Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EDDC714F81411EF9986B57C762E951A.roa
File: 3EDDC714F81411EF9986B57C762E951A.roa (raw, json)
Hash identifier: XuIjomr3SQ4YkrauGwVapcHXnk0UuaO6snuqSwIEDYo=
Subject key identifier: 47:1C:78:74:8B:B6:77:FB:EE:82:98:7F:59:04:C9:BA:D7:71:5F:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01410F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EDDC714F81411EF9986B57C762E951A.roa
Signing time: Mon 03 Mar 2025 09:45:31 +0000
ROA not before: Mon 03 Mar 2025 09:45:27 +0000
ROA not after: Sat 05 Apr 2025 09:45:27 +0000
asID: 269070
IP address blocks: 156.249.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82191 (0x1410f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 09:45:27 2025 GMT
Not After : Apr 5 09:45:27 2025 GMT
Subject: CN=67c57a3b-f212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:cf:67:26:99:76:ce:5a:c6:37:12:ad:85:
d5:17:12:3f:37:89:19:9d:cd:eb:43:f9:19:2b:30:
08:12:8c:92:d1:ff:bf:8c:74:ae:7c:20:ee:dc:a1:
60:a6:e7:d1:b7:37:41:85:75:8b:49:1a:6b:4d:e2:
82:04:9d:1d:c9:c2:8d:97:f8:c9:28:ec:58:98:c3:
d0:67:d6:65:f8:0f:3d:b6:93:da:f4:92:e0:b1:cb:
d6:c7:0e:e7:92:e0:5e:9b:fd:fd:94:03:da:e5:c4:
6c:bf:35:c6:7d:74:75:26:4a:56:25:57:f0:0c:bb:
d7:14:b0:91:71:dd:5d:55:00:a4:5a:7d:05:4e:53:
3e:17:58:cb:be:6e:75:aa:76:3d:b7:17:b8:24:ff:
3d:60:66:14:20:a0:7a:c2:05:8f:f6:14:62:fc:c5:
db:84:a4:ee:8c:c7:6a:c3:b4:d1:f4:2a:69:0c:69:
27:f3:87:ea:3e:5c:53:52:ae:ea:d4:97:e4:a8:6c:
7e:73:b4:6a:40:dd:e0:a8:2e:49:38:e9:7e:42:95:
e0:3a:de:e0:46:ca:fe:25:87:fe:37:ef:8c:09:7d:
8a:d2:9e:10:1e:5a:9b:5f:02:41:1f:52:3b:4a:fc:
b7:70:bb:94:51:c4:fc:a0:d8:4c:f5:14:6e:1f:b8:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1C:78:74:8B:B6:77:FB:EE:82:98:7F:59:04:C9:BA:D7:71:5F:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EDDC714F81411EF9986B57C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.66.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f7:c4:d3:b3:a1:71:d7:92:9b:a4:62:a0:a6:a6:e0:ad:0f:
08:d7:a7:7b:52:fb:3f:b2:58:6c:3b:ff:e1:4b:51:87:c5:97:
a7:61:89:73:44:73:a0:1b:f8:1e:36:dd:4f:61:67:f7:41:04:
37:40:c7:be:a7:eb:8e:af:fc:71:e7:dd:fe:6f:e3:8e:b3:a8:
db:d3:30:e3:7b:0c:dc:36:cf:bd:ab:d3:24:ce:56:b6:f2:6b:
0d:2c:3a:88:fa:b9:7f:7a:7d:f6:20:f9:14:04:0e:27:79:89:
76:ca:b2:27:07:e9:e4:c0:7a:a1:87:a0:20:95:1b:ee:18:82:
0e:d5:15:ee:ec:c7:5d:9f:a0:0e:f3:40:54:b2:d8:fd:d0:2d:
94:0f:ef:45:36:f8:f4:2c:4c:c0:59:f3:55:5f:a6:e8:94:7d:
e2:35:83:a7:b6:bb:d0:63:57:8c:5b:bb:13:e1:c5:f9:a3:cc:
4b:05:3a:c4:33:6f:d8:5f:72:77:9a:7e:6c:e0:f8:83:6d:20:
8f:24:18:a3:92:df:f3:be:df:81:60:20:ab:c4:52:86:40:8f:
d3:93:c6:cf:23:d3:a3:10:51:6f:fb:67:6e:43:ee:e6:3d:06:
dd:da:37:44:f8:90:aa:10:0d:4f:6c:5e:c9:25:fd:d2:6b:0d:
5c:0a:73:51
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUEPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzAzMDk0NTI3WhcNMjUwNDA1MDk0NTI3WjAYMRYw
FAYDVQQDEw02N2M1N2EzYi1mMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAux3PZyaZds5axjcSrYXVFxI/N4kZnc3rQ/kZKzAIEoyS0f+/jHSufCDu
3KFgpufRtzdBhXWLSRprTeKCBJ0dycKNl/jJKOxYmMPQZ9Zl+A89tpPa9JLgscvW
xw7nkuBem/39lAPa5cRsvzXGfXR1JkpWJVfwDLvXFLCRcd1dVQCkWn0FTlM+F1jL
vm51qnY9txe4JP89YGYUIKB6wgWP9hRi/MXbhKTujMdqw7TR9CppDGkn84fqPlxT
Uq7q1JfkqGx+c7RqQN3gqC5JOOl+QpXgOt7gRsr+JYf+N++MCX2K0p4QHlqbXwJB
H1I7Svy3cLuUUcT8oNhM9RRuH7jAMQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEcc
eHSLtnf77oKYf1kEybrXcV8HMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRUREQzcxNEY4MTQxMUVGOTk4NkI1N0M3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPlCMA0GCSqGSIb3DQEBCwUA
A4IBAQAD98TTs6Fx15KbpGKgpqbgrQ8I16d7Uvs/slhsO//hS1GHxZenYYlzRHOg
G/geNt1PYWf3QQQ3QMe+p+uOr/xx593+b+OOs6jb0zDjewzcNs+9q9Mkzla28msN
LDqI+rl/en32IPkUBA4neYl2yrInB+nkwHqhh6AglRvuGIIO1RXu7Mddn6AO80BU
stj90C2UD+9FNvj0LEzAWfNVX6bolH3iNYOntrvQY1eMW7sT4cX5o8xLBTrEM2/Y
X3J3mn5s4PiDbSCPJBijkt/zvt+BYCCrxFKGQI/Tk8bPI9OjEFFv+2duQ+7mPQbd
2jdE+JCqEA1PbF7JJf3Saw1cCnNR
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:06 2025 by rpki-client