Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44E1E04AF60D11EFA17E64AB762E951A.roa
File: 44E1E04AF60D11EFA17E64AB762E951A.roa (raw, json)
Hash identifier: AOkM5ZvJynnt/lyjrT1Q/7D0yWSGlXzwX6FTifcmTMs=
Subject key identifier: B4:80:49:70:5D:5F:D7:B2:D3:E6:23:18:17:88:F6:91:B2:CD:AC:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44E1E04AF60D11EFA17E64AB762E951A.roa
Signing time: Fri 28 Feb 2025 19:50:32 +0000
ROA not before: Fri 28 Feb 2025 19:50:28 +0000
ROA not after: Sun 13 Apr 2025 19:50:28 +0000
asID: 138915
IP address blocks: 156.244.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81679 (0x13f0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 19:50:28 2025 GMT
Not After : Apr 13 19:50:28 2025 GMT
Subject: CN=67c21388-3179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:33:81:fd:b4:2e:13:93:ee:72:00:1e:b6:
c7:bd:dd:84:c5:2e:5e:72:68:43:2b:fe:05:6a:20:
c1:94:89:bc:a8:d8:d2:c2:cc:95:0e:17:5b:c6:4c:
84:90:d1:45:07:0e:6e:16:6f:44:9d:15:8e:ca:dd:
b1:9a:c2:3a:cd:f1:3b:dc:e8:b1:68:25:4c:96:17:
b3:03:e4:c5:e4:d8:2e:fd:e4:e3:b9:c3:3f:52:16:
d4:d0:51:1f:ac:a5:20:f8:e4:2f:0d:9e:d4:d2:31:
a6:9b:27:63:bd:67:62:fe:d5:db:16:04:d2:f4:6b:
1a:80:72:9a:d6:4b:b8:4a:aa:80:1d:d9:e2:3d:22:
d8:6c:14:8a:49:02:68:a0:34:d8:10:a9:cc:37:5a:
54:e6:da:a9:5d:d6:eb:77:50:33:9e:20:ab:e5:16:
51:f2:56:79:1a:05:0e:83:a2:3e:d9:64:92:8d:cc:
4d:f6:55:8e:f2:fc:0a:68:33:6c:f7:ab:47:11:0c:
9f:f9:07:c0:ba:01:9a:b9:41:4c:9d:58:a5:1b:9b:
64:1e:e0:14:71:ac:a5:2a:e4:47:0a:13:07:a0:29:
d8:e5:62:89:14:7b:f4:60:c8:4e:5a:43:db:b2:06:
8f:13:3b:a1:28:ac:f7:90:4e:6f:24:44:f8:fe:92:
48:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:80:49:70:5D:5F:D7:B2:D3:E6:23:18:17:88:F6:91:B2:CD:AC:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44E1E04AF60D11EFA17E64AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.51.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8b:75:b6:7d:3d:7f:88:6a:d4:04:d3:d7:d3:f0:15:81:49:
ea:64:5c:25:2f:e4:2d:05:a6:11:3a:26:92:35:cc:42:65:ad:
7c:ab:88:b5:59:02:78:19:7e:32:98:97:af:66:73:15:31:3b:
d6:c8:54:17:5f:67:3e:e1:36:1f:6c:54:d4:29:b6:2d:79:a5:
92:83:02:3e:db:51:ac:e9:f5:8b:1b:60:63:e0:d5:8a:7c:19:
f6:2d:fd:1b:68:81:4c:22:73:66:a2:7a:98:fe:63:87:e0:61:
25:33:a6:a0:e3:d4:32:ed:b0:c2:7b:25:97:6b:54:0c:33:db:
5f:8d:40:0c:f4:bc:96:45:48:0c:f4:f3:12:46:72:ba:d9:ec:
09:87:b0:d5:7b:15:66:3d:8b:df:18:7f:79:2d:80:ba:d6:69:
90:88:63:a8:c2:54:48:6c:84:29:0d:9a:85:61:c9:b2:14:1f:
fd:a7:08:43:85:1d:42:9b:20:1e:27:27:6d:a5:17:29:51:bf:
7e:3e:eb:26:c5:16:77:6c:80:07:82:39:d3:36:75:fb:8c:af:
28:5d:2b:d8:e1:e8:14:19:7f:65:90:01:ae:00:3d:68:9b:1e:
79:4d:5d:19:3f:95:68:92:ff:1f:ea:38:5d:36:bd:07:3b:2f:
ac:c9:9e:41
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAT8PMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI4MTk1MDI4WhcNMjUwNDEzMTk1MDI4WjAYMRYw
FAYDVQQDEw02N2MyMTM4OC0zMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqFAzgf20LhOT7nIAHrbHvd2ExS5ecmhDK/4FaiDBlIm8qNjSwsyVDhdb
xkyEkNFFBw5uFm9EnRWOyt2xmsI6zfE73OixaCVMlhezA+TF5Ngu/eTjucM/UhbU
0FEfrKUg+OQvDZ7U0jGmmydjvWdi/tXbFgTS9GsagHKa1ku4SqqAHdniPSLYbBSK
SQJooDTYEKnMN1pU5tqpXdbrd1AzniCr5RZR8lZ5GgUOg6I+2WSSjcxN9lWO8vwK
aDNs96tHEQyf+QfAugGauUFMnVilG5tkHuAUcaylKuRHChMHoCnY5WKJFHv0YMhO
WkPbsgaPEzuhKKz3kE5vJET4/pJIlQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLSA
SXBdX9ey0+YjGBeI9pGyzaxNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NEUxRTA0QUY2MEQxMUVGQTE3RTY0QUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQzMA0GCSqGSIb3DQEBCwUA
A4IBAQB8i3W2fT1/iGrUBNPX0/AVgUnqZFwlL+QtBaYROiaSNcxCZa18q4i1WQJ4
GX4ymJevZnMVMTvWyFQXX2c+4TYfbFTUKbYteaWSgwI+21Gs6fWLG2Bj4NWKfBn2
Lf0baIFMInNmonqY/mOH4GElM6ag49Qy7bDCeyWXa1QMM9tfjUAM9LyWRUgM9PMS
RnK62ewJh7DVexVmPYvfGH95LYC61mmQiGOowlRIbIQpDZqFYcmyFB/9pwhDhR1C
myAeJydtpRcpUb9+PusmxRZ3bIAHgjnTNnX7jK8oXSvY4egUGX9lkAGuAD1omx55
TV0ZP5Vokv8f6jhdNr0HOy+syZ5B
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:13 2025 by rpki-client