Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31854600F48611EF92E210AC762E951A.roa
File: 31854600F48611EF92E210AC762E951A.roa (raw, json)
Hash identifier: LU1T6i5dZTw386ZgqrENvmzoherXr9f+ZV/Uh5afV5M=
Subject key identifier: 94:1D:A5:AE:CF:9A:44:6A:BE:05:F6:DC:8C:8E:DF:90:3A:FC:0B:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0137BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31854600F48611EF92E210AC762E951A.roa
Signing time: Wed 26 Feb 2025 21:11:07 +0000
ROA not before: Wed 26 Feb 2025 21:11:03 +0000
ROA not after: Sat 19 Feb 2028 21:11:03 +0000
asID: 17561
IP address blocks: 156.224.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79806 (0x137be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 21:11:03 2025 GMT
Not After : Feb 19 21:11:03 2028 GMT
Subject: CN=67bf836a-cc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:dd:cf:ce:9a:2e:49:58:c9:78:60:21:10:
13:4c:44:12:39:7d:1c:fb:b3:f4:5c:8b:30:13:1b:
10:21:d1:bc:04:ab:8a:b0:80:ac:28:8f:63:12:6e:
a7:44:f2:40:13:47:1b:df:97:c0:e1:a6:8a:26:b8:
a5:a3:89:11:9a:ff:67:d6:12:23:ce:a7:47:e8:30:
ce:ed:00:d0:8a:19:68:43:9c:5d:06:63:ab:92:66:
53:ca:12:10:df:ee:44:f7:ed:09:1c:e1:ef:e0:cf:
ff:2d:27:5a:c8:e6:3a:b3:66:51:45:1e:c8:fb:23:
4d:85:c5:ee:d5:74:c3:6c:a8:47:99:41:39:bb:45:
e1:9b:e7:fd:b5:32:ca:62:d0:45:a3:c8:d2:d8:56:
03:56:7c:e9:d9:36:04:b4:2c:07:cb:85:93:6c:ee:
ca:6f:4c:73:c2:ea:00:9c:5b:e7:5f:b0:e7:82:9c:
97:f1:5f:29:8d:37:f6:db:b0:28:d7:35:3e:00:20:
6f:2c:4c:62:68:f7:df:3b:f8:fb:d3:0f:bb:52:bb:
96:ee:9a:76:0b:16:aa:2d:9d:35:30:f9:2c:5c:63:
b5:7e:89:89:b9:d5:24:f7:e4:bb:69:54:b1:41:50:
dc:aa:ed:ae:5a:ed:fa:e9:d2:ad:9f:78:d8:6c:40:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:A5:AE:CF:9A:44:6A:BE:05:F6:DC:8C:8E:DF:90:3A:FC:0B:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31854600F48611EF92E210AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:42:d8:d9:04:8f:ef:be:36:a5:62:ea:33:64:f6:0e:e0:8d:
4b:92:84:d5:5a:2c:aa:f0:f4:b1:02:b4:26:7d:2d:a8:82:ca:
c0:02:e6:fd:5a:54:e8:ac:dd:bc:0a:f3:05:76:11:08:6e:3c:
66:ba:0f:98:06:1d:9a:54:1c:ac:4b:0a:57:79:f0:25:4d:fd:
2d:e6:08:d2:36:1e:c1:d8:bf:38:19:41:37:da:dc:a1:c9:23:
66:92:66:8a:b1:c9:04:ca:de:13:29:07:bd:69:6f:13:70:9b:
af:67:0e:54:d6:de:54:0c:19:8f:10:e0:b2:50:a2:81:56:b6:
2b:64:b9:f5:47:9f:bf:7a:47:f4:b3:cc:4b:6f:e7:98:3b:14:
b3:24:90:c7:07:25:03:86:58:bb:69:b0:3d:0a:4a:1f:20:dd:
6d:d0:be:5a:1f:6b:5f:d7:f6:1c:c8:d4:2a:14:4b:ac:d9:20:
3b:bc:e5:07:bf:a9:5c:20:57:17:bb:56:8d:1c:2f:b6:5c:04:
18:e8:e3:cb:61:c1:d6:73:1e:20:49:2a:fd:b0:c6:d9:c3:ac:
af:05:3a:84:31:2c:ca:f2:27:e9:15:1a:b7:18:35:0b:7e:dc:
c4:98:4a:13:f3:46:10:7a:bc:75:9b:6f:0d:5c:90:3e:81:e2:
d9:43:00:4c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATe+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MjExMTAzWhcNMjgwMjE5MjExMTAzWjAYMRYw
FAYDVQQDEw02N2JmODM2YS1jYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuibdz86aLklYyXhgIRATTEQSOX0c+7P0XIswExsQIdG8BKuKsICsKI9j
Em6nRPJAE0cb35fA4aaKJrilo4kRmv9n1hIjzqdH6DDO7QDQihloQ5xdBmOrkmZT
yhIQ3+5E9+0JHOHv4M//LSdayOY6s2ZRRR7I+yNNhcXu1XTDbKhHmUE5u0Xhm+f9
tTLKYtBFo8jS2FYDVnzp2TYEtCwHy4WTbO7Kb0xzwuoAnFvnX7DngpyX8V8pjTf2
27Ao1zU+ACBvLExiaPffO/j70w+7UruW7pp2CxaqLZ01MPksXGO1fomJudUk9+S7
aVSxQVDcqu2uWu366dKtn3jYbEBduQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJQd
pa7PmkRqvgX23IyO35A6/AtrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMTg1NDYwMEY0ODYxMUVGOTJFMjEwQUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOBZMA0GCSqGSIb3DQEBCwUA
A4IBAQBqQtjZBI/vvjalYuozZPYO4I1LkoTVWiyq8PSxArQmfS2ogsrAAub9WlTo
rN28CvMFdhEIbjxmug+YBh2aVBysSwpXefAlTf0t5gjSNh7B2L84GUE32tyhySNm
kmaKsckEyt4TKQe9aW8TcJuvZw5U1t5UDBmPEOCyUKKBVrYrZLn1R5+/ekf0s8xL
b+eYOxSzJJDHByUDhli7abA9CkofIN1t0L5aH2tf1/YcyNQqFEus2SA7vOUHv6lc
IFcXu1aNHC+2XAQY6OPLYcHWcx4gSSr9sMbZw6yvBTqEMSzK8ifpFRq3GDULftzE
mEoT80YQerx1m28NXJA+geLZQwBM
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:17 2025 by rpki-client