Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1D39AE0F34311EF94CBF586762E951A.roa
File: A1D39AE0F34311EF94CBF586762E951A.roa (raw, json)
Hash identifier: k/q3Gbt2qDAeA5bPoOpdT/woRonS46IMEC/IfALwbiA=
Subject key identifier: 16:17:3C:54:4B:E1:E3:D6:58:BB:52:A5:C7:99:A4:00:A5:8A:BA:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1D39AE0F34311EF94CBF586762E951A.roa
Signing time: Tue 25 Feb 2025 06:42:07 +0000
ROA not before: Tue 25 Feb 2025 06:42:03 +0000
ROA not after: Sat 19 Feb 2028 06:42:03 +0000
asID: 17561
IP address blocks: 156.249.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77194 (0x12d8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 06:42:03 2025 GMT
Not After : Feb 19 06:42:03 2028 GMT
Subject: CN=67bd663f-52ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:cc:7c:c4:1c:7e:20:cf:90:50:99:16:a5:
3b:f2:81:e8:fc:97:e0:69:38:58:4b:91:47:88:17:
7f:dd:b2:d1:8f:e9:2d:c6:e1:4a:3e:db:52:ef:3e:
55:0e:8d:f0:c8:aa:d0:4b:db:d3:ae:fd:20:3d:0e:
46:6e:fb:c7:b8:7e:18:a3:81:53:88:ee:2f:18:22:
f2:36:65:2d:aa:e9:5f:2d:a3:9e:85:bb:2e:99:e8:
69:be:10:6f:53:5d:ac:6e:5f:ba:c5:b1:72:56:7c:
74:44:f2:bf:50:f6:8b:73:f7:3b:cb:d8:b3:d9:39:
a5:c1:f2:f7:46:b7:5f:1a:d5:96:2c:b5:cf:70:54:
2b:07:68:60:50:e0:ff:f9:69:1e:44:0c:dc:35:5e:
9f:97:72:03:f7:fd:57:6c:40:a5:be:85:25:ad:af:
89:e7:87:e4:df:5c:3f:80:af:e1:30:0d:2b:be:df:
70:61:8a:73:fd:6d:e9:8b:06:8b:3c:ca:c5:12:d6:
b3:13:aa:73:20:d2:c9:1c:d1:71:32:25:82:fd:3c:
45:44:9f:cd:9c:4c:0e:d3:4a:be:82:1e:60:39:3a:
f7:34:2a:3c:09:75:02:5e:f1:10:29:88:cb:e5:1d:
5f:55:5e:67:35:f0:46:74:54:23:5a:ee:16:b7:52:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:17:3C:54:4B:E1:E3:D6:58:BB:52:A5:C7:99:A4:00:A5:8A:BA:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1D39AE0F34311EF94CBF586762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.206.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:df:b8:33:3c:a4:3d:44:0e:e8:d3:be:56:d2:2a:c8:9b:57:
39:0e:cd:8c:c2:2a:10:35:2f:fd:ad:b5:94:01:c4:54:6e:75:
cd:d4:9b:c0:27:8d:bb:b2:15:26:7d:4d:4d:3b:d7:61:43:e0:
45:6c:9d:4f:5c:ce:d0:e9:ac:68:3c:7c:de:ae:be:69:fa:66:
f9:03:c5:38:22:06:8d:52:7d:7c:7f:9f:1a:40:f9:91:f9:c6:
d6:8e:c9:36:5b:d0:ea:5e:db:59:43:58:ef:49:e2:59:05:3a:
e6:b8:07:79:5d:10:66:24:6b:34:57:a9:52:ed:62:94:79:95:
fa:7d:a3:e4:8a:9f:2c:f6:5c:9e:ed:42:e2:73:68:53:bb:dc:
68:ef:e7:63:66:e8:74:55:af:33:70:98:68:8a:cf:d0:c3:e3:
a4:12:e8:fd:bc:28:77:08:40:92:6c:00:89:0c:80:ef:83:4b:
4a:f9:90:37:24:68:d8:a6:e9:90:21:be:b7:ba:99:87:fe:47:
78:9a:30:2d:0c:06:4b:a3:bd:2c:dc:67:8a:42:d3:aa:4e:1f:
d2:05:7a:70:9a:ba:5a:4e:ad:39:82:6c:d2:6b:95:77:56:97:
e9:70:7a:ae:94:00:4e:95:78:7c:89:12:a4:f0:5c:c4:59:96:
d9:dc:87:e9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS2KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MDY0MjAzWhcNMjgwMjE5MDY0MjAzWjAYMRYw
FAYDVQQDEw02N2JkNjYzZi01MmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw7LMfMQcfiDPkFCZFqU78oHo/JfgaThYS5FHiBd/3bLRj+ktxuFKPttS
7z5VDo3wyKrQS9vTrv0gPQ5GbvvHuH4Yo4FTiO4vGCLyNmUtqulfLaOehbsumehp
vhBvU12sbl+6xbFyVnx0RPK/UPaLc/c7y9iz2TmlwfL3RrdfGtWWLLXPcFQrB2hg
UOD/+WkeRAzcNV6fl3ID9/1XbEClvoUlra+J54fk31w/gK/hMA0rvt9wYYpz/W3p
iwaLPMrFEtazE6pzINLJHNFxMiWC/TxFRJ/NnEwO00q+gh5gOTr3NCo8CXUCXvEQ
KYjL5R1fVV5nNfBGdFQjWu4Wt1Ih4wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBYX
PFRL4ePWWLtSpceZpAClirobMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMUQzOUFFMEYzNDMxMUVGOTRDQkY1ODY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPnOMA0GCSqGSIb3DQEBCwUA
A4IBAQBa37gzPKQ9RA7o075W0irIm1c5Ds2MwioQNS/9rbWUAcRUbnXN1JvAJ427
shUmfU1NO9dhQ+BFbJ1PXM7Q6axoPHzerr5p+mb5A8U4IgaNUn18f58aQPmR+cbW
jsk2W9DqXttZQ1jvSeJZBTrmuAd5XRBmJGs0V6lS7WKUeZX6faPkip8s9lye7ULi
c2hTu9xo7+djZuh0Va8zcJhois/Qw+OkEuj9vCh3CECSbACJDIDvg0tK+ZA3JGjY
pumQIb63upmH/kd4mjAtDAZLo70s3GeKQtOqTh/SBXpwmrpaTq05gmzSa5V3Vpfp
cHqulABOlXh8iRKk8FzEWZbZ3Ifp
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:24 2025 by rpki-client