Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A7F390000BE11F0BD55F9B8762E951A.roa
File: 5A7F390000BE11F0BD55F9B8762E951A.roa (raw, json)
Hash identifier: u7se9wewFbcOobYYjAwuciwpebi9DVKBdOrIhTftypg=
Subject key identifier: 7E:FD:66:E6:00:0D:64:8D:35:19:F6:E5:D8:D6:23:AF:0C:31:2F:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A7F390000BE11F0BD55F9B8762E951A.roa
Signing time: Fri 14 Mar 2025 10:23:21 +0000
ROA not before: Fri 14 Mar 2025 10:23:17 +0000
ROA not after: Tue 08 Apr 2025 10:23:17 +0000
asID: 138985
IP address blocks: 156.238.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83424 (0x145e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 10:23:17 2025 GMT
Not After : Apr 8 10:23:17 2025 GMT
Subject: CN=67d40399-ef4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:dc:48:ac:25:f4:66:64:9c:52:cc:1a:0e:
cd:b1:1d:98:d6:64:a8:10:25:e6:9c:17:c0:ec:c8:
2e:2f:6b:a2:94:23:92:2b:48:da:47:45:2a:8e:98:
18:e7:db:64:4e:72:74:dd:60:76:79:9d:82:19:43:
fd:aa:80:af:7b:e4:50:4e:93:42:f6:46:0d:64:1c:
ed:48:3c:8b:06:f3:e3:bb:b6:1c:36:b4:6e:8b:9a:
41:58:c6:4c:7c:c1:8c:3f:9b:22:a1:4f:2a:ef:7a:
20:3c:91:72:43:06:18:00:32:c3:6c:8f:94:d6:56:
f1:89:09:a0:68:88:e3:81:cf:08:93:75:da:66:e0:
32:df:b3:72:19:78:f8:98:5e:f4:ab:f8:84:d1:ee:
74:5c:01:6f:2b:d8:2b:fe:2f:2f:69:b0:7e:be:b6:
da:6d:5a:24:9b:57:d8:84:49:3e:7e:45:ff:78:56:
0e:33:dd:cc:7a:5c:61:b7:4d:47:d9:61:78:8f:80:
ed:09:83:3e:5e:08:1f:ac:61:a2:6a:34:ce:49:11:
93:0a:97:b8:37:e5:8b:dc:1b:49:90:23:3f:54:5e:
02:98:27:a1:a9:40:69:21:a7:53:45:6f:8a:59:af:
63:3c:c8:e0:08:f3:92:e9:99:17:d9:84:a3:cb:64:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FD:66:E6:00:0D:64:8D:35:19:F6:E5:D8:D6:23:AF:0C:31:2F:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A7F390000BE11F0BD55F9B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e6:6e:5c:08:97:43:1a:a7:61:21:11:1f:f1:2a:64:27:8b:
a8:01:68:a8:15:de:88:93:3b:22:42:08:bd:94:aa:16:31:0f:
c4:87:c5:ac:2d:6c:c4:78:5b:8e:e7:0a:69:7b:ba:2c:78:48:
4a:34:46:fd:36:91:2f:94:a0:5c:f5:db:06:c1:85:5c:c0:15:
81:60:cb:25:1e:ee:54:46:13:ee:3d:68:ba:12:f0:b3:31:68:
ab:28:e7:cf:90:dd:0a:3f:a1:1c:d0:c6:11:c6:3b:a4:1a:d9:
14:e1:e1:15:52:64:47:5d:2a:1b:e1:41:f2:3c:4f:36:08:f5:
10:81:8f:e3:12:bf:99:4d:09:2b:56:15:95:09:b0:b0:e5:f4:
bf:69:7c:df:d1:d3:03:f4:ff:e7:02:6f:cb:6a:d0:f7:af:fc:
eb:1d:47:ee:d2:81:45:ba:93:58:9b:cd:41:e8:5d:79:27:ee:
3b:70:3a:bc:8a:84:7e:42:44:57:6b:93:30:c4:19:c3:5e:17:
d7:8b:09:f4:b7:57:e4:9d:25:45:5c:dd:47:c5:b7:25:a7:cd:
43:8b:ed:fa:25:9b:fa:8c:28:fb:1d:d7:f9:ce:b4:9d:0b:8b:
6f:0e:8e:95:36:a6:78:0d:b1:0f:bc:c3:fd:13:1c:9f:0e:e0:
57:7f:28:a8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUXgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE0MTAyMzE3WhcNMjUwNDA4MTAyMzE3WjAYMRYw
FAYDVQQDEw02N2Q0MDM5OS1lZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqiDcSKwl9GZknFLMGg7NsR2Y1mSoECXmnBfA7MguL2uilCOSK0jaR0Uq
jpgY59tkTnJ03WB2eZ2CGUP9qoCve+RQTpNC9kYNZBztSDyLBvPju7YcNrRui5pB
WMZMfMGMP5sioU8q73ogPJFyQwYYADLDbI+U1lbxiQmgaIjjgc8Ik3XaZuAy37Ny
GXj4mF70q/iE0e50XAFvK9gr/i8vabB+vrbabVokm1fYhEk+fkX/eFYOM93Melxh
t01H2WF4j4DtCYM+XggfrGGiajTOSRGTCpe4N+WL3BtJkCM/VF4CmCehqUBpIadT
RW+KWa9jPMjgCPOS6ZkX2YSjy2SEEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH79
ZuYADWSNNRn25djWI68MMS/JMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QTdGMzkwMDAwQkUxMUYwQkQ1NUY5Qjg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5RMA0GCSqGSIb3DQEBCwUA
A4IBAQCN5m5cCJdDGqdhIREf8SpkJ4uoAWioFd6IkzsiQgi9lKoWMQ/Eh8WsLWzE
eFuO5wppe7oseEhKNEb9NpEvlKBc9dsGwYVcwBWBYMslHu5URhPuPWi6EvCzMWir
KOfPkN0KP6Ec0MYRxjukGtkU4eEVUmRHXSob4UHyPE82CPUQgY/jEr+ZTQkrVhWV
CbCw5fS/aXzf0dMD9P/nAm/LatD3r/zrHUfu0oFFupNYm81B6F15J+47cDq8ioR+
QkRXa5MwxBnDXhfXiwn0t1fknSVFXN1Hxbclp81Di+36JZv6jCj7Hdf5zrSdC4tv
Do6VNqZ4DbEPvMP9ExyfDuBXfyio
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:52 2025 by rpki-client