Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D94058EF61311EF84EA6356762E951A.roa
File: 2D94058EF61311EF84EA6356762E951A.roa (raw, json)
Hash identifier: iEe8z87Q+AybqHXW4hY8ywWFJr/nkJ3bscFSUu/b/xM=
Subject key identifier: 39:73:CE:49:52:0E:E0:AE:42:04:A8:C9:EB:07:E4:3E:17:EB:DE:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D94058EF61311EF84EA6356762E951A.roa
Signing time: Fri 28 Feb 2025 20:32:50 +0000
ROA not before: Fri 28 Feb 2025 20:32:46 +0000
ROA not after: Sun 30 Mar 2025 20:32:46 +0000
asID: 203020
IP address blocks: 156.253.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81733 (0x13f45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 20:32:46 2025 GMT
Not After : Mar 30 20:32:46 2025 GMT
Subject: CN=67c21d72-6e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:07:07:58:22:de:c9:69:9e:46:d8:d2:2f:
25:2d:63:9f:11:6a:6c:3d:03:61:65:1e:85:9b:e6:
ed:c4:6e:1d:45:5d:8a:f2:49:90:4a:8a:88:92:2b:
3c:6a:05:0e:27:7b:64:5e:dc:f5:b6:f7:e7:1d:b3:
2d:d6:b3:ce:80:6b:7f:97:e7:2a:9f:6f:20:8d:22:
a2:01:9e:4b:83:e6:ac:da:aa:82:74:be:a6:81:b2:
4f:cb:c3:33:47:cb:6d:de:f9:0e:dc:82:bf:e5:c5:
54:98:7c:17:9f:0f:7e:0e:31:02:38:76:be:3d:ff:
af:e3:cb:6f:21:76:ac:d6:f1:b8:b9:4a:4c:92:4d:
bb:07:d1:d4:49:ff:6e:b3:18:64:6d:c0:2b:68:c8:
50:12:c2:26:bb:e6:34:d9:dd:bf:9f:5b:4e:75:88:
bb:e8:f1:d7:18:e8:40:11:6a:f4:d4:38:ed:58:a3:
aa:36:4c:ea:4a:5a:22:2a:4e:03:f0:40:5b:8c:5d:
aa:c6:1c:c9:85:4c:1e:9d:cd:dd:98:59:26:12:44:
98:7c:18:d7:07:4b:a7:85:5d:46:c2:8e:8b:c3:e5:
93:79:df:5a:69:4b:15:c9:64:53:72:6c:12:50:85:
43:99:f4:00:6c:b7:95:f8:82:f4:01:02:ca:2c:f2:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:73:CE:49:52:0E:E0:AE:42:04:A8:C9:EB:07:E4:3E:17:EB:DE:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D94058EF61311EF84EA6356762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.163.0/24
Signature Algorithm: sha256WithRSAEncryption
66:30:0a:47:92:e5:77:3d:62:f0:9e:c0:34:16:d8:68:a9:d0:
37:b9:fb:68:8e:10:8c:7d:40:17:fc:e5:fc:d2:44:18:39:57:
a9:d0:92:da:47:74:1c:7e:0d:aa:89:a8:e3:37:93:bb:dd:f3:
11:62:e2:4d:6a:09:b2:c2:17:53:5e:2d:d3:01:5e:ed:4b:cf:
e1:5a:e0:2d:ac:26:4c:b4:a7:86:04:aa:4b:f0:91:1c:7e:0a:
a2:23:7e:a0:f4:51:fe:62:37:90:78:47:1f:7d:8f:66:e7:b7:
fd:0e:3f:52:0b:1c:4d:8f:7f:86:a5:23:b7:fd:09:1d:45:be:
be:da:a5:f5:4e:d4:00:f2:15:91:9c:b9:bf:e4:32:52:3a:9f:
84:8e:ea:62:61:8c:2c:75:af:2b:3a:1e:b0:bb:c5:71:54:c9:
61:66:1c:4a:98:1c:95:44:84:8e:7c:01:6a:fb:f7:7c:a2:67:
27:7b:9d:76:0b:0e:de:62:7f:53:07:0c:4e:90:24:82:98:aa:
f8:ed:0b:0a:e0:9f:a0:4e:e2:30:6e:8d:00:22:f5:b3:c5:af:
b3:d0:83:df:f3:1c:0b:8f:04:b1:26:23:e5:c1:8b:4b:a3:67:
fe:9d:7b:b2:fe:f8:f9:f5:ba:c5:82:be:e9:fb:53:72:72:7d:
81:b6:3c:2f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAT9FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI4MjAzMjQ2WhcNMjUwMzMwMjAzMjQ2WjAYMRYw
FAYDVQQDEw02N2MyMWQ3Mi02ZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuTwHB1gi3slpnkbY0i8lLWOfEWpsPQNhZR6Fm+btxG4dRV2K8kmQSoqI
kis8agUOJ3tkXtz1tvfnHbMt1rPOgGt/l+cqn28gjSKiAZ5Lg+as2qqCdL6mgbJP
y8MzR8tt3vkO3IK/5cVUmHwXnw9+DjECOHa+Pf+v48tvIXas1vG4uUpMkk27B9HU
Sf9usxhkbcAraMhQEsImu+Y02d2/n1tOdYi76PHXGOhAEWr01DjtWKOqNkzqSloi
Kk4D8EBbjF2qxhzJhUwenc3dmFkmEkSYfBjXB0unhV1Gwo6Lw+WTed9aaUsVyWRT
cmwSUIVDmfQAbLeV+IL0AQLKLPKI1wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDlz
zklSDuCuQgSoyesH5D4X696EMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRDk0MDU4RUY2MTMxMUVGODRFQTYzNTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP2jMA0GCSqGSIb3DQEBCwUA
A4IBAQBmMApHkuV3PWLwnsA0FthoqdA3uftojhCMfUAX/OX80kQYOVep0JLaR3Qc
fg2qiajjN5O73fMRYuJNagmywhdTXi3TAV7tS8/hWuAtrCZMtKeGBKpL8JEcfgqi
I36g9FH+YjeQeEcffY9m57f9Dj9SCxxNj3+GpSO3/QkdRb6+2qX1TtQA8hWRnLm/
5DJSOp+EjupiYYwsda8rOh6wu8VxVMlhZhxKmByVRISOfAFq+/d8omcne512Cw7e
Yn9TBwxOkCSCmKr47QsK4J+gTuIwbo0AIvWzxa+z0IPf8xwLjwSxJiPlwYtLo2f+
nXuy/vj59brFgr7p+1Nycn2Btjwv
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:09:23 2025 by rpki-client