:44:90:88:f7:
e7:02:e0:fc:c5:9f:59:05:d6:b2:68:14:be:8f:06:41:26:4f:
62:6d:b8:fa:2f:a1:dc:7a:95:62:b2:80:0c:d0:fc:e4:48:d6:
6b:1d:ad:eb:14:f3:a2:44:13:22:99:fb:db:f5:d6:7e:2b:2f:
e2:cd:6d:7c:9e:98:28:45:76:9c:1b:a4:61:d7:7b:fd:7c:62:
6f:47:95:07:09:b5:06:e3:21:82:14:f2:f7:96:4b:fc:8a:8e:
72:a4:d0:c6:04:e2:cb:f7:6c:e3:c6:56:ab:4e:01:05:64:6c:
57:b9:41:23:c6:1c:ab:0f:f7:6b:cc:e7:04:61:c5:14:b3:ad:
e1:1c:1b:bc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATEKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTAyNjMyWhcNMjYwMjE5MTAyNjMyWjAYMRYw
FAYDVQQDEw02N2JlZWM1Yy02ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtsCZ6sI5uf2DtD7qGo6TcdJCY/w7vzXwcYZ4kROS3UgwUeWkGlt/sXwu
7YQF1mrn3L9fm9WpRmDcNKrApD1/2AzdcWf2vW/rXL2zaHjV9n7Ti7ujoYfHfLNj
xQby5OG4uBc8JO2fGuhA43QaNYd1XQLbbrcGNUbpfUJLR4y5rz4Hb9Z1c2GbinNP
5+Sm0L6EzE5qBDJLazBbqKlgwWxrpJRPJ/dcbpCnonrvuGmAnC1CVJnTxO/g2mng
mdWa5C7PE0EL/H8hLbSJWDIneqYpl+n5T8+FadJgvTy5I+ktCjBlGiyd+DBsPA7x
TSCjnkF2rntfRbfwwVyiiPlYvJEvhwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM3F
H1TYH8M3Red0EwdHPwU5qEoTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yN0ZEMUY5QUY0MkMxMUVGOTREREJFQjg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPxYMA0GCSqGSIb3DQEBCwUA
A4IBAQBYU8Fx8c6X2HvCeExceOQSPFmwTNNSGuZlshv1cCSpUNbzkKeeVSbtjxu3
0EnrX24ncjxakqZlZwgq5DWGGE2wJ9VIm343Mj8qjysJrP4meeJUYBASvcFS3eBx
ooqDqY53e8fEnDPLHsb6gquQixj+sZBwipcAg294N0SQiPfnAuD8xZ9ZBdayaBS+
jwZBJk9ibbj6L6HcepVisoAM0PzkSNZrHa3rFPOiRBMimfvb9dZ+Ky/izW18npgo
RXacG6Rh13v9fGJvR5UHCbUG4yGCFPL3lkv8io5ypNDGBOLL92zjxlarTgEFZGxX
uUEjxhyrD/drzOcEYcUUs63hHBu8
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:42 2025 by rpki-client