Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BFED428F2C411EFBBB5F29D762E951A.roa
File: 5BFED428F2C411EFBBB5F29D762E951A.roa (raw, json)
Hash identifier: /k/HU19/RMsCHKy34OIYvrS/2DMgyPc+RddevUmTgM0=
Subject key identifier: 68:CA:84:17:D0:ED:FA:17:10:C6:FF:18:23:CE:93:6A:14:11:BF:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BFED428F2C411EFBBB5F29D762E951A.roa
Signing time: Mon 24 Feb 2025 15:31:04 +0000
ROA not before: Mon 24 Feb 2025 15:31:00 +0000
ROA not after: Sat 29 Mar 2025 15:31:00 +0000
asID: 203020
IP address blocks: 156.235.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76805 (0x12c05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 15:31:00 2025 GMT
Not After : Mar 29 15:31:00 2025 GMT
Subject: CN=67bc90b8-cb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:88:71:9b:a8:7d:f8:03:45:f0:e0:c3:80:
b8:9d:65:bf:c4:0c:81:ae:d5:d3:41:96:48:99:47:
91:0d:be:30:4f:4c:e3:9b:8d:0b:01:fc:47:aa:8c:
ee:85:b4:d0:a2:b4:37:f3:1a:97:85:60:c4:9c:3d:
49:b5:7d:2d:0c:a3:bd:9b:d0:59:6c:44:2d:78:b1:
67:59:bb:a6:72:c1:5b:56:08:f4:17:5c:9f:89:36:
3c:9e:3d:2c:64:e8:c6:32:d7:d0:99:2f:d0:05:95:
1c:9e:78:38:eb:82:4e:a8:5e:f9:fb:75:41:dc:d8:
73:be:7a:96:fc:25:ca:ac:4e:03:d9:29:ac:ce:99:
2a:47:7a:72:8a:e6:4b:bc:25:c6:48:13:d0:6f:ce:
7e:08:f3:a2:67:a5:1c:54:47:45:2b:a6:80:da:4f:
19:67:3f:c6:ab:c7:ca:7a:03:dc:97:4e:4d:6e:cb:
66:34:eb:bd:98:ad:39:47:eb:d3:1f:e6:d8:9e:3c:
b8:77:21:5b:de:af:00:e8:fa:87:89:19:3f:5f:dc:
89:25:f8:50:fb:56:02:74:1c:af:b7:81:8b:67:7e:
53:f1:35:ed:a7:cc:69:40:0b:8a:2f:f8:59:cf:77:
c0:c4:75:d9:a5:11:d8:fa:a3:73:e8:21:9e:f9:69:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CA:84:17:D0:ED:FA:17:10:C6:FF:18:23:CE:93:6A:14:11:BF:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BFED428F2C411EFBBB5F29D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.68.0/23
Signature Algorithm: sha256WithRSAEncryption
41:47:99:84:55:f6:30:fc:86:eb:a1:be:82:b1:4c:94:19:20:
06:e1:6f:fd:ac:96:b1:af:5d:73:fc:c7:14:70:36:33:d6:f8:
de:9d:c7:fa:07:8d:63:e0:81:a8:97:47:65:3b:01:c1:bc:5a:
b0:24:a2:f5:e4:57:5b:a3:e7:59:ef:61:cf:d6:a9:8c:e1:ce:
42:f3:ec:78:a6:81:a6:b3:31:3c:9f:cd:c1:ee:45:a7:6d:1a:
38:27:81:f8:a4:b9:e3:e6:19:19:98:62:ad:90:ed:3a:05:6f:
d6:6c:c0:88:c9:bd:e4:1b:e7:4f:e8:2d:9b:54:b1:74:96:08:
91:0e:ab:c5:e4:e5:ec:2e:97:7d:3f:be:88:03:cb:6a:45:03:
dd:36:e0:7a:42:e5:77:2f:95:2f:10:63:74:2a:6b:c7:a2:b2:
77:9c:c7:d6:9c:aa:7d:5e:a4:1f:2a:89:f4:14:53:ee:14:65:
cd:a6:19:9b:ae:f5:83:04:9a:cb:86:00:9e:a3:97:60:8c:8a:
d9:01:61:a3:bd:cd:84:f0:33:5d:fd:d3:f7:e6:99:85:41:b9:
1f:c0:bb:1e:27:64:d1:47:bb:e6:3f:0b:be:13:f9:da:92:3c:
e2:70:f5:a7:55:4b:6f:df:43:8b:e7:db:96:4e:17:62:72:c6:
77:69:20:57
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASwFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI0MTUzMTAwWhcNMjUwMzI5MTUzMTAwWjAYMRYw
FAYDVQQDEw02N2JjOTBiOC1jYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApc+IcZuoffgDRfDgw4C4nWW/xAyBrtXTQZZImUeRDb4wT0zjm40LAfxH
qozuhbTQorQ38xqXhWDEnD1JtX0tDKO9m9BZbEQteLFnWbumcsFbVgj0F1yfiTY8
nj0sZOjGMtfQmS/QBZUcnng464JOqF75+3VB3NhzvnqW/CXKrE4D2SmszpkqR3py
iuZLvCXGSBPQb85+CPOiZ6UcVEdFK6aA2k8ZZz/Gq8fKegPcl05NbstmNOu9mK05
R+vTH+bYnjy4dyFb3q8A6PqHiRk/X9yJJfhQ+1YCdByvt4GLZ35T8TXtp8xpQAuK
L/hZz3fAxHXZpRHY+qNz6CGe+Wms7QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGjK
hBfQ7foXEMb/GCPOk2oUEb9RMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QkZFRDQyOEYyQzQxMUVGQkJCNUYyOUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOtEMA0GCSqGSIb3DQEBCwUA
A4IBAQBBR5mEVfYw/Ibrob6CsUyUGSAG4W/9rJaxr11z/McUcDYz1vjencf6B41j
4IGol0dlOwHBvFqwJKL15Fdbo+dZ72HP1qmM4c5C8+x4poGmszE8n83B7kWnbRo4
J4H4pLnj5hkZmGKtkO06BW/WbMCIyb3kG+dP6C2bVLF0lgiRDqvF5OXsLpd9P76I
A8tqRQPdNuB6QuV3L5UvEGN0KmvHorJ3nMfWnKp9XqQfKon0FFPuFGXNphmbrvWD
BJrLhgCeo5dgjIrZAWGjvc2E8DNd/dP35pmFQbkfwLseJ2TRR7vmPwu+E/nakjzi
cPWnVUtv30OL59uWThdicsZ3aSBX
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:11:14 2025 by rpki-client