Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/667BDF52E54711EF81615554762E951A.roa
File: 667BDF52E54711EF81615554762E951A.roa (raw, json)
Hash identifier: 52wx9V1SWgAPBvR6xhscP3KxpuR4VPOqRiyYgvWowNE=
Subject key identifier: 95:D3:BB:A9:51:C0:D4:84:CC:7D:74:17:F5:BB:38:50:C1:8A:B7:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D41
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/667BDF52E54711EF81615554762E951A.roa
Signing time: Fri 07 Feb 2025 11:33:50 +0000
ROA not before: Fri 07 Feb 2025 11:33:43 +0000
ROA not after: Mon 13 Dec 2027 11:33:43 +0000
asID: 17561
IP address blocks: 156.230.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73025 (0x11d41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 11:33:43 2025 GMT
Not After : Dec 13 11:33:43 2027 GMT
Subject: CN=67a5ef9e-8b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:40:93:e8:0e:ab:34:c4:48:10:b3:a7:12:
2a:0c:e2:f1:f1:71:82:3d:42:b0:71:42:d5:84:51:
bb:67:bd:c4:85:86:e6:a8:4c:de:9a:32:db:2e:26:
87:9e:01:f0:a4:6b:3e:1a:3c:1d:a7:bc:c9:62:5f:
21:c9:4c:7b:9e:75:e0:26:1e:ba:ca:4b:e9:88:2b:
c2:de:b9:58:4f:29:fe:5f:9b:48:44:d6:e3:90:0d:
25:e0:f1:2e:7b:cf:6d:4b:8c:66:43:2d:fe:66:10:
68:05:96:74:91:e3:94:b7:84:60:59:18:c7:57:5f:
29:7f:8e:7c:59:9a:05:01:8c:5b:70:3e:dc:f9:4d:
68:93:8a:7a:ee:c3:1f:c1:03:93:c2:d2:6a:3c:45:
6a:c8:26:64:9f:e4:88:c0:10:8d:a7:af:34:53:44:
6f:6a:70:00:85:20:86:2a:7a:24:aa:28:da:f0:dd:
0a:40:fd:d0:ba:0c:96:53:c2:e8:c0:f7:c1:2e:8e:
7e:b5:bc:37:80:8a:54:21:fb:f2:f7:11:58:30:a0:
7b:11:43:1d:c5:cf:7e:92:cd:2a:66:19:11:38:76:
70:8b:66:29:fd:5e:f4:ca:e1:fc:2d:b0:c5:d1:c5:
8c:b0:fe:a9:f0:a9:15:80:36:31:58:eb:35:ca:a2:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:BB:A9:51:C0:D4:84:CC:7D:74:17:F5:BB:38:50:C1:8A:B7:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/667BDF52E54711EF81615554762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.184.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ac:9d:16:14:6f:a4:f5:d4:b3:14:9a:91:d0:91:51:50:41:
41:0c:95:55:83:b4:bd:bc:37:3a:04:06:b8:f3:b1:3b:93:0f:
fc:fe:c0:ae:c5:70:19:f7:e6:46:73:10:b2:0d:65:c3:f2:d0:
37:a4:fa:df:f1:f2:42:95:d9:ac:df:a6:38:7f:20:42:a8:8f:
41:6e:56:ec:47:8f:9d:83:05:c8:25:1a:d5:7e:68:1b:33:bc:
7c:34:e7:61:fd:1e:55:5f:9f:15:66:a7:a9:1f:e1:a6:ac:0f:
75:47:99:50:e8:9c:da:4e:3a:9c:cf:53:97:83:96:88:8d:46:
5c:7a:b8:0f:03:3f:57:6c:70:08:1b:69:f0:b7:a9:6d:79:c4:
03:be:b8:9e:7d:e4:15:10:5c:f3:11:f7:3c:e9:0d:70:05:0a:
c3:4b:3f:c1:54:59:d4:7d:6f:02:fd:33:cb:bc:50:b3:9d:67:
58:67:65:f2:98:5a:f1:39:81:2a:30:6f:d1:cd:a9:17:1b:33:
6a:c8:11:9a:5f:b4:87:62:e9:7d:ed:1c:c5:cf:19:96:87:51:
50:6d:57:fd:fe:8b:72:1c:31:ba:3d:23:cf:52:8e:7a:4d:6a:
dd:85:45:2e:44:df:ef:99:0a:8c:3f:a7:86:f3:e5:d8:7c:cd:
06:23:35:d2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAR1BMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjA3MTEzMzQzWhcNMjcxMjEzMTEzMzQzWjAYMRYw
FAYDVQQDEw02N2E1ZWY5ZS04YjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA22ZAk+gOqzTESBCzpxIqDOLx8XGCPUKwcULVhFG7Z73EhYbmqEzemjLb
LiaHngHwpGs+Gjwdp7zJYl8hyUx7nnXgJh66ykvpiCvC3rlYTyn+X5tIRNbjkA0l
4PEue89tS4xmQy3+ZhBoBZZ0keOUt4RgWRjHV18pf458WZoFAYxbcD7c+U1ok4p6
7sMfwQOTwtJqPEVqyCZkn+SIwBCNp680U0RvanAAhSCGKnokqija8N0KQP3QugyW
U8LowPfBLo5+tbw3gIpUIfvy9xFYMKB7EUMdxc9+ks0qZhkROHZwi2Yp/V70yuH8
LbDF0cWMsP6p8KkVgDYxWOs1yqK8lQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJXT
u6lRwNSEzH10F/W7OFDBirciMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NjdCREY1MkU1NDcxMUVGODE2MTU1NTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOa4MA0GCSqGSIb3DQEBCwUA
A4IBAQB0rJ0WFG+k9dSzFJqR0JFRUEFBDJVVg7S9vDc6BAa487E7kw/8/sCuxXAZ
9+ZGcxCyDWXD8tA3pPrf8fJCldms36Y4fyBCqI9BblbsR4+dgwXIJRrVfmgbM7x8
NOdh/R5VX58VZqepH+GmrA91R5lQ6JzaTjqcz1OXg5aIjUZcergPAz9XbHAIG2nw
t6ltecQDvriefeQVEFzzEfc86Q1wBQrDSz/BVFnUfW8C/TPLvFCznWdYZ2XymFrx
OYEqMG/RzakXGzNqyBGaX7SHYul97RzFzxmWh1FQbVf9/otyHDG6PSPPUo56TWrd
hUUuRN/vmQqMP6eG8+XYfM0GIzXS
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:05 2025 by rpki-client