Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E9D7B0EF45E11EFAC97289D762E951A.roa
File: 9E9D7B0EF45E11EFAC97289D762E951A.roa (raw, json)
Hash identifier: 7k2Hs+RRdYmYyV/ZZJd2C/eIyey5Bl7JL28Ellet4+E=
Subject key identifier: 86:0C:3E:07:08:5F:43:4A:88:36:35:82:4C:23:39:4C:88:C0:01:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E9D7B0EF45E11EFAC97289D762E951A.roa
Signing time: Wed 26 Feb 2025 16:27:51 +0000
ROA not before: Wed 26 Feb 2025 16:27:45 +0000
ROA not after: Thu 19 Feb 2026 16:27:45 +0000
asID: 984
IP address blocks: 156.252.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79041 (0x134c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:27:45 2025 GMT
Not After : Feb 19 16:27:45 2026 GMT
Subject: CN=67bf4107-a7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:19:2e:dd:e3:61:2e:fa:b0:3a:12:e3:2f:
9c:2b:97:6b:97:59:bb:ae:f4:60:fb:0b:67:6d:54:
9f:df:7e:51:e7:6f:c3:64:bc:36:03:d7:69:14:c5:
55:7d:cc:00:74:45:5c:6e:b1:5a:61:73:80:b8:3e:
03:38:6b:e9:e9:33:38:1f:40:7c:1c:37:3d:09:c8:
49:28:a5:88:e0:15:ea:47:ea:81:3e:29:07:ac:c7:
e5:46:a1:1b:4b:d9:91:a2:d3:ee:d6:d0:55:64:fe:
4e:ed:f5:14:db:43:20:4f:d0:ae:d4:5b:cf:dc:3d:
77:59:d6:7d:02:2a:25:a7:72:32:cf:5c:a9:0e:38:
93:fb:39:7b:8f:a8:48:82:c8:9a:0b:70:7d:21:74:
31:51:84:0a:95:98:ab:88:a2:79:47:09:a7:65:fc:
00:00:df:be:06:7b:0e:bf:e9:1e:95:ba:1f:ff:b3:
34:6f:4b:60:1c:15:67:5c:bb:c4:75:2c:03:39:4d:
c9:50:f1:d0:7d:29:d3:0d:53:8b:45:d7:a1:d5:fd:
75:de:66:b3:a9:16:47:b3:af:60:e5:c3:ea:7f:4e:
bc:af:a2:cd:76:0f:d9:39:72:39:22:ed:38:f8:4a:
53:ea:7e:b6:d1:6e:95:3e:ee:91:6c:cb:e4:0f:93:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0C:3E:07:08:5F:43:4A:88:36:35:82:4C:23:39:4C:88:C0:01:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E9D7B0EF45E11EFAC97289D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.239.0/24
Signature Algorithm: sha256WithRSAEncryption
17:7e:e1:6b:ab:1b:9b:d9:b9:d8:9b:b2:3e:47:b4:fc:80:40:
be:55:5b:c6:2a:23:1b:71:a5:1a:18:14:49:2b:f0:f2:a2:33:
52:68:8d:8e:88:e4:e5:29:92:97:03:81:a3:b4:c5:45:80:13:
0f:05:8f:1c:ae:4b:19:a8:c1:01:bf:c4:3c:61:65:a8:11:4e:
df:e7:84:6a:53:33:4a:6f:ea:56:5b:c8:a5:69:18:75:37:2b:
5a:c8:6a:c8:87:3a:6d:3b:fa:ac:0d:22:26:d4:5d:f7:eb:72:
98:0d:3f:63:e0:36:5e:6c:bb:59:f2:02:40:ce:1a:72:1f:2c:
70:80:17:9c:c4:15:32:5e:75:ec:3d:e1:1e:eb:15:63:79:75:
02:14:d0:e2:05:e0:32:3c:06:3d:40:04:0b:59:2c:ae:6e:ca:
3a:ea:33:eb:93:b3:5a:db:d5:f1:6b:c7:77:9f:4e:0b:dd:25:
5b:f2:f1:a1:17:ff:ec:4a:76:19:80:52:74:a1:52:ba:92:4d:
98:be:f5:65:4f:d2:be:19:ec:3b:0e:35:c8:7e:84:1e:d1:39:
1f:8b:a3:56:df:76:2a:13:30:83:51:ef:25:e1:be:3d:5e:55:
5a:aa:de:ad:35:fa:0d:36:6e:95:af:62:a4:7a:f1:f0:43:29:
0f:61:f0:ec
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATTBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTYyNzQ1WhcNMjYwMjE5MTYyNzQ1WjAYMRYw
FAYDVQQDEw02N2JmNDEwNy1hN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArhAZLt3jYS76sDoS4y+cK5drl1m7rvRg+wtnbVSf335R52/DZLw2A9dp
FMVVfcwAdEVcbrFaYXOAuD4DOGvp6TM4H0B8HDc9CchJKKWI4BXqR+qBPikHrMfl
RqEbS9mRotPu1tBVZP5O7fUU20MgT9Cu1FvP3D13WdZ9Aiolp3Iyz1ypDjiT+zl7
j6hIgsiaC3B9IXQxUYQKlZiriKJ5RwmnZfwAAN++BnsOv+kelbof/7M0b0tgHBVn
XLvEdSwDOU3JUPHQfSnTDVOLRdeh1f113mazqRZHs69g5cPqf068r6LNdg/ZOXI5
Iu04+EpT6n620W6VPu6RbMvkD5PEdwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIYM
PgcIX0NKiDY1gkwjOUyIwAGVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RTlEN0IwRUY0NUUxMUVGQUM5NzI4OUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPzvMA0GCSqGSIb3DQEBCwUA
A4IBAQAXfuFrqxub2bnYm7I+R7T8gEC+VVvGKiMbcaUaGBRJK/DyojNSaI2OiOTl
KZKXA4GjtMVFgBMPBY8crksZqMEBv8Q8YWWoEU7f54RqUzNKb+pWW8ilaRh1Nyta
yGrIhzptO/qsDSIm1F3363KYDT9j4DZebLtZ8gJAzhpyHyxwgBecxBUyXnXsPeEe
6xVjeXUCFNDiBeAyPAY9QAQLWSyubso66jPrk7Na29Xxa8d3n04L3SVb8vGhF//s
SnYZgFJ0oVK6kk2YvvVlT9K+Gew7DjXIfoQe0Tkfi6NW33YqEzCDUe8l4b49XlVa
qt6tNfoNNm6Vr2KkevHwQykPYfDs
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:24 2025 by rpki-client