Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BFECC7A017B11F09E72A27C762E951A.roa
File: 9BFECC7A017B11F09E72A27C762E951A.roa (raw, json)
Hash identifier: DWJPLJbO9/OTqXqSRE/sb8kKSu0A/4zcCxdQPQMbCBQ=
Subject key identifier: 48:02:1B:AF:19:03:25:00:D7:DC:6E:C0:F1:76:AF:82:F0:29:EE:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014625
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BFECC7A017B11F09E72A27C762E951A.roa
Signing time: Sat 15 Mar 2025 08:58:06 +0000
ROA not before: Sat 15 Mar 2025 08:58:02 +0000
ROA not after: Sun 22 Mar 2026 08:58:02 +0000
asID: 209242
IP address blocks: 156.238.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83493 (0x14625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 15 08:58:02 2025 GMT
Not After : Mar 22 08:58:02 2026 GMT
Subject: CN=67d5411e-696f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c6:ec:f1:6f:ed:e2:ce:36:b6:ca:ac:95:ca:
e4:a4:f3:44:16:15:35:db:7b:92:b8:db:e6:8e:9f:
0c:1e:0a:1b:81:2e:f5:76:20:81:08:58:fb:7f:69:
f9:32:be:c4:03:65:41:a9:5c:3c:95:b1:b1:5a:ad:
df:76:ef:89:09:56:a6:31:12:0d:29:92:a2:64:56:
1e:e5:a5:fa:32:fd:1d:07:9b:b4:47:90:52:e7:27:
c8:c3:ef:e9:db:e2:5e:8d:45:59:16:bc:c2:fb:da:
42:df:7f:7d:26:d2:3f:6a:4a:e8:c0:df:ef:9e:06:
6c:91:52:25:89:09:34:2c:0b:f7:91:8b:99:7d:98:
e0:d3:0e:89:9e:df:2c:8a:ac:43:80:2f:88:35:f6:
36:30:83:53:d6:fa:82:4b:50:56:a3:1e:eb:ca:b3:
00:9a:8e:63:76:8a:e7:80:0b:c7:6c:c1:ff:fa:15:
11:1c:53:18:be:b2:34:fb:11:d0:0b:c5:de:f3:ce:
d8:0b:68:dd:6b:24:5a:80:fc:6a:20:2a:09:47:f8:
4b:b3:55:72:49:32:b5:c7:2a:f4:97:07:f8:f8:fd:
4e:2c:72:bd:3b:83:1e:2c:17:82:93:09:4d:42:b9:
fe:7f:c4:b8:fe:89:80:45:4a:a7:e1:3b:1c:06:22:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:02:1B:AF:19:03:25:00:D7:DC:6E:C0:F1:76:AF:82:F0:29:EE:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BFECC7A017B11F09E72A27C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.181.0/24
Signature Algorithm: sha256WithRSAEncryption
32:36:9e:c9:5d:fd:24:a4:cb:87:87:a8:24:34:17:ff:a2:b4:
ee:60:81:38:c3:ac:b4:d9:06:ff:52:0b:60:83:10:9b:26:ec:
a1:97:06:ff:a0:a3:a5:00:fa:1e:e1:91:e4:fb:8a:bc:02:f9:
72:24:a6:55:d4:e8:37:75:06:28:97:26:11:e9:f7:1c:e2:02:
47:97:d0:a2:12:0e:f2:73:d2:01:0d:40:d1:be:2b:a8:9d:8b:
03:18:0f:1a:d3:40:22:c7:51:77:f9:58:5b:37:d1:c4:00:4a:
d2:8d:89:62:3a:b2:dd:af:e8:5a:27:92:02:b8:69:99:f8:99:
42:f6:d4:a8:34:1b:ef:4c:a4:d3:cc:32:25:96:a4:59:9b:4a:
2c:f5:19:cb:97:de:99:b2:54:26:67:d5:c5:34:b3:84:2e:38:
d3:52:35:df:60:58:31:3e:43:7e:44:1c:e0:49:23:46:06:b4:
92:a5:14:70:36:33:15:69:34:d2:02:4b:a5:12:6c:5b:e6:29:
65:0d:c8:2e:6d:eb:f7:e2:35:5e:fb:e8:7a:90:ad:8d:a6:b6:
b0:15:47:df:4f:88:b9:bc:e3:e0:ea:1f:c5:b9:61:69:4a:b5:
b0:e8:3a:e1:ec:59:08:f1:fc:53:51:99:9b:ed:59:1c:d6:e7:
7c:8e:4c:76
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUYlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE1MDg1ODAyWhcNMjYwMzIyMDg1ODAyWjAYMRYw
FAYDVQQDEw02N2Q1NDExZS02OTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9cbs8W/t4s42tsqslcrkpPNEFhU123uSuNvmjp8MHgobgS71diCBCFj7
f2n5Mr7EA2VBqVw8lbGxWq3fdu+JCVamMRINKZKiZFYe5aX6Mv0dB5u0R5BS5yfI
w+/p2+JejUVZFrzC+9pC3399JtI/akrowN/vngZskVIliQk0LAv3kYuZfZjg0w6J
nt8siqxDgC+INfY2MINT1vqCS1BWox7ryrMAmo5jdorngAvHbMH/+hURHFMYvrI0
+xHQC8Xe887YC2jdayRagPxqICoJR/hLs1VySTK1xyr0lwf4+P1OLHK9O4MeLBeC
kwlNQrn+f8S4/omARUqn4TscBiJLjQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEgC
G68ZAyUA19xuwPF2r4LwKe5yMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QkZFQ0M3QTAxN0IxMUYwOUU3MkEyN0M3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO61MA0GCSqGSIb3DQEBCwUA
A4IBAQAyNp7JXf0kpMuHh6gkNBf/orTuYIE4w6y02Qb/UgtggxCbJuyhlwb/oKOl
APoe4ZHk+4q8AvlyJKZV1Og3dQYolyYR6fcc4gJHl9CiEg7yc9IBDUDRviuonYsD
GA8a00Aix1F3+VhbN9HEAErSjYliOrLdr+haJ5ICuGmZ+JlC9tSoNBvvTKTTzDIl
lqRZm0os9RnLl96ZslQmZ9XFNLOELjjTUjXfYFgxPkN+RBzgSSNGBrSSpRRwNjMV
aTTSAkulEmxb5illDcgubev34jVe++h6kK2NprawFUffT4i5vOPg6h/FuWFpSrWw
6Drh7FkI8fxTUZmb7Vkc1ud8jkx2
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:02 2025 by rpki-client