Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/962434C6F4A011EFA563F95D762E951A.roa
File: 962434C6F4A011EFA563F95D762E951A.roa (raw, json)
Hash identifier: /6gmd8lcBaeLaEPS9cMpVap23cG5pFI9D044RDHw0fQ=
Subject key identifier: 46:DD:EB:CF:7F:73:87:5D:F4:B0:C6:7B:B2:0E:89:F6:5B:6C:63:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013866
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/962434C6F4A011EFA563F95D762E951A.roa
Signing time: Thu 27 Feb 2025 00:20:02 +0000
ROA not before: Thu 27 Feb 2025 00:00:58 +0000
ROA not after: Thu 19 Feb 2026 00:00:58 +0000
asID: 984
IP address blocks: 156.232.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79974 (0x13866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:58 2025 GMT
Not After : Feb 19 00:00:58 2026 GMT
Subject: CN=67bfafb2-f607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:b9:06:ec:c3:03:73:01:1a:14:8b:2e:7f:
ce:ae:5e:e0:8f:9c:14:89:22:f1:1c:8b:89:68:f1:
8b:0b:22:4a:ec:32:d1:a3:db:2e:a0:01:aa:17:1f:
2f:6f:dc:8d:3e:ea:9c:5f:1d:6c:47:46:6e:96:55:
22:88:e2:ba:88:12:6b:51:e7:0e:e4:67:01:18:d1:
b7:cb:d8:7a:95:83:7b:95:68:59:1e:fa:e4:b4:6e:
b2:4b:52:42:17:4d:29:ad:5f:f8:f3:2e:cb:50:3a:
12:96:64:a0:74:05:d0:b3:2f:b6:f9:83:70:a0:b0:
5c:33:d3:8b:cc:d0:90:33:fc:30:47:94:7b:f4:23:
3a:22:2c:63:a2:29:be:ab:21:3c:be:b2:19:39:2d:
a4:94:6a:28:10:a4:8f:a9:f7:6e:61:ec:88:10:18:
45:c3:5c:99:65:f5:38:c0:de:40:5a:c1:77:b3:71:
6c:cb:c3:50:b1:a5:dd:47:7d:f3:fb:52:d3:6b:2b:
c1:cc:09:da:8a:0f:c4:54:c5:1c:96:ed:42:98:ef:
a6:07:1e:8d:a8:85:93:f3:b0:80:04:5b:ba:09:0f:
22:49:1c:e2:55:75:11:fe:c2:f8:e7:e4:d7:70:29:
5e:3d:bf:96:86:37:aa:f4:40:55:4d:c4:f1:08:7b:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DD:EB:CF:7F:73:87:5D:F4:B0:C6:7B:B2:0E:89:F6:5B:6C:63:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/962434C6F4A011EFA563F95D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.59.0/24
Signature Algorithm: sha256WithRSAEncryption
98:23:8b:6c:fa:4c:23:71:b2:d2:3e:07:23:7d:ae:01:6e:d2:
a0:69:06:ec:a6:74:0a:7e:df:56:4c:c4:ea:ad:45:15:c7:85:
4f:85:13:72:69:69:5d:54:ab:79:c2:08:2e:b3:48:04:37:37:
a9:42:05:20:28:81:67:47:f2:d5:79:5a:b5:05:53:29:f4:36:
ce:0d:e1:26:dc:6e:49:44:a3:ef:85:94:ad:26:c5:9d:a3:9f:
31:2c:f5:9f:1d:ef:fa:7e:3f:35:05:ea:c3:41:d6:aa:89:3c:
41:54:fc:74:f7:be:57:bf:fe:a4:4e:bc:5b:f5:90:14:fb:89:
79:66:74:d7:20:93:91:5a:41:d7:a3:4a:fd:64:c6:5f:f4:5b:
33:8f:8b:f6:93:0c:f9:68:36:38:cc:d4:f4:ab:34:4b:ba:ca:
44:03:f9:62:6a:d0:af:bb:47:3f:ad:5b:18:67:c9:e9:a7:7a:
65:1d:eb:81:68:83:88:33:0a:0c:04:17:ec:80:96:2c:9f:9f:
67:e1:fa:65:60:29:17:3e:9d:96:60:da:fb:bc:c5:85:e8:a3:
af:cc:f2:75:9b:e5:13:28:38:54:a1:a8:de:3d:fc:d4:b5:c9:
bb:6e:17:f6:86:70:dc:af:1a:62:ef:d0:37:07:8d:58:ed:74:
11:28:b8:f7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAThmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MDAwMDU4WhcNMjYwMjE5MDAwMDU4WjAYMRYw
FAYDVQQDEw02N2JmYWZiMi1mNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtKO5BuzDA3MBGhSLLn/Orl7gj5wUiSLxHIuJaPGLCyJK7DLRo9suoAGq
Fx8vb9yNPuqcXx1sR0ZullUiiOK6iBJrUecO5GcBGNG3y9h6lYN7lWhZHvrktG6y
S1JCF00prV/48y7LUDoSlmSgdAXQsy+2+YNwoLBcM9OLzNCQM/wwR5R79CM6Iixj
oim+qyE8vrIZOS2klGooEKSPqfduYeyIEBhFw1yZZfU4wN5AWsF3s3Fsy8NQsaXd
R33z+1LTayvBzAnaig/EVMUclu1CmO+mBx6NqIWT87CABFu6CQ8iSRziVXUR/sL4
5+TXcClePb+Whjeq9EBVTcTxCHtd5QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEbd
689/c4dd9LDGe7IOifZbbGOdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NjI0MzRDNkY0QTAxMUVGQTU2M0Y5NUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOg7MA0GCSqGSIb3DQEBCwUA
A4IBAQCYI4ts+kwjcbLSPgcjfa4BbtKgaQbspnQKft9WTMTqrUUVx4VPhRNyaWld
VKt5wggus0gENzepQgUgKIFnR/LVeVq1BVMp9DbODeEm3G5JRKPvhZStJsWdo58x
LPWfHe/6fj81BerDQdaqiTxBVPx0975Xv/6kTrxb9ZAU+4l5ZnTXIJORWkHXo0r9
ZMZf9Fszj4v2kwz5aDY4zNT0qzRLuspEA/liatCvu0c/rVsYZ8npp3plHeuBaIOI
MwoMBBfsgJYsn59n4fplYCkXPp2WYNr7vMWF6KOvzPJ1m+UTKDhUoajePfzUtcm7
bhf2hnDcrxpi79A3B41Y7XQRKLj3
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:09 2025 by rpki-client