Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E238B52F46E11EFAFB40889762E951A.roa
File: 6E238B52F46E11EFAFB40889762E951A.roa (raw, json)
Hash identifier: ufMcjR2swDLV04ofy8+mDItGNY3xtObKIGO0ucQa/ak=
Subject key identifier: 45:D8:79:9A:FE:C5:27:F6:74:99:5B:75:CC:2E:C0:2B:B9:E4:A1:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01364D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E238B52F46E11EFAFB40889762E951A.roa
Signing time: Wed 26 Feb 2025 18:21:00 +0000
ROA not before: Wed 26 Feb 2025 18:20:57 +0000
ROA not after: Sat 19 Feb 2028 18:20:57 +0000
asID: 17561
IP address blocks: 156.233.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79437 (0x1364d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:20:57 2025 GMT
Not After : Feb 19 18:20:57 2028 GMT
Subject: CN=67bf5b8c-2ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:df:ce:a6:f0:54:bb:d1:c5:72:65:c1:72:
bd:51:2e:e0:f3:7c:89:5a:1e:76:93:5b:15:02:5e:
b1:31:16:a8:f9:04:3a:92:0a:53:3d:52:99:6c:de:
83:8e:91:aa:29:be:18:c8:2c:0a:73:56:8d:71:75:
af:18:d7:8d:5f:19:32:93:7a:d1:5f:64:30:0c:ae:
f2:32:51:cb:6b:12:32:b4:0d:73:4f:b9:6f:98:b4:
d9:99:d2:35:29:47:e2:ab:e7:2b:47:60:49:9f:d9:
57:5e:a8:bf:65:c4:f1:f2:08:a2:e5:e7:61:37:06:
3d:8f:21:08:09:d5:15:4e:19:c2:c7:21:b6:aa:42:
52:43:ac:f4:31:79:cb:1d:f5:41:86:a9:3b:1a:09:
7d:e8:26:bd:02:68:b0:a9:57:34:33:ee:b5:c8:91:
3c:fe:28:57:1a:ff:f8:9c:d0:bd:98:02:24:64:e4:
5f:c6:c8:0a:92:2d:26:e5:d5:48:0e:53:04:a6:c5:
2a:de:63:3e:7a:3f:0a:f0:d3:ee:44:ae:1d:0a:14:
d0:c9:8d:94:be:80:7f:93:20:df:00:d2:37:63:b2:
ae:f1:88:71:96:24:62:60:c7:6b:07:d6:7c:d4:dd:
11:3f:8a:e4:4b:72:f4:a8:22:a9:35:93:aa:6d:17:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D8:79:9A:FE:C5:27:F6:74:99:5B:75:CC:2E:C0:2B:B9:E4:A1:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E238B52F46E11EFAFB40889762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:fa:6d:0b:c7:c5:cc:e1:5a:c3:80:d5:0b:d7:af:7e:1e:1a:
aa:84:9a:46:bd:11:d8:f9:99:34:6b:4a:e4:48:31:59:30:e6:
c0:1c:25:65:4f:62:a4:b6:99:e5:08:09:e5:5a:84:6c:63:be:
b5:aa:91:4d:e7:14:95:13:0a:32:6a:06:6f:af:a0:5a:1d:0b:
0f:89:f3:bd:c8:8f:55:5d:e7:ec:fd:24:46:e5:a2:18:50:cb:
bc:6c:48:6a:4e:0b:df:b9:c1:1a:d8:ce:dc:be:f8:4c:88:95:
8a:a3:b0:b9:3c:7b:b6:d9:36:8a:58:91:13:b0:bb:c7:ae:36:
11:1a:72:30:7f:74:48:74:11:6a:23:4e:f8:03:d6:71:08:fd:
26:90:17:9b:1c:0b:b6:76:8e:d5:3c:4e:b9:06:38:4d:05:24:
90:73:7e:be:ec:45:1c:aa:fe:73:e4:2e:dd:4a:4c:f9:5c:d8:
6f:bb:86:6d:0e:36:5d:16:31:5f:a7:a6:2a:9f:a1:39:1a:b6:
42:04:da:b4:87:37:c3:58:90:9d:e1:71:6c:c1:d0:78:20:b4:
18:46:f8:fd:37:84:cb:ba:65:29:c3:f8:95:69:23:90:f1:bd:
e2:10:0d:76:27:c1:18:83:1c:b9:bd:2d:04:f6:72:66:ea:33:
13:51:4f:bc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATZNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTgyMDU3WhcNMjgwMjE5MTgyMDU3WjAYMRYw
FAYDVQQDEw02N2JmNWI4Yy0yZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr3vfzqbwVLvRxXJlwXK9US7g83yJWh52k1sVAl6xMRao+QQ6kgpTPVKZ
bN6DjpGqKb4YyCwKc1aNcXWvGNeNXxkyk3rRX2QwDK7yMlHLaxIytA1zT7lvmLTZ
mdI1KUfiq+crR2BJn9lXXqi/ZcTx8gii5edhNwY9jyEICdUVThnCxyG2qkJSQ6z0
MXnLHfVBhqk7Ggl96Ca9AmiwqVc0M+61yJE8/ihXGv/4nNC9mAIkZORfxsgKki0m
5dVIDlMEpsUq3mM+ej8K8NPuRK4dChTQyY2UvoB/kyDfANI3Y7Ku8YhxliRiYMdr
B9Z81N0RP4rkS3L0qCKpNZOqbRe+PwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEXY
eZr+xSf2dJlbdcwuwCu55KG1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RTIzOEI1MkY0NkUxMUVGQUZCNDA4ODk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOnEMA0GCSqGSIb3DQEBCwUA
A4IBAQCr+m0Lx8XM4VrDgNUL169+HhqqhJpGvRHY+Zk0a0rkSDFZMObAHCVlT2Kk
tpnlCAnlWoRsY761qpFN5xSVEwoyagZvr6BaHQsPifO9yI9VXefs/SRG5aIYUMu8
bEhqTgvfucEa2M7cvvhMiJWKo7C5PHu22TaKWJETsLvHrjYRGnIwf3RIdBFqI074
A9ZxCP0mkBebHAu2do7VPE65BjhNBSSQc36+7EUcqv5z5C7dSkz5XNhvu4ZtDjZd
FjFfp6Yqn6E5GrZCBNq0hzfDWJCd4XFswdB4ILQYRvj9N4TLumUpw/iVaSOQ8b3i
EA12J8EYgxy5vS0E9nJm6jMTUU+8
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:51 2025 by rpki-client