Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/724E8F8CF42911EF98C0EDA5762E951A.roa
File: 724E8F8CF42911EF98C0EDA5762E951A.roa (raw, json)
Hash identifier: jy3CkVXFtJQB5LhaQTNPkVHjekZO+Zcx5NWbmr/Nd74=
Subject key identifier: E2:D7:5B:9B:52:B6:C3:A0:03:AE:A5:1B:7C:BC:90:53:97:83:D5:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/724E8F8CF42911EF98C0EDA5762E951A.roa
Signing time: Wed 26 Feb 2025 10:07:12 +0000
ROA not before: Wed 26 Feb 2025 10:07:08 +0000
ROA not after: Thu 19 Feb 2026 10:07:08 +0000
asID: 328608
IP address blocks: 156.255.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78026 (0x130ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:07:08 2025 GMT
Not After : Feb 19 10:07:08 2026 GMT
Subject: CN=67bee7d0-df59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:82:ed:bf:1e:9b:29:38:58:c0:63:24:4b:
08:91:e5:7f:25:82:1b:ee:9f:55:48:9e:8b:1d:75:
e5:8a:95:2c:b3:84:ac:86:80:d4:fb:e5:48:8d:4f:
c3:8e:29:bf:5f:48:86:f9:b5:b7:3f:b5:d8:f6:c3:
71:45:3b:bd:a1:0c:7f:7c:9d:85:86:1e:f4:9d:11:
ab:16:3b:28:a0:5f:bd:98:c9:20:7b:80:ef:af:3f:
17:36:0e:88:ab:dc:6a:74:c2:ab:f5:75:dc:12:04:
5b:91:c2:e5:2b:4e:86:5a:2b:ee:ea:a7:db:74:91:
e6:9e:d8:12:2b:cb:49:4b:09:3d:ed:c3:fb:8a:0e:
f6:51:93:b4:87:c3:1d:1d:25:2f:ac:4c:01:b7:a1:
8c:5d:74:9a:cc:43:04:04:19:3b:4e:ad:8d:9e:08:
c2:4a:21:51:3d:e0:f5:e8:fe:e0:4b:36:5a:d4:55:
f6:38:2d:1a:0b:95:16:e4:e6:d5:2a:04:7e:fd:33:
75:a4:b0:c9:aa:79:1f:d0:15:74:a3:d7:a9:96:82:
be:81:ac:1c:fa:ae:ff:78:1d:ba:1c:f5:0d:b9:0e:
77:66:4c:8d:69:17:a2:89:3e:0a:4a:70:c4:20:59:
21:0a:81:0c:a3:ad:c2:f2:7b:58:8e:a6:52:f9:1d:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D7:5B:9B:52:B6:C3:A0:03:AE:A5:1B:7C:BC:90:53:97:83:D5:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/724E8F8CF42911EF98C0EDA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.72.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d7:ce:fe:77:ae:b4:3b:d3:e0:c0:06:8f:32:d4:9f:aa:24:
2b:09:3c:9b:a1:c7:ff:d0:96:2d:6c:58:b2:73:4c:63:cb:34:
21:be:33:ef:d2:90:bb:27:d4:1e:09:97:75:c5:6a:96:82:25:
42:f1:6f:f8:48:72:9e:93:6f:08:c8:55:5b:2d:16:0a:d7:96:
c6:c0:6c:c3:52:50:9f:07:71:69:18:b4:89:0b:d0:46:62:c8:
9b:3d:40:24:c2:4b:e9:7a:8d:e1:c1:bd:75:fa:9a:cd:53:14:
25:8e:0f:5b:34:46:61:c1:87:76:46:02:bd:71:31:ea:5b:94:
cb:74:89:2b:e2:6f:f7:d5:ff:8b:91:a4:16:6a:a7:ba:07:b2:
68:a7:0e:1d:7f:e7:97:1c:ac:9a:ae:d9:ba:45:e6:d8:50:e5:
22:9b:bf:c2:f4:53:05:42:a3:fb:73:74:c4:ac:bd:da:52:91:
e1:40:ec:e4:4e:6a:75:8a:dc:f0:9c:e8:d0:18:b7:4a:c0:2e:
74:c1:9d:5c:3d:81:d9:73:7b:61:1c:0f:be:98:64:20:ca:c0:
a7:13:0a:1a:89:29:e6:c8:da:bc:35:59:dd:b5:d2:6d:42:50:
1e:99:bb:28:ee:69:1e:fe:f1:80:59:92:a8:b8:d9:19:e3:ff:
66:40:e8:e5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATDKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTAwNzA4WhcNMjYwMjE5MTAwNzA4WjAYMRYw
FAYDVQQDEw02N2JlZTdkMC1kZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArWeC7b8emyk4WMBjJEsIkeV/JYIb7p9VSJ6LHXXlipUss4SshoDU++VI
jU/Djim/X0iG+bW3P7XY9sNxRTu9oQx/fJ2Fhh70nRGrFjsooF+9mMkge4Dvrz8X
Ng6Iq9xqdMKr9XXcEgRbkcLlK06GWivu6qfbdJHmntgSK8tJSwk97cP7ig72UZO0
h8MdHSUvrEwBt6GMXXSazEMEBBk7Tq2NngjCSiFRPeD16P7gSzZa1FX2OC0aC5UW
5ObVKgR+/TN1pLDJqnkf0BV0o9eploK+gawc+q7/eB26HPUNuQ53ZkyNaReiiT4K
SnDEIFkhCoEMo63C8ntYjqZS+R1rKQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOLX
W5tStsOgA66lG3y8kFOXg9UHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MjRFOEY4Q0Y0MjkxMUVGOThDMEVEQTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP9IMA0GCSqGSIb3DQEBCwUA
A4IBAQBR187+d660O9PgwAaPMtSfqiQrCTybocf/0JYtbFiyc0xjyzQhvjPv0pC7
J9QeCZd1xWqWgiVC8W/4SHKek28IyFVbLRYK15bGwGzDUlCfB3FpGLSJC9BGYsib
PUAkwkvpeo3hwb11+prNUxQljg9bNEZhwYd2RgK9cTHqW5TLdIkr4m/31f+LkaQW
aqe6B7Jopw4df+eXHKyartm6RebYUOUim7/C9FMFQqP7c3TErL3aUpHhQOzkTmp1
itzwnOjQGLdKwC50wZ1cPYHZc3thHA++mGQgysCnEwoaiSnmyNq8NVndtdJtQlAe
mbso7mke/vGAWZKouNkZ4/9mQOjl
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:25:46 2025 by rpki-client