Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EE6662AF46F11EF8C43048E762E951A.roa
File: 2EE6662AF46F11EF8C43048E762E951A.roa (raw, json)
Hash identifier: eT1wAWOg2Vq3c0qRFQkvu2ok1hFGv+zY2p5LPANpOlI=
Subject key identifier: DA:D2:F6:F3:1D:B0:9E:2E:ED:E0:BE:7C:A0:F8:59:E3:16:A4:BB:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01365D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EE6662AF46F11EF8C43048E762E951A.roa
Signing time: Wed 26 Feb 2025 18:26:24 +0000
ROA not before: Wed 26 Feb 2025 18:26:20 +0000
ROA not after: Sat 19 Feb 2028 18:26:20 +0000
asID: 17561
IP address blocks: 156.233.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79453 (0x1365d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:26:20 2025 GMT
Not After : Feb 19 18:26:20 2028 GMT
Subject: CN=67bf5cd0-1e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:55:9f:6f:3f:80:44:76:6e:42:9d:eb:d9:
de:44:2e:87:88:0b:48:40:58:bd:bb:ca:97:47:b9:
84:43:34:ff:9b:ca:18:f6:d0:bd:eb:c0:9c:20:32:
48:cb:a5:b2:fd:0a:bc:e8:ee:df:24:5d:3c:53:89:
78:23:41:c7:80:fd:b7:1f:0c:4a:90:7c:03:70:80:
cd:f5:f3:f7:4a:4e:6d:f5:5c:0e:70:ea:5e:45:6d:
c7:66:48:fd:a2:dd:77:a0:b8:60:04:c1:1e:de:85:
27:d0:bc:dd:8f:41:6a:cb:e1:e9:60:15:ab:5c:a0:
3f:07:96:99:e6:a0:77:23:10:a9:ed:06:1c:0b:cb:
54:05:c0:df:d4:4f:e3:cb:a8:e8:7c:6b:26:24:66:
11:9b:8f:c3:ae:6b:8a:d8:e4:f1:45:13:0f:de:03:
3c:38:e9:06:fe:36:b0:8c:a4:29:34:90:10:ea:5a:
09:20:8b:0e:c2:68:d9:8f:ab:58:18:56:e6:c1:a3:
7f:df:f0:35:9b:0a:f9:0a:d1:4b:54:43:57:cf:d8:
2f:7e:99:ba:4a:81:f1:f3:1f:7b:bf:24:e3:c0:37:
e9:70:32:d4:38:fd:3a:81:09:42:5a:d5:b8:42:9e:
23:cf:9e:45:23:2d:6a:67:c1:13:96:67:0d:6b:21:
3b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:F6:F3:1D:B0:9E:2E:ED:E0:BE:7C:A0:F8:59:E3:16:A4:BB:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EE6662AF46F11EF8C43048E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.208.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b3:c7:9c:14:d5:77:be:9e:49:23:80:c8:39:4b:d6:fd:12:
f4:12:89:ef:1a:00:c4:b8:1d:50:34:93:39:01:7b:e6:f1:d8:
f9:f1:b0:5d:97:e0:66:0f:aa:51:80:53:41:b4:cc:a8:ac:a1:
7d:7e:3f:ad:d1:5c:68:83:17:db:a7:48:eb:d6:0d:12:6d:1d:
6c:d3:d4:20:0c:cf:6d:28:d3:44:24:b6:71:2d:55:28:bd:76:
0a:2b:8d:a9:49:19:f2:77:06:de:0c:a7:b0:21:d1:a4:28:c5:
bc:fc:a6:a3:89:c7:54:5b:55:d1:34:84:f7:d6:97:25:78:18:
b6:46:67:9a:cd:cf:06:63:f0:bb:18:6b:3c:49:bf:70:14:8b:
88:be:44:2a:d5:f9:1b:72:e5:02:3a:41:17:f2:63:97:ca:c0:
00:d1:5f:91:2e:8b:1d:a8:28:c6:d2:94:91:e8:24:eb:04:d6:
9f:94:3e:e1:9c:79:55:a2:73:44:cf:35:16:ee:ef:c4:f1:b3:
db:38:5b:86:21:eb:65:b5:8d:61:64:06:42:00:b8:f1:c1:a7:
71:14:d6:6a:c0:dc:da:b4:2f:2e:c9:e6:11:9e:10:02:48:39:
97:2d:43:d3:1d:aa:90:21:05:9b:8c:bb:fd:97:a9:d0:74:c5:
ca:1b:31:ff
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATZdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTgyNjIwWhcNMjgwMjE5MTgyNjIwWjAYMRYw
FAYDVQQDEw02N2JmNWNkMC0xZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr3FVn28/gER2bkKd69neRC6HiAtIQFi9u8qXR7mEQzT/m8oY9tC968Cc
IDJIy6Wy/Qq86O7fJF08U4l4I0HHgP23HwxKkHwDcIDN9fP3Sk5t9VwOcOpeRW3H
Zkj9ot13oLhgBMEe3oUn0Lzdj0Fqy+HpYBWrXKA/B5aZ5qB3IxCp7QYcC8tUBcDf
1E/jy6jofGsmJGYRm4/DrmuK2OTxRRMP3gM8OOkG/jawjKQpNJAQ6loJIIsOwmjZ
j6tYGFbmwaN/3/A1mwr5CtFLVENXz9gvfpm6SoHx8x97vyTjwDfpcDLUOP06gQlC
WtW4Qp4jz55FIy1qZ8ETlmcNayE7nwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNrS
9vMdsJ4u7eC+fKD4WeMWpLuIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRUU2NjYyQUY0NkYxMUVGOEM0MzA0OEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOnQMA0GCSqGSIb3DQEBCwUA
A4IBAQCIs8ecFNV3vp5JI4DIOUvW/RL0EonvGgDEuB1QNJM5AXvm8dj58bBdl+Bm
D6pRgFNBtMyorKF9fj+t0Vxogxfbp0jr1g0SbR1s09QgDM9tKNNEJLZxLVUovXYK
K42pSRnydwbeDKewIdGkKMW8/KajicdUW1XRNIT31pcleBi2Rmeazc8GY/C7GGs8
Sb9wFIuIvkQq1fkbcuUCOkEX8mOXysAA0V+RLosdqCjG0pSR6CTrBNaflD7hnHlV
onNEzzUW7u/E8bPbOFuGIetltY1hZAZCALjxwadxFNZqwNzatC8uyeYRnhACSDmX
LUPTHaqQIQWbjLv9l6nQdMXKGzH/
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:07 2025 by rpki-client