Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3452CED207B111F0A44E0EBE762E951A.roa
File: 3452CED207B111F0A44E0EBE762E951A.roa (raw, json)
Hash identifier: 1EtqkjlWQxICH8zEeryTwQwvfst5H60PcukNTkYDSDw=
Subject key identifier: EB:D2:DD:0F:F0:B5:B7:18:C0:4F:C5:AC:CB:C7:D9:08:F2:25:F3:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3452CED207B111F0A44E0EBE762E951A.roa
Signing time: Sun 23 Mar 2025 06:36:52 +0000
ROA not before: Sun 23 Mar 2025 06:36:48 +0000
ROA not after: Tue 08 Apr 2025 06:36:48 +0000
asID: 7018
IP address blocks: 156.238.120.0/23 maxlen: 24
156.238.122.0/23 maxlen: 24
156.238.124.0/23 maxlen: 24
156.238.126.0/23 maxlen: 24
156.238.188.0/23 maxlen: 24
156.238.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83894 (0x147b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 23 06:36:48 2025 GMT
Not After : Apr 8 06:36:48 2025 GMT
Subject: CN=67dfac04-69c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:a9:e7:72:24:c9:cf:07:8b:01:54:00:0f:
00:d2:1e:9b:71:86:e4:a2:43:fa:f4:3a:a9:15:70:
17:41:a0:56:ca:40:59:59:e6:f5:b8:d3:a7:84:6f:
77:93:6e:de:c7:06:66:7f:ee:7f:3c:d1:0b:f1:f5:
d7:1a:57:38:45:89:55:56:3a:1d:b6:41:ae:03:7f:
cb:34:8d:75:b1:ec:96:27:d1:8d:a1:fe:09:59:d9:
c0:86:4f:4f:07:94:d0:7e:02:ad:10:56:b5:97:52:
11:55:9f:24:11:d3:6d:5b:ee:0b:13:d0:50:30:fc:
0d:46:fe:a8:72:2d:77:85:34:2c:37:69:e4:89:05:
c3:99:69:50:eb:a3:a2:5c:7c:a8:27:26:ff:9e:17:
aa:f0:7e:71:23:5d:fb:c8:27:4d:84:23:cf:54:21:
4e:98:ab:04:89:10:71:3f:78:e6:37:ea:a0:30:8a:
39:b2:3f:06:32:27:af:f7:1f:a6:92:37:af:96:64:
f3:bd:68:4e:c9:3a:97:c6:41:b5:a1:d6:cd:ac:aa:
e9:2e:df:ae:52:43:39:6c:16:65:dd:db:bd:63:6c:
c2:8a:ca:cb:8d:95:c1:39:e9:64:d6:75:5a:9c:83:
54:0e:24:d9:be:c1:dd:47:fb:80:47:39:0a:46:22:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D2:DD:0F:F0:B5:B7:18:C0:4F:C5:AC:CB:C7:D9:08:F2:25:F3:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3452CED207B111F0A44E0EBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.120.0/21
156.238.188.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:df:b5:8a:45:c6:95:aa:5c:ff:4a:52:97:0c:a3:b3:fe:d8:
79:b5:b6:fb:bd:97:ec:12:80:40:5d:a8:9c:91:20:73:c1:02:
3f:2f:4b:3d:10:3d:e0:c2:1f:14:cc:a8:34:ca:0b:e8:b4:0c:
8a:a6:38:29:39:ab:60:75:c7:d4:60:72:56:c1:93:00:31:a4:
ed:fe:cb:c8:d8:a5:5d:29:8d:34:47:29:58:bc:18:0b:03:68:
d4:a6:38:c3:2b:ee:26:af:85:23:26:59:f6:b2:e8:d8:97:53:
6f:36:59:a2:54:ce:c7:96:c4:2e:40:66:ab:0d:a7:78:22:27:
7a:43:86:58:6f:05:1f:2a:54:fb:08:9b:88:32:1f:66:84:f1:
26:c6:8a:7c:58:38:3e:c9:b0:45:9b:00:a7:fe:f7:20:98:e5:
dd:c4:5e:2b:03:8a:89:07:f1:e5:cf:1a:60:ae:13:6a:7b:8c:
cd:b2:65:f4:f1:c9:37:bb:c0:47:81:1b:3b:07:47:a8:6d:10:
47:1a:5d:e8:21:3f:41:af:cc:6d:c3:10:52:34:45:90:b2:1e:
2b:40:c2:67:86:b6:58:d0:49:ca:7e:bf:b9:e0:c4:4c:1e:ee:
2f:4a:69:54:bc:ab:95:3e:31:be:4c:b7:17:4a:ae:3e:71:68:
0c:0f:d2:3b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUe2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzIzMDYzNjQ4WhcNMjUwNDA4MDYzNjQ4WjAYMRYw
FAYDVQQDEw02N2RmYWMwNC02OWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Smp53Ikyc8HiwFUAA8A0h6bcYbkokP69DqpFXAXQaBWykBZWeb1uNOn
hG93k27exwZmf+5/PNEL8fXXGlc4RYlVVjodtkGuA3/LNI11seyWJ9GNof4JWdnA
hk9PB5TQfgKtEFa1l1IRVZ8kEdNtW+4LE9BQMPwNRv6oci13hTQsN2nkiQXDmWlQ
66OiXHyoJyb/nheq8H5xI137yCdNhCPPVCFOmKsEiRBxP3jmN+qgMIo5sj8GMiev
9x+mkjevlmTzvWhOyTqXxkG1odbNrKrpLt+uUkM5bBZl3du9Y2zCisrLjZXBOelk
1nVanINUDiTZvsHdR/uARzkKRiIq7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvS
3Q/wtbcYwE/FrMvH2QjyJfOXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNDUyQ0VEMjA3QjExMUYwQTQ0RTBFQkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDnO54AwQCnO68MA0GCSqGSIb3
DQEBCwUAA4IBAQCq37WKRcaVqlz/SlKXDKOz/th5tbb7vZfsEoBAXaickSBzwQI/
L0s9ED3gwh8UzKg0ygvotAyKpjgpOatgdcfUYHJWwZMAMaTt/svI2KVdKY00RylY
vBgLA2jUpjjDK+4mr4UjJln2sujYl1NvNlmiVM7HlsQuQGarDad4Iid6Q4ZYbwUf
KlT7CJuIMh9mhPEmxop8WDg+ybBFmwCn/vcgmOXdxF4rA4qJB/HlzxpgrhNqe4zN
smX08ck3u8BHgRs7B0eobRBHGl3oIT9Br8xtwxBSNEWQsh4rQMJnhrZY0EnKfr+5
4MRMHu4vSmlUvKuVPjG+TLcXSq4+cWgMD9I7
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:20 2025 by rpki-client