Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5238E46CF46111EF9E8EB8AF762E951A.roa
File: 5238E46CF46111EF9E8EB8AF762E951A.roa (raw, json)
Hash identifier: gzAbuhLTNN2MkYjkID2TELQKzPglOyMZ3ZzvM3MSJ/o=
Subject key identifier: 91:5C:8C:63:AA:03:EC:FB:E9:21:54:CA:3C:CA:FE:AF:DA:E8:66:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01350D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5238E46CF46111EF9E8EB8AF762E951A.roa
Signing time: Wed 26 Feb 2025 16:47:10 +0000
ROA not before: Wed 26 Feb 2025 16:47:06 +0000
ROA not after: Thu 19 Feb 2026 16:47:06 +0000
asID: 984
IP address blocks: 156.245.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79117 (0x1350d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:47:06 2025 GMT
Not After : Feb 19 16:47:06 2026 GMT
Subject: CN=67bf458e-7c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:44:82:c0:a0:99:de:7f:3e:88:3b:4d:21:
bb:83:7d:b9:05:87:6f:87:dc:0a:49:b4:2a:5c:ba:
cc:c0:ea:bb:8d:77:a6:6d:62:92:ac:3a:2e:af:aa:
73:92:bf:00:6b:84:24:c9:f8:7f:67:64:da:02:12:
78:fc:3d:a5:df:b8:4e:db:53:ed:73:52:68:5e:a6:
3d:d3:12:fe:e2:a7:1e:04:55:05:af:5d:5a:77:ad:
e5:21:42:29:ad:03:d3:49:6a:43:b2:9c:85:ad:5b:
b7:af:20:4d:07:a3:5e:f6:36:ca:11:91:65:51:f5:
91:a9:15:c2:7c:4f:1b:d6:22:a3:44:cf:ee:62:eb:
fd:30:df:2c:2a:42:af:64:89:cd:97:b2:03:1f:37:
cf:28:70:96:86:1c:2c:a4:d7:65:7f:66:6d:f0:5c:
f9:b7:bf:5a:b5:7d:98:46:1f:13:41:5a:9a:57:12:
97:88:e1:30:9a:53:71:cc:32:08:42:e0:7b:7e:41:
a1:bb:9b:4c:f1:25:69:86:fc:6a:5a:05:a2:92:86:
06:5a:3f:af:cd:f2:87:9f:7a:b8:30:58:d1:9a:5d:
63:a6:6c:c8:1f:39:e8:c7:e0:b6:5b:e0:32:aa:e8:
51:28:50:2b:21:c2:1e:f5:41:40:b8:1d:00:d0:e9:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5C:8C:63:AA:03:EC:FB:E9:21:54:CA:3C:CA:FE:AF:DA:E8:66:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5238E46CF46111EF9E8EB8AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.67.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2a:6a:80:2b:b6:85:3d:24:54:b7:a1:09:05:0f:f5:61:ef:
77:17:90:1b:74:c1:28:be:cf:b8:37:0b:fd:1a:28:a8:25:8c:
82:79:9c:69:ce:bd:b7:1f:1f:f3:3d:ae:fd:f0:62:f3:22:84:
99:b5:2a:f3:1a:e5:f3:8c:5a:1f:fc:be:6a:6f:11:f9:97:76:
f1:e0:a0:65:ea:7a:e6:86:b0:43:88:17:b3:c5:6d:9a:0f:64:
a7:48:e8:a2:f7:d2:09:ad:2f:1d:65:07:33:a0:5c:91:81:08:
c8:fc:cb:92:b0:a3:f6:44:ae:ca:f6:f7:10:d0:9e:b3:23:8a:
17:45:b0:04:96:09:d2:51:18:2c:77:90:f5:d3:df:35:bf:97:
c9:fc:91:ef:c0:29:fe:20:be:2b:ff:70:d6:6c:82:0e:12:84:
1b:58:15:20:a7:3e:cf:b9:1d:fb:c2:75:b9:2b:63:35:6c:9e:
3a:0d:82:88:f7:36:e9:32:6b:42:71:58:36:79:fc:1b:d5:74:
23:e9:84:81:f2:fb:8f:8a:de:b5:d3:7c:e2:ce:c8:25:18:e8:
c5:4f:62:2b:dc:cf:36:7e:11:1b:0f:62:ce:83:e3:37:c1:a3:
94:80:a5:ba:13:ec:11:12:25:85:3b:0c:db:93:c5:8c:54:c4:
86:40:55:33
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATUNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTY0NzA2WhcNMjYwMjE5MTY0NzA2WjAYMRYw
FAYDVQQDEw02N2JmNDU4ZS03YzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoz9EgsCgmd5/Pog7TSG7g325BYdvh9wKSbQqXLrMwOq7jXembWKSrDou
r6pzkr8Aa4Qkyfh/Z2TaAhJ4/D2l37hO21Ptc1JoXqY90xL+4qceBFUFr11ad63l
IUIprQPTSWpDspyFrVu3ryBNB6Ne9jbKEZFlUfWRqRXCfE8b1iKjRM/uYuv9MN8s
KkKvZInNl7IDHzfPKHCWhhwspNdlf2Zt8Fz5t79atX2YRh8TQVqaVxKXiOEwmlNx
zDIIQuB7fkGhu5tM8SVphvxqWgWikoYGWj+vzfKHn3q4MFjRml1jpmzIHznox+C2
W+AyquhRKFArIcIe9UFAuB0A0OmK4wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJFc
jGOqA+z76SFUyjzK/q/a6GZVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MjM4RTQ2Q0Y0NjExMUVGOUU4RUI4QUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPVDMA0GCSqGSIb3DQEBCwUA
A4IBAQCXKmqAK7aFPSRUt6EJBQ/1Ye93F5AbdMEovs+4Nwv9GiioJYyCeZxpzr23
Hx/zPa798GLzIoSZtSrzGuXzjFof/L5qbxH5l3bx4KBl6nrmhrBDiBezxW2aD2Sn
SOii99IJrS8dZQczoFyRgQjI/MuSsKP2RK7K9vcQ0J6zI4oXRbAElgnSURgsd5D1
0981v5fJ/JHvwCn+IL4r/3DWbIIOEoQbWBUgpz7PuR37wnW5K2M1bJ46DYKI9zbp
MmtCcVg2efwb1XQj6YSB8vuPit6103zizsglGOjFT2Ir3M82fhEbD2LOg+M3waOU
gKW6E+wREiWFOwzbk8WMVMSGQFUz
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:47 2025 by rpki-client