Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2F8ED38F42611EFA50DCF92762E951A.roa
File: A2F8ED38F42611EFA50DCF92762E951A.roa (raw, json)
Hash identifier: anNgVKgZe9+YLVoFzM4zSCGhubCDE3AJoGmXeiPKhH0=
Subject key identifier: 32:9A:C6:A8:2D:A2:99:73:56:D9:FE:72:C9:AA:B9:B9:A3:B6:57:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2F8ED38F42611EFA50DCF92762E951A.roa
Signing time: Wed 26 Feb 2025 09:47:05 +0000
ROA not before: Wed 26 Feb 2025 09:47:01 +0000
ROA not after: Thu 19 Feb 2026 09:47:01 +0000
asID: 984
IP address blocks: 156.230.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77988 (0x130a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:47:01 2025 GMT
Not After : Feb 19 09:47:01 2026 GMT
Subject: CN=67bee319-48ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:63:b2:51:fd:df:05:49:43:ce:84:10:64:
87:b5:14:80:4a:0a:eb:a2:02:7b:13:38:65:39:e2:
44:53:70:9b:59:a0:1c:4f:03:ab:a0:cf:04:32:f1:
fc:67:5e:89:77:51:76:79:17:f5:71:1e:46:78:60:
6d:83:cb:2d:09:60:3c:37:e7:11:59:12:4d:39:1f:
5d:4c:9f:f0:8c:75:a8:74:70:77:d2:23:63:01:31:
32:5f:69:9b:4f:67:7b:e5:13:82:ac:30:41:63:b6:
92:84:26:42:38:30:cb:46:3b:31:12:f5:3e:bc:86:
34:11:ba:94:68:66:c3:d3:c6:57:05:6c:3a:43:56:
79:92:a9:5b:83:9a:26:f3:0b:f9:1c:78:ff:07:c5:
30:c5:9f:0f:c9:6a:69:f9:de:6a:08:23:dd:65:74:
a7:c7:bd:c7:fe:e6:92:3c:a2:7c:66:38:32:e3:2d:
0a:c8:60:a9:f1:82:7a:b2:fb:89:12:8e:a3:44:6d:
5a:f4:f4:07:31:db:1e:64:fd:45:18:83:c8:2a:e5:
f3:62:cd:d0:44:de:cb:e9:bd:5a:98:a5:f6:f2:5a:
93:29:1b:29:15:64:17:21:9f:62:af:58:1b:6d:4f:
c9:18:27:c3:52:35:b9:7c:7c:d0:20:44:18:93:68:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9A:C6:A8:2D:A2:99:73:56:D9:FE:72:C9:AA:B9:B9:A3:B6:57:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2F8ED38F42611EFA50DCF92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.54.0/24
Signature Algorithm: sha256WithRSAEncryption
93:87:01:e6:59:04:04:cf:c7:51:84:b2:43:27:30:a6:5f:e4:
46:0c:a0:a3:54:85:43:b9:f2:22:c6:96:fa:a6:82:76:a7:22:
b0:86:f9:7b:a8:19:8a:26:17:51:5c:f9:10:6d:3a:48:ab:de:
72:d4:c1:b7:d2:5f:14:43:84:1f:e1:7d:ee:a0:79:e1:2f:98:
e0:1b:e0:94:91:a2:1c:92:31:99:7d:f3:20:48:88:04:21:c1:
55:98:34:4b:4d:a0:71:25:9e:c6:e4:40:5d:ec:da:ed:21:d2:
b8:8b:1b:e9:02:9b:31:d6:ec:f5:17:18:bd:03:f7:0f:b1:1a:
19:22:f5:46:95:fc:b0:fa:dd:c3:c0:5f:35:05:ab:c4:c6:0e:
59:ae:21:22:ee:d7:f9:4e:82:20:a9:9d:bc:ca:48:a1:69:58:
e9:42:5d:86:b4:1d:8b:6f:f1:a2:76:2a:f5:01:4a:81:ca:0b:
00:db:a5:57:df:2a:49:29:c4:3d:f4:fe:3d:77:5c:b3:98:98:
35:55:59:13:2b:8f:de:80:bc:89:3d:75:67:2c:90:ff:37:db:
d0:e1:fe:4a:43:03:7c:7c:20:c8:86:30:ac:16:80:17:15:0c:
f6:a6:c7:cf:4e:b5:19:dc:89:19:9a:68:b4:cf:85:1a:cd:54:
74:9e:83:04
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATCkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MDk0NzAxWhcNMjYwMjE5MDk0NzAxWjAYMRYw
FAYDVQQDEw02N2JlZTMxOS00OGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx2xjslH93wVJQ86EEGSHtRSASgrrogJ7EzhlOeJEU3CbWaAcTwOroM8E
MvH8Z16Jd1F2eRf1cR5GeGBtg8stCWA8N+cRWRJNOR9dTJ/wjHWodHB30iNjATEy
X2mbT2d75ROCrDBBY7aShCZCODDLRjsxEvU+vIY0EbqUaGbD08ZXBWw6Q1Z5kqlb
g5om8wv5HHj/B8UwxZ8PyWpp+d5qCCPdZXSnx73H/uaSPKJ8Zjgy4y0KyGCp8YJ6
svuJEo6jRG1a9PQHMdseZP1FGIPIKuXzYs3QRN7L6b1amKX28lqTKRspFWQXIZ9i
r1gbbU/JGCfDUjW5fHzQIEQYk2jSQwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDKa
xqgtoplzVtn+csmqubmjtlfQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMkY4RUQzOEY0MjYxMUVGQTUwRENGOTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOY2MA0GCSqGSIb3DQEBCwUA
A4IBAQCThwHmWQQEz8dRhLJDJzCmX+RGDKCjVIVDufIixpb6poJ2pyKwhvl7qBmK
JhdRXPkQbTpIq95y1MG30l8UQ4Qf4X3uoHnhL5jgG+CUkaIckjGZffMgSIgEIcFV
mDRLTaBxJZ7G5EBd7NrtIdK4ixvpApsx1uz1Fxi9A/cPsRoZIvVGlfyw+t3DwF81
BavExg5ZriEi7tf5ToIgqZ28ykihaVjpQl2GtB2Lb/Gidir1AUqBygsA26VX3ypJ
KcQ99P49d1yzmJg1VVkTK4/egLyJPXVnLJD/N9vQ4f5KQwN8fCDIhjCsFoAXFQz2
psfPTrUZ3IkZmmi0z4UazVR0noME
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:06 2025 by rpki-client