Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4352D44AEF3311EF94D82263762E951A.roa
File: 4352D44AEF3311EF94D82263762E951A.roa (raw, json)
Hash identifier: sV6pTiMOFfRKxxeQDcscgZOQjYL48Pk0yPxe5FyTGY8=
Subject key identifier: 8A:8E:E7:75:4D:39:61:7F:D5:CE:E9:E7:3F:48:CA:35:06:DA:91:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012591
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4352D44AEF3311EF94D82263762E951A.roa
Signing time: Thu 20 Feb 2025 02:34:52 +0000
ROA not before: Thu 20 Feb 2025 02:34:48 +0000
ROA not after: Wed 31 Dec 2025 02:34:48 +0000
asID: 17561
IP address blocks: 156.236.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75153 (0x12591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 20 02:34:48 2025 GMT
Not After : Dec 31 02:34:48 2025 GMT
Subject: CN=67b694cc-346e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:cf:4e:8d:96:66:c7:12:37:a8:cb:f2:bc:
de:7f:cb:45:86:d3:07:58:cd:2c:d0:0d:36:fb:21:
10:b3:03:f4:b8:0d:e9:04:33:fa:76:b8:0e:1d:85:
d4:01:4b:a0:f5:f6:f5:f0:78:38:a2:bb:02:af:b0:
e8:57:72:80:ae:b4:64:8b:08:f4:1d:fe:c5:2d:95:
81:06:e8:69:75:f5:4b:1d:09:a9:47:1f:bc:75:04:
59:40:13:1a:1a:8e:30:a9:ea:c6:0e:ea:28:6e:e2:
71:88:79:ed:6a:e0:b4:89:ff:fb:68:37:a5:88:10:
9d:b4:f7:9a:39:53:4a:fa:36:67:27:e1:b5:d4:f5:
19:29:3c:0f:f3:d0:8d:53:e3:eb:a6:a9:06:8c:0e:
c6:38:45:9a:99:c2:77:fa:64:7d:e7:54:3d:8c:66:
b7:f4:0e:ec:6f:e4:89:93:4e:6d:2e:9a:4c:e8:19:
3a:f7:4e:03:57:fb:1d:a1:82:ba:e4:5d:83:97:55:
e8:38:78:91:0d:94:a8:6f:af:8f:8c:e1:a7:d4:37:
04:60:7a:6c:54:03:f0:45:31:62:fb:1c:63:b4:ea:
3d:11:b2:36:4b:c2:0d:1e:3f:30:c8:b8:c0:82:6e:
16:5e:de:36:b6:9e:d6:00:66:20:7c:b7:9a:19:98:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8E:E7:75:4D:39:61:7F:D5:CE:E9:E7:3F:48:CA:35:06:DA:91:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4352D44AEF3311EF94D82263762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:22:62:65:d0:58:46:4b:e5:0e:b4:81:bc:e9:c4:29:8e:f6:
28:69:e4:8f:ed:3d:57:a2:8c:15:34:06:89:b0:16:c4:bc:1b:
34:0d:b7:e1:02:2a:3c:1c:ac:9d:c1:7a:41:48:7c:82:9a:fb:
b6:78:5c:a4:0d:b0:9f:44:06:49:01:85:26:30:e7:a7:72:99:
7c:95:38:eb:de:e6:3d:cc:84:a7:70:c1:82:d9:3b:d0:88:2a:
cc:61:be:a8:d5:ff:c7:2f:23:d4:5e:5e:11:71:55:b6:d9:9a:
23:d7:ee:bd:b8:45:54:28:0f:f8:bc:13:f1:c2:f4:9d:eb:1c:
c3:b7:27:2f:f6:1a:02:28:8d:d9:e3:8f:9d:51:5e:2d:58:ec:
8c:31:d0:19:d5:4c:55:1a:22:32:c4:fa:bf:81:5b:b0:77:7f:
a3:cc:5a:15:c4:ba:ee:67:23:1f:77:6d:42:39:7e:0f:c2:e5:
eb:37:f7:ab:e2:30:71:92:0a:ca:90:ed:bd:d1:e8:4f:be:4c:
50:d2:87:0e:c4:e8:5f:66:57:cf:4a:bd:a9:19:93:d3:5a:e1:
86:eb:e5:b5:d9:3a:e8:e6:0f:cb:3d:7e:55:24:40:fe:b1:6c:
19:0c:4d:db:c0:55:38:e1:48:93:f3:76:48:ad:7b:92:10:32:
c0:b9:03:98
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASWRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjIwMDIzNDQ4WhcNMjUxMjMxMDIzNDQ4WjAYMRYw
FAYDVQQDEw02N2I2OTRjYy0zNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvfzPTo2WZscSN6jL8rzef8tFhtMHWM0s0A02+yEQswP0uA3pBDP6drgO
HYXUAUug9fb18Hg4orsCr7DoV3KArrRkiwj0Hf7FLZWBBuhpdfVLHQmpRx+8dQRZ
QBMaGo4wqerGDuoobuJxiHntauC0if/7aDeliBCdtPeaOVNK+jZnJ+G11PUZKTwP
89CNU+PrpqkGjA7GOEWamcJ3+mR951Q9jGa39A7sb+SJk05tLppM6Bk6904DV/sd
oYK65F2Dl1XoOHiRDZSob6+PjOGn1DcEYHpsVAPwRTFi+xxjtOo9EbI2S8INHj8w
yLjAgm4WXt42tp7WAGYgfLeaGZjnnQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIqO
53VNOWF/1c7p5z9IyjUG2pEyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MzUyRDQ0QUVGMzMxMUVGOTREODIyNjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOwTMA0GCSqGSIb3DQEBCwUA
A4IBAQC1ImJl0FhGS+UOtIG86cQpjvYoaeSP7T1XoowVNAaJsBbEvBs0DbfhAio8
HKydwXpBSHyCmvu2eFykDbCfRAZJAYUmMOencpl8lTjr3uY9zISncMGC2TvQiCrM
Yb6o1f/HLyPUXl4RcVW22Zoj1+69uEVUKA/4vBPxwvSd6xzDtycv9hoCKI3Z44+d
UV4tWOyMMdAZ1UxVGiIyxPq/gVuwd3+jzFoVxLruZyMfd21COX4PwuXrN/er4jBx
kgrKkO290ehPvkxQ0ocOxOhfZlfPSr2pGZPTWuGG6+W12Tro5g/LPX5VJED+sWwZ
DE3bwFU44UiT83ZIrXuSEDLAuQOY
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:32 2025 by rpki-client