Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918E3352E9B611EF96B334B2762E951A.roa
File: 918E3352E9B611EF96B334B2762E951A.roa (raw, json)
Hash identifier: VEyclJ2fwfnUvx15I/QOmMMQlJ74HvxvsErRYZoXVKM=
Subject key identifier: F8:68:BE:15:2A:B4:F2:CA:23:D0:1D:37:09:B5:3D:69:87:5A:08:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0121C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918E3352E9B611EF96B334B2762E951A.roa
Signing time: Thu 13 Feb 2025 02:59:41 +0000
ROA not before: Thu 13 Feb 2025 02:59:37 +0000
ROA not after: Wed 31 Dec 2025 02:59:37 +0000
asID: 17561
IP address blocks: 156.236.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74176 (0x121c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 02:59:37 2025 GMT
Not After : Dec 31 02:59:37 2025 GMT
Subject: CN=67ad601d-ac94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:3d:98:26:d6:30:2e:7e:68:21:fa:f1:74:
d0:31:f9:c4:ad:27:ec:c1:39:c4:07:56:c1:46:75:
eb:80:a9:89:88:d8:37:23:d6:2c:99:00:2f:ee:27:
aa:0a:9d:3b:d4:1c:24:59:b8:fd:d0:b2:95:9a:08:
33:b9:c3:f4:45:65:c9:d0:e6:f8:17:0f:04:cf:7f:
1a:50:7b:41:76:05:6c:74:95:6a:7e:16:79:72:2b:
07:25:f1:95:ca:83:1b:1c:bd:2e:c0:22:61:8f:9e:
67:5e:db:64:e1:fb:41:89:cc:d8:91:75:3d:5c:9c:
3f:28:9f:10:3b:1d:c8:90:a0:ee:30:22:a0:ff:02:
a5:56:0d:45:a2:f6:5e:c5:23:47:2d:cd:af:7d:69:
4a:a5:23:1c:cc:1b:ba:d1:c0:08:80:c4:d6:47:55:
5d:63:f3:87:f0:eb:ac:27:e9:74:49:f3:b6:d9:c4:
22:83:e5:ad:2c:ba:a7:22:2f:c7:35:5b:15:1b:6a:
17:4d:c0:bc:0c:dc:29:2c:a2:1d:a7:0f:99:67:fe:
80:91:1b:87:6f:d6:0a:cd:e8:a0:02:7d:80:1d:5d:
48:12:92:79:93:26:74:da:2a:f2:7b:dd:3e:02:2b:
84:33:6a:4e:16:d7:2f:6a:3e:13:ad:23:8e:22:b5:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:BE:15:2A:B4:F2:CA:23:D0:1D:37:09:B5:3D:69:87:5A:08:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918E3352E9B611EF96B334B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.55.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9f:9d:01:e1:d0:46:9a:72:92:50:ff:85:f3:6f:3b:b6:79:
eb:53:8d:69:ce:e1:0c:4d:87:27:1f:8c:6e:87:f7:84:1e:9d:
53:39:fb:93:1a:3a:68:a3:c4:4c:07:0f:27:ab:8e:2e:6a:9e:
2f:f9:55:99:5c:57:07:ed:20:f5:03:25:e9:96:ba:d0:b7:ad:
a7:9e:7d:40:dd:6d:31:39:5e:28:b2:e9:82:d1:02:f1:0a:f9:
07:ec:fd:04:47:c3:f3:e3:cd:a5:37:7a:1f:cf:b0:73:84:e1:
c0:18:d3:bf:ef:96:d0:bf:b4:7e:ba:93:fc:5b:18:2f:c3:e1:
67:bb:05:5c:26:51:64:5e:9f:29:cc:74:c9:5d:b2:be:48:bc:
f6:11:06:e8:5a:61:ef:7e:ce:75:4c:fa:0c:96:f0:2b:17:6c:
7b:f7:ae:24:2b:fb:55:43:8e:79:7b:84:23:c4:d7:fa:34:91:
41:64:e4:cf:a7:49:2a:c2:39:bd:02:62:d5:f1:c4:38:a9:73:
90:be:84:06:88:48:7f:4d:b9:fd:fd:11:4d:60:4f:1a:2e:1e:
94:1e:52:84:f1:55:43:e3:36:3f:1d:c6:fe:39:fd:24:e3:2d:
3d:85:59:10:bf:58:54:a4:d4:99:bf:11:be:9d:7e:26:21:e4:
5e:46:dd:0f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASHAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjEzMDI1OTM3WhcNMjUxMjMxMDI1OTM3WjAYMRYw
FAYDVQQDEw02N2FkNjAxZC1hYzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz4o9mCbWMC5+aCH68XTQMfnErSfswTnEB1bBRnXrgKmJiNg3I9YsmQAv
7ieqCp071BwkWbj90LKVmggzucP0RWXJ0Ob4Fw8Ez38aUHtBdgVsdJVqfhZ5cisH
JfGVyoMbHL0uwCJhj55nXttk4ftBiczYkXU9XJw/KJ8QOx3IkKDuMCKg/wKlVg1F
ovZexSNHLc2vfWlKpSMczBu60cAIgMTWR1VdY/OH8OusJ+l0SfO22cQig+WtLLqn
Ii/HNVsVG2oXTcC8DNwpLKIdpw+ZZ/6AkRuHb9YKzeigAn2AHV1IEpJ5kyZ02iry
e90+AiuEM2pOFtcvaj4TrSOOIrXHQQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPho
vhUqtPLKI9AdNwm1PWmHWgiMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MThFMzM1MkU5QjYxMUVGOTZCMzM0QjI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOw3MA0GCSqGSIb3DQEBCwUA
A4IBAQBTn50B4dBGmnKSUP+F8287tnnrU41pzuEMTYcnH4xuh/eEHp1TOfuTGjpo
o8RMBw8nq44uap4v+VWZXFcH7SD1AyXplrrQt62nnn1A3W0xOV4osumC0QLxCvkH
7P0ER8Pz482lN3ofz7BzhOHAGNO/75bQv7R+upP8Wxgvw+FnuwVcJlFkXp8pzHTJ
XbK+SLz2EQboWmHvfs51TPoMlvArF2x7964kK/tVQ455e4QjxNf6NJFBZOTPp0kq
wjm9AmLV8cQ4qXOQvoQGiEh/Tbn9/RFNYE8aLh6UHlKE8VVD4zY/Hcb+Of0k4y09
hVkQv1hUpNSZvxG+nX4mIeReRt0P
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:27 2025 by rpki-client