Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D106E52F46111EFAD04EFAD762E951A.roa
File: 3D106E52F46111EFAD04EFAD762E951A.roa (raw, json)
Hash identifier: aNAtMOjHle+rOrC+Aoc1SAev8KI455Lcs3d91KsHEz0=
Subject key identifier: B6:E5:1F:9D:9B:61:10:42:3D:49:2C:79:2E:BF:6E:B7:DD:29:2F:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01350B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D106E52F46111EFAD04EFAD762E951A.roa
Signing time: Wed 26 Feb 2025 16:46:34 +0000
ROA not before: Wed 26 Feb 2025 16:46:31 +0000
ROA not after: Thu 19 Feb 2026 16:46:31 +0000
asID: 984
IP address blocks: 156.252.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79115 (0x1350b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:46:31 2025 GMT
Not After : Feb 19 16:46:31 2026 GMT
Subject: CN=67bf456a-58be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:31:5e:27:0d:cf:e2:8f:d6:af:b7:cc:56:
8b:03:ac:b8:5a:8d:69:0e:fe:5a:0c:b8:a0:79:e5:
52:8e:b0:b9:f3:ed:16:89:e4:0e:49:33:3a:33:ef:
0e:b5:c0:54:65:70:f1:c7:af:3d:23:d7:d2:d8:ea:
3d:26:a6:5e:0a:cc:ca:01:b8:57:2a:41:66:0e:8a:
8d:ca:0b:d2:d3:34:44:76:7a:63:1a:66:60:36:a4:
50:0e:fc:f7:4d:48:3d:8a:26:f3:3a:73:2f:b7:aa:
ec:77:ef:a2:c7:19:fc:4d:d1:9c:7e:a0:ed:e7:1a:
02:d7:a5:76:79:7e:c6:59:2d:1c:25:2e:44:3a:7e:
db:ad:8d:91:95:af:bf:da:c5:70:d4:82:37:ab:ba:
ed:b4:75:64:3d:b6:75:9e:71:bd:9d:e3:2e:2a:59:
92:4f:90:fa:4c:15:97:fc:50:cc:bb:03:54:8b:9a:
be:7c:b8:c5:7d:df:f1:f4:6e:5a:70:f7:17:0a:65:
64:9d:4f:d1:10:5f:61:38:00:95:f9:5b:86:ff:47:
fe:ff:21:07:e5:c8:97:af:c9:f2:44:e2:fa:ce:8a:
f8:85:66:3d:54:6f:86:a3:97:33:f7:fd:88:08:13:
0b:8f:ff:c5:db:7c:2f:2f:9d:c5:a5:52:77:c1:69:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E5:1F:9D:9B:61:10:42:3D:49:2C:79:2E:BF:6E:B7:DD:29:2F:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D106E52F46111EFAD04EFAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.252.0/24
Signature Algorithm: sha256WithRSAEncryption
19:fd:13:2b:3f:79:23:ee:b1:ef:df:1c:91:58:04:5d:ca:ef:
da:1e:01:29:8d:56:08:35:d1:09:1a:86:35:76:3d:4c:31:34:
d6:6f:ac:82:7d:05:fb:e5:d2:47:b1:e4:da:33:da:e4:32:4c:
16:82:db:15:74:a1:ca:88:09:18:d5:f8:60:67:af:3b:bf:a6:
37:57:3f:04:85:b1:ee:86:4e:51:d2:31:ef:2b:25:7f:17:b3:
13:d2:a1:37:83:cf:cd:c3:0d:51:b8:6b:a9:51:e1:83:59:e6:
ef:fd:92:d5:f7:8a:21:7e:f3:15:28:70:11:20:93:f5:e7:3f:
4d:f2:eb:07:41:44:28:7d:4b:08:23:d6:50:0c:c0:b1:1d:bb:
a2:78:97:24:08:6d:d9:b8:20:c0:8a:a6:87:bd:8e:f3:38:96:
2a:32:26:da:b7:30:92:d0:79:d7:11:90:30:ea:1c:b7:ab:f2:
5d:94:a2:9a:9f:3a:35:cd:e8:aa:ea:34:05:4e:04:ab:13:51:
ce:2e:65:df:c3:e2:cb:8a:3c:27:f9:c2:01:cf:f1:16:74:6a:
f0:84:2d:99:1b:49:e4:ce:e4:2c:c1:81:ef:a3:d0:0d:31:24:
8a:29:89:ba:50:f8:22:fd:bf:89:1b:d5:04:8c:3c:52:42:b3:
a8:bc:38:cf
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATULMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTY0NjMxWhcNMjYwMjE5MTY0NjMxWjAYMRYw
FAYDVQQDEw02N2JmNDU2YS01OGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0WkxXicNz+KP1q+3zFaLA6y4Wo1pDv5aDLigeeVSjrC58+0WieQOSTM6
M+8OtcBUZXDxx689I9fS2Oo9JqZeCszKAbhXKkFmDoqNygvS0zREdnpjGmZgNqRQ
Dvz3TUg9iibzOnMvt6rsd++ixxn8TdGcfqDt5xoC16V2eX7GWS0cJS5EOn7brY2R
la+/2sVw1II3q7rttHVkPbZ1nnG9neMuKlmST5D6TBWX/FDMuwNUi5q+fLjFfd/x
9G5acPcXCmVknU/REF9hOACV+VuG/0f+/yEH5ciXr8nyROL6zor4hWY9VG+Go5cz
9/2ICBMLj//F23wvL53FpVJ3wWn/UwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLbl
H52bYRBCPUkseS6/brfdKS+2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRDEwNkU1MkY0NjExMUVGQUQwNEVGQUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPz8MA0GCSqGSIb3DQEBCwUA
A4IBAQAZ/RMrP3kj7rHv3xyRWARdyu/aHgEpjVYINdEJGoY1dj1MMTTWb6yCfQX7
5dJHseTaM9rkMkwWgtsVdKHKiAkY1fhgZ687v6Y3Vz8EhbHuhk5R0jHvKyV/F7MT
0qE3g8/Nww1RuGupUeGDWebv/ZLV94ohfvMVKHARIJP15z9N8usHQUQofUsII9ZQ
DMCxHbuieJckCG3ZuCDAiqaHvY7zOJYqMibatzCS0HnXEZAw6hy3q/JdlKKanzo1
zeiq6jQFTgSrE1HOLmXfw+LLijwn+cIBz/EWdGrwhC2ZG0nkzuQswYHvo9ANMSSK
KYm6UPgi/b+JG9UEjDxSQrOovDjP
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:06 2025 by rpki-client