Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/872D5140F2C611EF974556AD762E951A.roa
File: 872D5140F2C611EF974556AD762E951A.roa (raw, json)
Hash identifier: Fh4wqtZoDFwgTHJraMzO4UtpJTZx4mumEfkni3VA34U=
Subject key identifier: 66:A5:D7:2E:D4:A5:52:90:E4:97:02:02:11:C7:1D:AA:B8:DF:AD:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/872D5140F2C611EF974556AD762E951A.roa
Signing time: Mon 24 Feb 2025 15:46:36 +0000
ROA not before: Mon 24 Feb 2025 15:46:32 +0000
ROA not after: Sat 29 Mar 2025 15:46:32 +0000
asID: 203020
IP address blocks: 156.233.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76817 (0x12c11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 15:46:32 2025 GMT
Not After : Mar 29 15:46:32 2025 GMT
Subject: CN=67bc945c-628c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:82:a5:25:7c:d0:de:53:d6:47:8f:30:52:
fd:fd:2b:18:6e:62:3f:94:2d:1e:6c:02:83:96:a7:
64:a6:d5:8c:4e:10:cf:6c:08:e1:36:2a:53:33:71:
db:0e:5a:1a:b2:33:73:af:74:c2:2a:f0:f2:35:79:
cd:fd:7a:ea:65:11:84:65:7c:da:99:11:9c:2b:a5:
f2:a2:69:3d:0a:95:1d:dd:d2:5d:ea:d6:48:e5:a6:
e4:72:0d:f2:76:aa:1b:59:03:1b:c4:72:ab:6f:16:
15:70:7c:01:0a:0c:19:f5:af:5e:fd:c0:0e:23:f4:
a4:37:cc:ed:25:9a:a7:bb:e0:23:59:0b:d7:a1:28:
6c:ba:d4:5c:9f:79:1d:86:8a:11:39:1a:9f:f3:c5:
e1:16:aa:ea:36:20:3b:74:97:fa:7e:2b:3c:ad:b2:
24:0a:b8:02:d1:c4:8d:17:58:22:65:27:9a:82:25:
21:e4:55:30:d1:d4:28:b8:33:31:e2:5c:b2:24:78:
17:a1:39:38:b0:32:9f:e1:55:01:69:4a:eb:79:dd:
b1:d6:c1:d3:24:1a:56:6b:8a:77:a0:0b:f9:84:fb:
d6:fe:98:c3:39:47:d0:77:8a:22:5e:ad:08:76:0e:
0c:4b:7c:01:ce:4b:c8:a8:df:a8:66:14:90:13:06:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A5:D7:2E:D4:A5:52:90:E4:97:02:02:11:C7:1D:AA:B8:DF:AD:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/872D5140F2C611EF974556AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.2.0/23
Signature Algorithm: sha256WithRSAEncryption
59:93:95:1b:2a:8b:34:27:37:19:08:54:a8:d3:3b:20:42:e8:
1e:b3:de:d9:7b:dd:2d:2e:ce:e4:0f:01:e5:0c:e5:f1:a8:b3:
1b:ad:b8:70:af:ee:85:44:f7:96:d6:6f:b1:97:9b:67:4d:f0:
e9:12:6c:e3:a7:74:e3:5a:bb:44:4f:0a:81:28:63:78:5d:5d:
f3:f9:5f:c8:27:71:30:b1:5c:9d:25:f0:4f:c2:04:81:b8:41:
36:24:31:2e:a2:63:e9:dc:0e:43:7f:b7:e6:08:57:dc:b9:22:
3c:7b:e3:2a:4f:e7:98:7f:47:7f:ba:73:52:22:7e:8e:00:5c:
5e:f2:a9:c5:8a:cb:53:3d:98:c4:ef:66:05:53:84:db:7e:cc:
a1:34:4a:04:7e:48:1b:ff:63:32:12:bf:59:46:88:cb:74:c7:
8f:a2:70:ba:f2:ed:77:a6:bd:9d:fa:94:94:57:2b:97:8f:a0:
ce:6b:a2:26:5d:38:2b:16:1b:5e:86:93:a8:b5:9a:ff:ca:fc:
5c:4f:87:53:a3:b9:b3:5b:25:ca:50:e4:f4:db:23:24:b2:06:
38:e0:5c:dd:b5:df:83:03:c7:1e:32:d7:43:73:76:92:38:79:
06:86:d5:a4:ce:6f:29:8a:58:f2:62:3d:bb:f9:c4:e2:11:63:
fd:55:e2:f4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASwRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI0MTU0NjMyWhcNMjUwMzI5MTU0NjMyWjAYMRYw
FAYDVQQDEw02N2JjOTQ1Yy02MjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw12CpSV80N5T1kePMFL9/SsYbmI/lC0ebAKDlqdkptWMThDPbAjhNipT
M3HbDloasjNzr3TCKvDyNXnN/XrqZRGEZXzamRGcK6Xyomk9CpUd3dJd6tZI5abk
cg3ydqobWQMbxHKrbxYVcHwBCgwZ9a9e/cAOI/SkN8ztJZqnu+AjWQvXoShsutRc
n3kdhooRORqf88XhFqrqNiA7dJf6fis8rbIkCrgC0cSNF1giZSeagiUh5FUw0dQo
uDMx4lyyJHgXoTk4sDKf4VUBaUrred2x1sHTJBpWa4p3oAv5hPvW/pjDOUfQd4oi
Xq0Idg4MS3wBzkvIqN+oZhSQEwbJPQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGal
1y7UpVKQ5JcCAhHHHaq4363LMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NzJENTE0MEYyQzYxMUVGOTc0NTU2QUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOkCMA0GCSqGSIb3DQEBCwUA
A4IBAQBZk5UbKos0JzcZCFSo0zsgQuges97Ze90tLs7kDwHlDOXxqLMbrbhwr+6F
RPeW1m+xl5tnTfDpEmzjp3TjWrtETwqBKGN4XV3z+V/IJ3EwsVydJfBPwgSBuEE2
JDEuomPp3A5Df7fmCFfcuSI8e+MqT+eYf0d/unNSIn6OAFxe8qnFistTPZjE72YF
U4TbfsyhNEoEfkgb/2MyEr9ZRojLdMePonC68u13pr2d+pSUVyuXj6DOa6ImXTgr
FhtehpOotZr/yvxcT4dTo7mzWyXKUOT02yMksgY44Fzdtd+DA8ceMtdDc3aSOHkG
htWkzm8piljyYj27+cTiEWP9VeL0
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:11:11 2025 by rpki-client