Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6589CEBAFF3711EF8F1AC765762E951A.roa
File: 6589CEBAFF3711EF8F1AC765762E951A.roa (raw, json)
Hash identifier: 7KDUVsLjTyDYZak26u0AclmyL39Arxv1WRHuPTPiEj4=
Subject key identifier: 7F:15:0A:B2:3C:4D:9C:B4:55:94:79:2E:AB:95:02:9B:02:8F:81:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01455F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6589CEBAFF3711EF8F1AC765762E951A.roa
Signing time: Wed 12 Mar 2025 11:44:46 +0000
ROA not before: Wed 12 Mar 2025 11:44:42 +0000
ROA not after: Thu 08 May 2025 11:44:42 +0000
asID: 150706
IP address blocks: 156.236.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83295 (0x1455f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 11:44:42 2025 GMT
Not After : May 8 11:44:42 2025 GMT
Subject: CN=67d173ae-0408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:dc:2f:b3:33:13:82:61:5e:0d:03:48:1e:
63:96:2e:f2:a5:44:ca:9d:82:da:26:ab:05:8f:cf:
c4:c6:2d:85:21:f8:66:0c:ec:96:8a:12:13:17:c0:
12:5c:c0:b5:84:a1:64:a1:a2:f2:12:fb:e7:59:f6:
b5:37:ac:8a:d0:4e:f2:52:5f:fb:2e:fc:e3:12:72:
18:fa:7f:29:63:62:f9:6c:b1:72:af:ea:f6:c2:75:
cd:a1:52:71:6e:89:e1:34:45:ee:d0:53:0a:a6:a0:
b3:7a:86:2e:03:a7:68:49:fb:21:82:c5:2f:46:9a:
76:d4:1c:63:3d:0c:3e:ad:be:1c:bd:00:b0:8b:28:
a8:e7:69:b4:f2:96:aa:7e:d6:63:ba:ec:0b:11:34:
ce:b2:fe:59:38:3e:e9:f4:94:ff:e0:13:c2:2e:93:
fc:b6:ca:1d:85:e4:58:c3:3d:e6:b7:8c:d6:12:ec:
88:f6:d7:03:0c:d8:9a:ce:9e:ef:63:2e:2d:3b:3f:
6f:82:53:92:7f:9a:90:18:39:54:cf:98:e9:a8:1e:
c3:54:f9:1d:2f:8e:c6:60:0f:a6:5b:8e:29:74:73:
f4:7c:d0:bd:0d:cd:14:01:49:80:d0:5f:d9:71:40:
0d:43:83:1d:a4:e9:b3:2a:a6:c6:c1:6c:48:db:fb:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:15:0A:B2:3C:4D:9C:B4:55:94:79:2E:AB:95:02:9B:02:8F:81:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6589CEBAFF3711EF8F1AC765762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.108.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:ab:50:aa:7a:a6:28:43:5e:3b:2f:34:d2:50:f8:32:ba:ba:
27:0f:6c:10:6c:8a:6b:d4:09:7f:5e:6f:17:e2:dc:8f:e6:af:
87:dc:19:60:f8:2f:9f:fb:aa:ad:0b:07:b7:86:dd:d9:4c:5d:
22:4d:10:ab:39:0c:21:c2:b8:c3:ea:b3:9e:38:d0:6f:2c:4a:
2b:fd:cc:26:4f:c1:35:e2:23:76:a3:fb:c5:85:01:3a:b7:4a:
c6:40:2e:78:c3:dd:09:83:5d:af:57:12:d5:e2:c7:d0:d4:fb:
af:d7:4e:f6:8a:63:69:10:fc:4d:78:74:6b:45:8e:c6:66:42:
66:c3:1f:53:d6:9a:56:1a:63:52:6d:73:7f:d7:e8:63:06:95:
c0:88:94:58:f7:9b:0b:45:7e:d8:a2:0e:7a:fe:45:9f:0f:57:
1b:a5:94:29:60:76:04:8c:c9:ae:f3:9a:d0:94:ba:7b:f3:ed:
94:d3:be:ca:24:99:32:b0:53:e2:0c:ae:21:ae:4b:32:10:21:
94:22:50:da:96:51:3f:8b:dd:38:0a:a0:98:31:19:33:22:f1:
dd:43:4d:68:a7:ef:4e:d4:74:81:f5:94:6a:1f:db:61:85:e9:
d3:0a:56:f6:0e:2a:14:10:cf:e3:cd:69:4b:4f:3c:5e:4e:ef:
f6:0c:ae:a2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUVfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEyMTE0NDQyWhcNMjUwNTA4MTE0NDQyWjAYMRYw
FAYDVQQDEw02N2QxNzNhZS0wNDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzDXcL7MzE4JhXg0DSB5jli7ypUTKnYLaJqsFj8/Exi2FIfhmDOyWihIT
F8ASXMC1hKFkoaLyEvvnWfa1N6yK0E7yUl/7LvzjEnIY+n8pY2L5bLFyr+r2wnXN
oVJxbonhNEXu0FMKpqCzeoYuA6doSfshgsUvRpp21BxjPQw+rb4cvQCwiyio52m0
8paqftZjuuwLETTOsv5ZOD7p9JT/4BPCLpP8tsodheRYwz3mt4zWEuyI9tcDDNia
zp7vYy4tOz9vglOSf5qQGDlUz5jpqB7DVPkdL47GYA+mW44pdHP0fNC9Dc0UAUmA
0F/ZcUANQ4MdpOmzKqbGwWxI2/vN1wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH8V
CrI8TZy0VZR5LquVApsCj4EXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NTg5Q0VCQUZGMzcxMUVGOEYxQUM3NjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOxsMA0GCSqGSIb3DQEBCwUA
A4IBAQCdq1CqeqYoQ147LzTSUPgyuronD2wQbIpr1Al/Xm8X4tyP5q+H3Blg+C+f
+6qtCwe3ht3ZTF0iTRCrOQwhwrjD6rOeONBvLEor/cwmT8E14iN2o/vFhQE6t0rG
QC54w90Jg12vVxLV4sfQ1Puv1072imNpEPxNeHRrRY7GZkJmwx9T1ppWGmNSbXN/
1+hjBpXAiJRY95sLRX7Yog56/kWfD1cbpZQpYHYEjMmu85rQlLp78+2U077KJJky
sFPiDK4hrksyECGUIlDallE/i904CqCYMRkzIvHdQ01op+9O1HSB9ZRqH9thhenT
Clb2DioUEM/jzWlLTzxeTu/2DK6i
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:44 2025 by rpki-client