Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B747CDAF5AE11EFA8B770A6762E951A.roa
File: 2B747CDAF5AE11EFA8B770A6762E951A.roa (raw, json)
Hash identifier: /UPp3z7Js9nmyhGBCtnSxjDfv67B8tkX3Fe3qoH6LwI=
Subject key identifier: 69:E8:83:17:9C:0D:D0:2B:02:4A:3A:56:2E:51:D1:BD:5F:53:58:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013C9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B747CDAF5AE11EFA8B770A6762E951A.roa
Signing time: Fri 28 Feb 2025 08:29:47 +0000
ROA not before: Fri 28 Feb 2025 08:29:44 +0000
ROA not after: Thu 19 Feb 2026 08:29:44 +0000
asID: 984
IP address blocks: 156.244.213.0/24 maxlen: 24
156.244.214.0/24 maxlen: 24
156.244.216.0/24 maxlen: 24
156.244.217.0/24 maxlen: 24
156.244.219.0/24 maxlen: 24
156.244.221.0/24 maxlen: 24
156.244.222.0/24 maxlen: 24
156.244.223.0/24 maxlen: 24
156.244.224.0/24 maxlen: 24
156.244.225.0/24 maxlen: 24
156.244.226.0/24 maxlen: 24
156.244.227.0/24 maxlen: 24
156.244.228.0/24 maxlen: 24
156.244.229.0/24 maxlen: 24
156.244.230.0/24 maxlen: 24
156.244.231.0/24 maxlen: 24
156.244.232.0/24 maxlen: 24
156.244.233.0/24 maxlen: 24
156.244.235.0/24 maxlen: 24
156.244.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81050 (0x13c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 08:29:44 2025 GMT
Not After : Feb 19 08:29:44 2026 GMT
Subject: CN=67c173fb-0a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:8d:c5:fa:f8:29:98:4b:e2:44:ef:bd:49:
d6:1c:50:02:cc:d9:a4:2d:9e:b0:49:11:8a:05:0d:
b9:a5:8e:0b:20:c2:d7:f5:79:92:5f:e3:08:ef:ef:
1a:ce:07:67:66:40:58:60:44:1e:22:2d:38:d0:34:
2d:93:7b:b5:d5:2a:3b:f8:50:89:81:88:41:7b:43:
92:ec:87:bd:15:a2:9a:c3:28:93:70:88:71:4b:17:
f7:11:bd:56:93:a6:45:ca:ef:ca:85:87:b1:c1:a1:
bf:67:2d:c6:96:79:32:32:1d:f3:7a:8f:d6:ff:8b:
b6:3f:8d:76:a7:c2:09:a6:c4:15:4d:53:10:45:93:
49:51:d8:5a:6b:7c:15:cb:da:3e:5b:74:49:e8:02:
23:b9:7d:bc:f3:50:9a:99:49:c7:e9:dc:2f:43:63:
13:1d:ba:aa:a9:e1:f2:92:46:d0:fa:bc:2b:36:c4:
47:6f:48:4c:93:6d:a0:b8:af:fb:17:3a:6e:fe:58:
f8:54:b9:72:6c:f5:8a:67:4b:51:c4:5f:22:83:92:
33:4a:d7:6f:1b:3e:d1:f9:19:b4:df:07:0d:6c:5b:
48:50:36:00:97:59:98:d0:ee:97:44:ee:2b:b9:78:
bd:e4:7a:22:e6:75:61:2d:c0:92:86:23:79:8f:0c:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E8:83:17:9C:0D:D0:2B:02:4A:3A:56:2E:51:D1:BD:5F:53:58:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B747CDAF5AE11EFA8B770A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.213.0-156.244.214.255
156.244.216.0/23
156.244.219.0/24
156.244.221.0-156.244.233.255
156.244.235.0-156.244.236.255
Signature Algorithm: sha256WithRSAEncryption
41:72:e5:f8:a0:b1:c1:89:de:7a:d4:cf:a1:2e:89:ae:7a:c7:
8b:0d:d2:06:84:41:56:42:69:de:52:b4:88:95:d5:a8:35:ba:
d2:05:c1:3f:ff:c0:8c:66:01:a5:92:96:de:17:52:5c:4f:ef:
5f:d5:f2:e7:21:e6:a1:90:ed:23:77:0b:cb:e5:96:ec:20:04:
58:ae:9c:69:cd:00:70:df:e3:2c:cf:ff:1e:19:66:13:44:28:
28:91:19:01:c4:fc:65:3f:f7:a8:8c:d7:df:d6:56:a5:ce:38:
b9:18:bc:02:ac:4d:fb:b3:60:9b:00:3b:30:6a:1a:5e:4c:4c:
b7:92:3d:f2:0d:80:e6:e4:f1:d6:dd:8d:87:dc:3b:a5:b4:d6:
27:15:2f:75:44:4d:d2:38:b9:d4:d0:97:71:30:a2:81:2b:af:
9a:bd:c9:28:bb:56:b4:7b:e0:24:f5:e1:6f:c6:e2:7c:65:5f:
3f:2e:da:6e:ec:76:b9:9b:3a:bb:9a:7d:10:d3:5e:83:4e:9e:
e7:75:b3:b0:27:74:b4:10:06:97:ad:82:f6:07:f9:e7:0c:3b:
40:95:2c:f1:f4:38:a3:73:a3:b2:24:36:32:67:83:2d:3e:e0:
a4:80:b3:ec:37:aa:e6:90:e0:27:8b:a1:a2:77:16:34:67:76:
6f:f5:79:bb
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIDATyaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI4MDgyOTQ0WhcNMjYwMjE5MDgyOTQ0WjAYMRYw
FAYDVQQDEw02N2MxNzNmYi0wYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsliNxfr4KZhL4kTvvUnWHFACzNmkLZ6wSRGKBQ25pY4LIMLX9XmSX+MI
7+8azgdnZkBYYEQeIi040DQtk3u11So7+FCJgYhBe0OS7Ie9FaKawyiTcIhxSxf3
Eb1Wk6ZFyu/KhYexwaG/Zy3GlnkyMh3zeo/W/4u2P412p8IJpsQVTVMQRZNJUdha
a3wVy9o+W3RJ6AIjuX2881CamUnH6dwvQ2MTHbqqqeHykkbQ+rwrNsRHb0hMk22g
uK/7Fzpu/lj4VLlybPWKZ0tRxF8ig5IzStdvGz7R+Rm03wcNbFtIUDYAl1mY0O6X
RO4ruXi95Hoi5nVhLcCShiN5jwz1pQIDAQABo4IC0jCCAs4wHQYDVR0OBBYEFGno
gxecDdArAko6Vi5R0b1fU1imMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQjc0N0NEQUY1QUUxMUVGQThCNzcwQTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBACc9NUDBACc9NYDBAGc9NgD
BACc9NswDAMEAJz03QMEAZz06DAMAwQAnPTrAwQAnPTsMA0GCSqGSIb3DQEBCwUA
A4IBAQBBcuX4oLHBid561M+hLomueseLDdIGhEFWQmneUrSIldWoNbrSBcE//8CM
ZgGlkpbeF1JcT+9f1fLnIeahkO0jdwvL5ZbsIARYrpxpzQBw3+Msz/8eGWYTRCgo
kRkBxPxlP/eojNff1lalzji5GLwCrE37s2CbADswahpeTEy3kj3yDYDm5PHW3Y2H
3DultNYnFS91RE3SOLnU0JdxMKKBK6+avckou1a0e+Ak9eFvxuJ8ZV8/Ltpu7Ha5
mzq7mn0Q016DTp7ndbOwJ3S0EAaXrYL2B/nnDDtAlSzx9Dijc6OyJDYyZ4MtPuCk
gLPsN6rmkOAni6GidxY0Z3Zv9Xm7
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:17:11 2025 by rpki-client