Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AF3CE7A00B811F09A73D095762E951A.roa
File: 9AF3CE7A00B811F09A73D095762E951A.roa (raw, json)
Hash identifier: TDteLi8/a0537e/d9WpdJi/J4lz8K37LqLhsYoG1NXo=
Subject key identifier: 3B:6C:FB:F8:77:FF:31:3D:EC:31:2D:FC:F5:CF:FD:77:20:73:36:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AF3CE7A00B811F09A73D095762E951A.roa
Signing time: Fri 14 Mar 2025 09:42:12 +0000
ROA not before: Fri 14 Mar 2025 09:42:08 +0000
ROA not after: Fri 25 Apr 2025 09:42:08 +0000
asID: 61112
IP address blocks: 156.231.139.0/24 maxlen: 24
156.246.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83402 (0x145ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 09:42:08 2025 GMT
Not After : Apr 25 09:42:08 2025 GMT
Subject: CN=67d3f9f4-6703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:8d:1c:b4:50:72:34:4f:64:35:5c:46:5e:
a2:5a:17:b7:4b:b9:61:6a:28:d0:b9:e8:57:ec:5d:
50:4d:f5:77:11:f4:4d:ab:98:25:e1:47:b1:2f:08:
03:0d:98:fd:bd:7f:b0:49:9c:ec:ab:11:c9:72:64:
42:80:76:3a:7b:90:8f:c6:52:d9:5f:b1:49:7e:ee:
f9:1c:8b:06:7a:68:9f:1a:72:cc:a5:f4:08:64:02:
f1:5a:6f:c5:f7:37:43:6b:f6:f6:fc:7f:1d:60:f3:
ae:11:3e:a2:4e:5f:ff:b8:95:59:e8:45:3f:28:9d:
47:ad:33:f5:ee:d8:a4:33:0b:6a:52:00:c9:0b:34:
0c:e1:f1:9e:d5:2f:d4:f9:35:c9:38:ce:9b:26:ae:
ec:cc:fd:8f:48:01:fd:41:5b:5a:4d:81:a7:d5:78:
ca:31:0c:a7:28:16:76:7a:60:e6:f4:52:16:d5:9d:
2c:0f:00:cc:ac:26:a1:fa:7d:96:b9:f9:94:5a:53:
79:d9:fe:29:fc:da:59:4c:da:09:f8:f6:50:04:34:
a0:21:4d:76:41:15:fb:b1:0c:13:7a:9f:a6:f9:de:
a1:aa:5f:1f:7e:62:41:15:78:c7:15:b8:41:fa:8b:
11:a0:7e:1d:fb:3c:ec:27:ac:a1:ef:93:90:1d:fc:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6C:FB:F8:77:FF:31:3D:EC:31:2D:FC:F5:CF:FD:77:20:73:36:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AF3CE7A00B811F09A73D095762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.139.0/24
156.246.88.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:47:26:5b:3f:29:11:a3:69:d0:39:85:0b:35:cd:91:21:9a:
d1:7d:25:13:0d:3e:d7:b8:64:6a:af:a7:5b:ca:c6:ef:93:86:
86:3a:e1:a3:f6:ff:c2:93:c4:14:82:e5:61:b5:0c:20:78:cd:
06:cf:9f:98:c3:05:98:34:c5:ba:b4:95:7d:26:0b:1d:8b:4c:
c9:73:eb:b6:19:df:c4:9a:8d:c6:46:db:a2:dc:69:ef:cf:44:
43:18:df:f6:25:05:e4:5a:1a:f2:d9:17:3c:c3:e4:bf:70:59:
74:30:8f:fe:9f:9e:8b:fd:42:cd:ec:c8:8c:6e:ff:87:b9:62:
e6:f7:82:f6:c7:50:84:46:53:47:f5:ad:53:39:6f:29:c1:d4:
62:9c:b6:6a:c7:6d:2e:7d:05:17:5f:d4:d7:aa:32:6d:5b:58:
6d:0b:ef:05:bc:f0:33:27:8c:8d:2f:e8:d7:a5:ec:1b:d2:32:
c3:5d:6e:9a:a9:36:8f:42:45:6f:3c:61:f8:fe:6e:83:23:ee:
f9:1b:f7:92:35:02:9f:d7:6d:5e:52:c8:46:f4:f4:2a:fa:3d:
9d:5e:77:15:ec:23:ba:37:bb:f8:dc:33:06:a5:85:fb:6d:64:
5f:c3:bf:35:07:44:7d:db:75:20:73:f8:12:1c:5e:27:e9:e7:
ca:a3:30:95
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUXKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE0MDk0MjA4WhcNMjUwNDI1MDk0MjA4WjAYMRYw
FAYDVQQDEw02N2QzZjlmNC02NzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwCmNHLRQcjRPZDVcRl6iWhe3S7lhaijQuehX7F1QTfV3EfRNq5gl4Uex
LwgDDZj9vX+wSZzsqxHJcmRCgHY6e5CPxlLZX7FJfu75HIsGemifGnLMpfQIZALx
Wm/F9zdDa/b2/H8dYPOuET6iTl//uJVZ6EU/KJ1HrTP17tikMwtqUgDJCzQM4fGe
1S/U+TXJOM6bJq7szP2PSAH9QVtaTYGn1XjKMQynKBZ2emDm9FIW1Z0sDwDMrCah
+n2WufmUWlN52f4p/NpZTNoJ+PZQBDSgIU12QRX7sQwTep+m+d6hql8ffmJBFXjH
FbhB+osRoH4d+zzsJ6yh75OQHfzOJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDts
+/h3/zE97DEt/PXP/XcgczYHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QUYzQ0U3QTAwQjgxMUYwOUE3M0QwOTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOeLAwQDnPZYMA0GCSqGSIb3
DQEBCwUAA4IBAQC6RyZbPykRo2nQOYULNc2RIZrRfSUTDT7XuGRqr6dbysbvk4aG
OuGj9v/Ck8QUguVhtQwgeM0Gz5+YwwWYNMW6tJV9Jgsdi0zJc+u2Gd/Emo3GRtui
3Gnvz0RDGN/2JQXkWhry2Rc8w+S/cFl0MI/+n56L/ULN7MiMbv+HuWLm94L2x1CE
RlNH9a1TOW8pwdRinLZqx20ufQUXX9TXqjJtW1htC+8FvPAzJ4yNL+jXpewb0jLD
XW6aqTaPQkVvPGH4/m6DI+75G/eSNQKf121eUshG9PQq+j2dXncV7CO6N7v43DMG
pYX7bWRfw781B0R923Ugc/gSHF4n6efKozCV
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:45 2025 by rpki-client