Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68C8FF40F44911EFA0D58887762E951A.roa
File: 68C8FF40F44911EFA0D58887762E951A.roa (raw, json)
Hash identifier: D+Jhk42nupHEgSDujynj9Hqni4ITDf9eVYKQwTJfJXo=
Subject key identifier: 08:58:DF:A2:21:96:C6:EB:6E:A2:D1:CB:E8:B7:07:59:D3:27:68:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013373
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68C8FF40F44911EFA0D58887762E951A.roa
Signing time: Wed 26 Feb 2025 13:56:00 +0000
ROA not before: Wed 26 Feb 2025 13:55:56 +0000
ROA not after: Thu 19 Feb 2026 13:55:56 +0000
asID: 984
IP address blocks: 156.231.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78707 (0x13373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:55:56 2025 GMT
Not After : Feb 19 13:55:56 2026 GMT
Subject: CN=67bf1d70-0374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:6b:3c:8c:4c:6d:73:9b:8e:c1:eb:ce:de:
b3:8d:7b:ed:d9:20:6b:d4:d9:7c:96:1e:23:0d:57:
5f:82:9c:67:e6:35:0c:58:41:c9:2b:b9:6b:af:fa:
38:d0:8c:12:73:46:8f:e0:2c:43:4e:95:a2:28:81:
a1:1e:f5:8c:2f:f5:c2:6a:c8:44:5e:6b:31:5a:01:
5a:af:88:e1:3e:3d:2e:7b:e8:a0:b8:c4:ef:da:8f:
88:2b:88:d0:34:5a:93:89:2c:64:d5:43:06:0e:db:
03:71:db:52:62:0f:05:7c:3e:77:01:83:ad:96:4e:
a5:3c:22:2f:6e:07:03:f7:0a:2f:62:f5:6d:0b:2c:
d1:38:4f:cc:64:cf:c9:ba:61:81:a7:82:61:94:ac:
7e:4d:04:2b:1e:7b:d6:50:93:1d:fa:82:0e:e8:b6:
21:37:bf:15:91:b9:35:6e:e6:ca:1c:42:0b:9c:6f:
73:0a:16:a8:c9:a9:e7:7d:3d:bc:d4:5f:b3:23:d0:
2f:7f:68:88:e9:50:b0:b4:b8:2e:74:ec:cd:54:8c:
68:c1:59:4b:18:ed:a5:e5:47:6a:6a:70:5d:ba:da:
73:a4:ec:69:0e:f9:ae:1a:a1:b7:1e:62:82:f5:e6:
d1:38:33:bf:e8:d1:f1:f8:79:d5:25:c7:c8:59:75:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:58:DF:A2:21:96:C6:EB:6E:A2:D1:CB:E8:B7:07:59:D3:27:68:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68C8FF40F44911EFA0D58887762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.163.0/24
Signature Algorithm: sha256WithRSAEncryption
92:27:ca:d1:b9:13:65:e5:60:40:33:8c:17:bc:a9:40:73:98:
17:f4:ed:b9:42:47:de:4e:c2:48:16:e3:76:5f:15:8e:61:27:
d0:e7:0d:e0:bc:bb:9d:48:85:8d:02:8e:39:b0:ea:11:cd:0a:
7c:61:17:d1:23:2a:4f:eb:0c:43:ad:ca:19:19:27:b3:31:9b:
7c:6b:60:56:36:7d:8a:9d:a8:2b:a2:c5:a3:c4:a0:7a:12:98:
e5:2a:52:f7:89:2e:dd:a6:50:cc:98:b0:03:19:ea:e1:b7:77:
56:c6:2a:68:21:5e:8f:31:04:34:e2:77:7a:a8:19:0e:e4:27:
36:83:b1:8f:57:63:4e:6f:13:e5:06:ab:a6:82:5d:20:3d:77:
fa:53:33:4f:65:6d:e6:06:5c:b7:d9:e0:f8:ef:83:4c:e7:40:
3f:4b:5f:3b:36:ad:c3:2b:3c:79:8e:f1:1c:3c:b9:f9:0a:0a:
06:12:cc:4c:27:42:47:db:dd:a5:39:14:b7:1c:b2:70:73:46:
8e:86:82:c9:36:9c:68:bd:f7:12:a2:9f:54:ec:e3:27:c3:b1:
88:fa:c2:33:22:c6:c0:95:b3:d1:ec:35:ec:33:c2:d2:49:26:
4c:af:7a:54:3a:fb:03:43:0a:b5:b7:6b:67:3d:1f:a5:bd:76:
a2:c6:d9:9c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATNzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTM1NTU2WhcNMjYwMjE5MTM1NTU2WjAYMRYw
FAYDVQQDEw02N2JmMWQ3MC0wMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAusZrPIxMbXObjsHrzt6zjXvt2SBr1Nl8lh4jDVdfgpxn5jUMWEHJK7lr
r/o40IwSc0aP4CxDTpWiKIGhHvWML/XCashEXmsxWgFar4jhPj0ue+iguMTv2o+I
K4jQNFqTiSxk1UMGDtsDcdtSYg8FfD53AYOtlk6lPCIvbgcD9wovYvVtCyzROE/M
ZM/JumGBp4JhlKx+TQQrHnvWUJMd+oIO6LYhN78Vkbk1bubKHEILnG9zChaoyann
fT281F+zI9Avf2iI6VCwtLgudOzNVIxowVlLGO2l5UdqanBdutpzpOxpDvmuGqG3
HmKC9ebRODO/6NHx+HnVJcfIWXW/twIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAhY
36IhlsbrbqLRy+i3B1nTJ2h0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82OEM4RkY0MEY0NDkxMUVGQTBENTg4ODc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOejMA0GCSqGSIb3DQEBCwUA
A4IBAQCSJ8rRuRNl5WBAM4wXvKlAc5gX9O25QkfeTsJIFuN2XxWOYSfQ5w3gvLud
SIWNAo45sOoRzQp8YRfRIypP6wxDrcoZGSezMZt8a2BWNn2KnagrosWjxKB6Epjl
KlL3iS7dplDMmLADGerht3dWxipoIV6PMQQ04nd6qBkO5Cc2g7GPV2NObxPlBqum
gl0gPXf6UzNPZW3mBly32eD474NM50A/S187Nq3DKzx5jvEcPLn5CgoGEsxMJ0JH
292lORS3HLJwc0aOhoLJNpxovfcSop9U7OMnw7GI+sIzIsbAlbPR7DXsM8LSSSZM
r3pUOvsDQwq1t2tnPR+lvXaixtmc
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:41 2025 by rpki-client