Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74515FD4057811F0A9BB40AA762E951A.roa
File: 74515FD4057811F0A9BB40AA762E951A.roa (raw, json)
Hash identifier: hb1uZ2vKBXSuQ9J07bPecv93/WDbJvv6JTzZt1kZkaU=
Subject key identifier: E2:CD:2B:25:CC:5E:20:30:14:28:65:A6:5D:6E:B4:31:3E:93:AE:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014728
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74515FD4057811F0A9BB40AA762E951A.roa
Signing time: Thu 20 Mar 2025 10:45:36 +0000
ROA not before: Thu 20 Mar 2025 10:45:32 +0000
ROA not after: Wed 09 Apr 2025 10:45:32 +0000
asID: 18013
IP address blocks: 156.241.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83752 (0x14728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 10:45:32 2025 GMT
Not After : Apr 9 10:45:32 2025 GMT
Subject: CN=67dbf1cf-35c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:08:53:18:ac:ed:08:92:48:ab:56:f1:eb:
d6:37:2c:75:48:7e:a8:15:32:32:92:43:25:f5:de:
b2:dd:ad:ec:c2:52:d0:4a:3e:94:30:41:5c:43:c1:
59:48:73:d5:0f:b9:60:49:d7:25:7c:be:2a:7b:f6:
b1:5e:45:c0:f0:3a:e7:1d:2e:ac:62:0b:9a:84:80:
9f:7f:86:3d:b1:ec:d1:14:41:48:63:17:d1:27:6c:
31:ea:15:20:68:13:e9:42:4a:4e:76:74:5c:55:e0:
0d:a3:8e:22:ee:b8:16:01:49:a5:64:90:4c:02:ad:
01:b7:5e:9e:72:d0:ca:0a:5d:2d:b1:f7:f7:22:ad:
f9:38:e5:4c:96:bf:4e:09:2c:c8:7f:f2:3c:09:80:
7c:ba:cd:1d:64:ec:5a:fd:32:9c:75:cf:0d:42:af:
84:6e:89:ac:65:9c:11:e9:23:ca:fc:21:b5:cf:2a:
56:1d:a7:b2:f1:41:ce:0f:f6:f0:14:21:fc:70:61:
7a:0c:89:76:38:69:65:87:15:08:16:e2:e8:18:89:
13:f8:48:19:c7:64:94:8f:43:87:38:84:8f:74:b8:
9f:f9:71:c4:14:4e:8f:2c:ba:c7:28:79:32:d8:04:
79:e8:b6:27:25:c5:0c:fa:af:e9:d0:bf:4a:8f:ea:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CD:2B:25:CC:5E:20:30:14:28:65:A6:5D:6E:B4:31:3E:93:AE:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74515FD4057811F0A9BB40AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:6c:63:20:ae:23:5b:71:d1:17:aa:d0:f0:6e:5d:5b:d7:e1:
12:4e:a9:98:0e:78:46:73:08:2a:30:f5:de:f9:f3:25:95:33:
d6:be:4f:e7:7a:91:36:5d:67:24:b5:43:78:c6:5f:1a:8b:63:
9a:25:cc:7e:34:d2:86:e1:55:c0:de:f2:5f:86:d6:25:df:24:
96:7e:23:d0:88:3a:51:bf:63:5b:e4:47:cb:50:da:9b:2c:ca:
ff:71:4a:d2:51:ad:da:71:91:44:1f:cf:fd:cd:e4:91:e0:4a:
46:76:1c:86:d6:9e:19:83:ff:5f:64:77:2e:cf:04:c8:bc:52:
da:3a:7c:f0:75:08:b3:d7:f4:42:14:f5:56:53:83:b7:61:a8:
10:4b:6f:5f:77:62:3b:90:90:b7:a1:03:9e:ec:49:f7:f4:32:
c9:9b:79:44:03:6f:75:7a:5a:7e:d5:17:23:a6:70:26:a8:2d:
a3:59:57:8e:d8:5d:99:82:88:cb:96:03:fc:f7:94:a9:ff:e7:
ba:b0:cd:28:48:42:10:4b:29:50:ee:f2:2b:0b:29:6e:8c:62:
45:99:52:b6:7a:0f:3d:28:36:b7:33:ac:4f:5f:a2:91:34:1d:
40:47:26:55:95:3c:b8:0f:7a:b2:2f:ee:55:ba:a2:16:aa:7c:
4d:b1:2a:35
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUcoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzIwMTA0NTMyWhcNMjUwNDA5MTA0NTMyWjAYMRYw
FAYDVQQDEw02N2RiZjFjZi0zNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4ZQIUxis7QiSSKtW8evWNyx1SH6oFTIykkMl9d6y3a3swlLQSj6UMEFc
Q8FZSHPVD7lgSdclfL4qe/axXkXA8DrnHS6sYguahICff4Y9sezRFEFIYxfRJ2wx
6hUgaBPpQkpOdnRcVeANo44i7rgWAUmlZJBMAq0Bt16ectDKCl0tsff3Iq35OOVM
lr9OCSzIf/I8CYB8us0dZOxa/TKcdc8NQq+EbomsZZwR6SPK/CG1zypWHaey8UHO
D/bwFCH8cGF6DIl2OGllhxUIFuLoGIkT+EgZx2SUj0OHOISPdLif+XHEFE6PLLrH
KHky2AR56LYnJcUM+q/p0L9Kj+oU2QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOLN
KyXMXiAwFChlpl1utDE+k67nMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NDUxNUZENDA1NzgxMUYwQTlCQjQwQUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPG8MA0GCSqGSIb3DQEBCwUA
A4IBAQCzbGMgriNbcdEXqtDwbl1b1+ESTqmYDnhGcwgqMPXe+fMllTPWvk/nepE2
XWcktUN4xl8ai2OaJcx+NNKG4VXA3vJfhtYl3ySWfiPQiDpRv2Nb5EfLUNqbLMr/
cUrSUa3acZFEH8/9zeSR4EpGdhyG1p4Zg/9fZHcuzwTIvFLaOnzwdQiz1/RCFPVW
U4O3YagQS29fd2I7kJC3oQOe7En39DLJm3lEA291elp+1RcjpnAmqC2jWVeO2F2Z
gojLlgP895Sp/+e6sM0oSEIQSylQ7vIrCylujGJFmVK2eg89KDa3M6xPX6KRNB1A
RyZVlTy4D3qyL+5VuqIWqnxNsSo1
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:26 2025 by rpki-client