Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77C3A8A0F48B11EF84382752762E951A.roa
File: 77C3A8A0F48B11EF84382752762E951A.roa (raw, json)
Hash identifier: 7Y72z2hO1zJgX5EbqFdqBlylZxZn/5obvmge7+1dnA4=
Subject key identifier: 52:9E:5B:90:02:0F:67:8A:5E:96:05:2E:11:B3:02:8B:50:EF:CD:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0137F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77C3A8A0F48B11EF84382752762E951A.roa
Signing time: Wed 26 Feb 2025 21:48:52 +0000
ROA not before: Wed 26 Feb 2025 21:48:48 +0000
ROA not after: Thu 19 Feb 2026 21:48:48 +0000
asID: 984
IP address blocks: 156.232.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79861 (0x137f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 21:48:48 2025 GMT
Not After : Feb 19 21:48:48 2026 GMT
Subject: CN=67bf8c44-e6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:55:5c:81:65:d3:41:dc:8a:9f:84:f3:75:85:
d2:41:85:de:90:8b:ae:3c:46:46:dd:e3:31:d3:f1:
f3:8e:51:05:03:23:2f:42:b3:56:66:0a:79:30:31:
65:49:df:97:86:92:cc:de:ce:d3:15:bd:74:62:b2:
3e:15:bd:e1:51:40:40:15:de:79:17:ab:9b:6b:0d:
b7:9b:b6:b4:09:f5:20:8b:9e:04:c0:74:11:e4:c8:
84:3f:5b:2a:1d:89:46:01:4f:1b:93:58:47:8c:e5:
32:0d:6e:67:3a:b1:00:5e:b5:73:19:77:ea:dd:05:
c5:e0:e8:70:d2:db:a5:93:24:30:0d:bb:a5:90:22:
af:86:19:28:4f:55:6f:f1:22:90:34:15:82:4e:36:
08:6c:21:24:30:ae:0d:0e:ba:74:fd:38:3d:16:7f:
84:57:88:db:84:d4:0b:8d:c2:76:73:5a:2d:88:2d:
bf:72:98:51:33:99:e0:82:b0:bd:88:8b:1d:95:a4:
a4:03:cb:2c:da:ec:0e:44:ea:57:ea:14:ac:f4:37:
39:13:17:b3:e0:c2:32:01:82:93:4c:3f:ef:e1:e4:
cf:53:02:0d:8d:38:43:38:96:dc:12:64:1f:9a:60:
2f:d3:fa:79:1b:c3:52:17:8b:72:8f:cd:2a:1d:05:
ee:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9E:5B:90:02:0F:67:8A:5E:96:05:2E:11:B3:02:8B:50:EF:CD:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77C3A8A0F48B11EF84382752762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.35.0/24
Signature Algorithm: sha256WithRSAEncryption
47:85:48:68:3f:e7:65:6e:72:08:82:9c:bb:03:e4:03:e5:00:
02:d4:88:e0:a2:be:1f:31:da:96:af:7e:e8:36:fc:67:9c:e8:
2f:9d:b8:3f:50:ec:9e:42:bb:50:5f:a4:ac:6c:1e:22:9d:fa:
9c:14:78:15:90:e5:a2:58:c5:bc:73:6a:61:87:fa:96:c1:08:
e1:3f:1f:a6:fd:7a:ab:ea:72:85:68:9c:70:db:b1:7f:61:a0:
4c:a0:e8:7d:ee:d6:b8:c5:9d:10:d7:b7:53:04:35:3d:7a:69:
ae:17:ea:bc:70:d9:d9:8c:1e:dd:93:a3:d3:8f:61:5e:a5:de:
17:27:78:5c:33:04:7c:74:09:8e:b8:b5:39:0f:2e:ae:fe:aa:
50:cc:3d:6c:cd:82:d4:75:6a:64:80:ca:67:75:ca:41:8b:b3:
9b:de:ed:6c:5c:4e:14:eb:75:17:16:88:8f:32:d4:10:4d:b1:
47:b7:56:23:33:39:03:9b:80:94:32:b0:98:9a:59:5e:61:df:
1b:d5:7a:e5:a6:b1:ae:87:0d:e9:e7:a2:b3:62:ed:eb:55:15:
95:59:30:c1:cd:34:9b:cd:62:0e:12:26:1a:1f:ec:eb:80:78:
6c:b8:3e:b2:fe:ae:0e:e9:9c:c2:2d:00:68:81:88:0e:d9:01:
a9:1d:ab:42
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATf1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MjE0ODQ4WhcNMjYwMjE5MjE0ODQ4WjAYMRYw
FAYDVQQDEw02N2JmOGM0NC1lNmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5lVcgWXTQdyKn4TzdYXSQYXekIuuPEZG3eMx0/HzjlEFAyMvQrNWZgp5
MDFlSd+XhpLM3s7TFb10YrI+Fb3hUUBAFd55F6ubaw23m7a0CfUgi54EwHQR5MiE
P1sqHYlGAU8bk1hHjOUyDW5nOrEAXrVzGXfq3QXF4Ohw0tulkyQwDbulkCKvhhko
T1Vv8SKQNBWCTjYIbCEkMK4NDrp0/Tg9Fn+EV4jbhNQLjcJ2c1otiC2/cphRM5ng
grC9iIsdlaSkA8ss2uwOROpX6hSs9Dc5Exez4MIyAYKTTD/v4eTPUwINjThDOJbc
EmQfmmAv0/p5G8NSF4tyj80qHQXu/QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFKe
W5ACD2eKXpYFLhGzAotQ780uMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83N0MzQThBMEY0OEIxMUVGODQzODI3NTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOgjMA0GCSqGSIb3DQEBCwUA
A4IBAQBHhUhoP+dlbnIIgpy7A+QD5QAC1Ijgor4fMdqWr37oNvxnnOgvnbg/UOye
QrtQX6SsbB4infqcFHgVkOWiWMW8c2phh/qWwQjhPx+m/Xqr6nKFaJxw27F/YaBM
oOh97ta4xZ0Q17dTBDU9emmuF+q8cNnZjB7dk6PTj2Fepd4XJ3hcMwR8dAmOuLU5
Dy6u/qpQzD1szYLUdWpkgMpndcpBi7Ob3u1sXE4U63UXFoiPMtQQTbFHt1YjMzkD
m4CUMrCYmlleYd8b1XrlprGuhw3p56KzYu3rVRWVWTDBzTSbzWIOEiYaH+zrgHhs
uD6y/q4O6ZzCLQBogYgO2QGpHatC
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:26 2025 by rpki-client