Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/322BC05AF47E11EF90BDB477762E951A.roa
File: 322BC05AF47E11EF90BDB477762E951A.roa (raw, json)
Hash identifier: wlPFZ4bAIUUGy/qL4m6pxyY45gcCfG6aQSjuCUzAAEE=
Subject key identifier: FD:1D:4B:F0:67:08:5B:55:98:80:9F:42:A3:7B:0E:56:30:76:6D:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01376F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/322BC05AF47E11EF90BDB477762E951A.roa
Signing time: Wed 26 Feb 2025 20:13:52 +0000
ROA not before: Wed 26 Feb 2025 20:13:48 +0000
ROA not after: Thu 19 Feb 2026 20:13:48 +0000
asID: 984
IP address blocks: 156.247.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79727 (0x1376f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 20:13:48 2025 GMT
Not After : Feb 19 20:13:48 2026 GMT
Subject: CN=67bf7600-bf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:b8:95:27:5b:aa:de:bb:d0:a0:bf:81:9a:
97:73:a3:d7:bd:91:c3:01:92:74:6a:7e:a2:8c:90:
05:21:cb:e8:a3:ac:bb:95:ac:c2:82:df:be:83:c2:
69:46:83:d4:cd:ea:e6:40:07:6f:75:2c:91:21:52:
0b:7d:3c:7b:d5:87:db:6f:76:6d:37:d4:27:01:b1:
87:49:09:69:71:59:1e:e8:31:d1:b9:4c:64:7c:25:
9a:00:26:3b:74:4b:58:6d:3b:a2:10:f1:42:2a:3b:
1b:e1:ff:3e:3c:a5:cd:ac:a6:d4:c3:00:51:cd:1d:
c6:a4:e5:bf:ad:4f:3e:1a:93:dd:96:4b:fa:bb:3a:
8f:9f:67:5f:a9:60:f2:b8:93:1d:ce:29:0b:82:48:
fb:bf:46:6e:5f:f3:76:e7:19:09:ed:a1:a4:85:f1:
22:8a:78:f2:ec:82:29:81:e6:06:c7:ea:4e:ea:a5:
6c:4e:36:21:9c:19:1c:8a:64:2c:f9:63:46:fc:7e:
14:13:3e:42:e7:42:70:63:7b:4a:bf:25:ac:79:9a:
ce:6c:a0:c4:eb:db:7f:ba:7c:e2:28:d6:b9:2c:35:
5a:7b:13:de:dc:d1:13:02:8a:f0:a0:2f:b0:d0:f3:
bc:a7:7a:55:0b:3e:a2:00:50:4f:e5:85:82:e8:e2:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:4B:F0:67:08:5B:55:98:80:9F:42:A3:7B:0E:56:30:76:6D:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/322BC05AF47E11EF90BDB477762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ff:c3:ad:70:81:66:7b:9b:4d:4f:76:1c:92:b6:cd:16:ec:
97:0a:1e:48:42:df:a4:ec:3e:d6:3d:12:e0:64:a3:4a:1a:2f:
18:10:6f:14:2b:7d:61:69:53:ff:7d:43:c7:ac:33:3a:2f:f0:
87:8a:b1:a8:b7:17:98:ef:20:cb:db:59:04:84:b9:c0:44:ab:
1d:dc:d7:b8:a9:9f:9a:7d:79:c6:85:1a:1a:bc:fe:3d:03:ec:
a4:fe:7d:01:55:81:48:72:ef:04:fa:83:bf:c9:d7:e9:f8:c2:
4d:e3:1c:87:16:a3:9f:fd:f9:5e:e8:45:89:35:b3:9b:e8:9b:
70:16:0c:15:34:2f:5b:39:0a:f0:ee:96:f8:3b:56:f1:5f:22:
63:e7:ff:8d:87:38:91:28:42:11:d2:e3:f3:c4:da:7b:f1:ba:
bc:17:70:e1:19:2f:f6:73:45:48:92:ef:e6:30:27:fe:f6:df:
fd:b2:22:ea:17:7a:d3:ea:c7:b2:0f:47:f0:45:b0:a3:4f:33:
76:cf:88:b2:1f:3d:57:16:da:b3:c7:6d:a3:e6:55:3d:56:2f:
83:36:a9:05:44:0c:99:e9:59:1e:0a:b7:30:62:1e:71:a3:4c:
58:a2:1b:c5:7f:13:9a:1f:3d:72:3c:1c:8d:0e:00:5c:e5:83:
5f:e2:91:9f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATdvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MjAxMzQ4WhcNMjYwMjE5MjAxMzQ4WjAYMRYw
FAYDVQQDEw02N2JmNzYwMC1iZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1w+4lSdbqt670KC/gZqXc6PXvZHDAZJ0an6ijJAFIcvoo6y7lazCgt++
g8JpRoPUzermQAdvdSyRIVILfTx71Yfbb3ZtN9QnAbGHSQlpcVke6DHRuUxkfCWa
ACY7dEtYbTuiEPFCKjsb4f8+PKXNrKbUwwBRzR3GpOW/rU8+GpPdlkv6uzqPn2df
qWDyuJMdzikLgkj7v0ZuX/N25xkJ7aGkhfEiinjy7IIpgeYGx+pO6qVsTjYhnBkc
imQs+WNG/H4UEz5C50JwY3tKvyWseZrObKDE69t/unziKNa5LDVaexPe3NETAorw
oC+w0PO8p3pVCz6iAFBP5YWC6OLX+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP0d
S/BnCFtVmICfQqN7DlYwdm3kMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMjJCQzA1QUY0N0UxMUVGOTBCREI0Nzc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPcxMA0GCSqGSIb3DQEBCwUA
A4IBAQB6/8OtcIFme5tNT3YckrbNFuyXCh5IQt+k7D7WPRLgZKNKGi8YEG8UK31h
aVP/fUPHrDM6L/CHirGotxeY7yDL21kEhLnARKsd3Ne4qZ+afXnGhRoavP49A+yk
/n0BVYFIcu8E+oO/ydfp+MJN4xyHFqOf/fle6EWJNbOb6JtwFgwVNC9bOQrw7pb4
O1bxXyJj5/+NhziRKEIR0uPzxNp78bq8F3DhGS/2c0VIku/mMCf+9t/9siLqF3rT
6seyD0fwRbCjTzN2z4iyHz1XFtqzx22j5lU9Vi+DNqkFRAyZ6VkeCrcwYh5xo0xY
ohvFfxOaHz1yPByNDgBc5YNf4pGf
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:07 2025 by rpki-client