Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A36A3C92E53811EF8CC6CA73762E951A.roa
File: A36A3C92E53811EF8CC6CA73762E951A.roa (raw, json)
Hash identifier: Pejn/VrxwPNkWj77aJO0hVKKXhPAo0kWjvKtsv4wqgQ=
Subject key identifier: 77:39:6A:EB:B4:C6:6F:0D:78:4B:EA:54:90:50:E0:42:83:C8:9F:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A36A3C92E53811EF8CC6CA73762E951A.roa
Signing time: Fri 07 Feb 2025 09:48:09 +0000
ROA not before: Fri 07 Feb 2025 09:48:06 +0000
ROA not after: Sat 13 Dec 2025 09:48:06 +0000
asID: 984
IP address blocks: 156.230.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72907 (0x11ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 09:48:06 2025 GMT
Not After : Dec 13 09:48:06 2025 GMT
Subject: CN=67a5d6d9-292d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:cf:81:ed:17:58:48:ba:66:e2:a9:98:64:
e2:0f:9a:e7:34:ac:97:2a:81:f0:35:ac:a2:94:3f:
2d:ab:bd:7d:38:98:c2:87:57:8f:da:49:dc:03:c6:
e8:c8:07:cf:79:56:3b:dc:b5:1e:1b:7b:48:83:6c:
ba:be:ff:78:ec:06:4b:51:a4:12:1e:d5:4c:e3:08:
4a:51:ea:3e:af:df:e5:7b:76:6e:96:74:b6:53:61:
71:01:bf:b0:0c:7f:11:99:a9:8e:c6:9c:cf:30:bb:
84:96:3b:93:28:99:dd:3b:c1:f3:92:32:54:ed:7b:
51:6b:0e:89:27:78:f2:a0:fd:3e:85:03:eb:d7:24:
6a:82:1b:fd:ca:01:94:41:0b:c0:8c:1f:57:ac:a7:
90:02:c0:e1:50:f3:6d:59:df:c2:52:46:7f:ac:9b:
ba:8e:c8:62:13:b1:e1:ac:d9:00:d7:ac:c8:bb:3a:
24:71:5b:d7:18:bc:8e:1a:d4:8a:2f:2b:db:42:84:
9a:81:c5:fc:df:61:9f:ce:68:57:1f:94:39:3a:17:
3d:21:ec:b8:e8:44:09:ab:48:fc:1a:ea:dc:c7:fa:
14:69:8b:97:5f:97:cb:29:67:67:ca:67:19:54:d2:
28:3a:7f:c0:6f:70:9a:ea:b7:72:12:a9:40:a5:b2:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:39:6A:EB:B4:C6:6F:0D:78:4B:EA:54:90:50:E0:42:83:C8:9F:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A36A3C92E53811EF8CC6CA73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.138.0/24
Signature Algorithm: sha256WithRSAEncryption
05:08:82:f0:86:0d:c2:5f:08:38:36:15:25:6d:05:eb:3a:f8:
70:b2:76:b2:ef:3a:1f:89:6a:42:fe:53:da:5e:63:69:fd:ba:
2a:8c:db:7c:d5:c3:a2:d3:aa:78:7c:20:e7:5c:91:82:04:25:
c3:3f:60:80:2a:c1:f6:89:52:93:da:66:0d:76:75:a1:f9:e0:
24:7b:26:3b:0f:4d:0f:28:fc:fa:48:42:ca:5f:e0:da:23:b0:
3b:08:d1:e7:98:b3:8d:79:87:e5:ae:d6:87:cf:71:2c:88:c9:
b7:01:1a:ec:b2:ae:5a:df:e5:05:b3:f5:1d:6a:cf:41:5f:b5:
88:77:d2:2f:5a:02:eb:c9:0c:7b:ce:43:31:18:a9:9e:59:d8:
df:30:46:88:37:2c:ea:5d:2b:48:54:b2:63:cc:49:23:42:a6:
15:6e:a8:e2:72:c0:6c:d1:3c:e0:d7:1d:a3:0f:9b:26:6f:69:
7d:e0:cd:c5:30:81:ad:e1:5d:19:fe:58:2f:2b:56:78:78:5b:
54:aa:16:0f:7d:6d:63:e5:e9:c4:4d:07:80:52:3d:67:05:e1:
a2:a5:d5:ee:a3:00:82:03:8f:a8:7b:9a:11:4d:17:35:ea:75:
60:ff:f1:48:d1:ea:58:9f:51:a1:1b:51:48:3f:a2:91:14:c3:
09:c6:81:50
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARzLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjA3MDk0ODA2WhcNMjUxMjEzMDk0ODA2WjAYMRYw
FAYDVQQDEw02N2E1ZDZkOS0yOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArALPge0XWEi6ZuKpmGTiD5rnNKyXKoHwNayilD8tq719OJjCh1eP2knc
A8boyAfPeVY73LUeG3tIg2y6vv947AZLUaQSHtVM4whKUeo+r9/le3ZulnS2U2Fx
Ab+wDH8RmamOxpzPMLuEljuTKJndO8HzkjJU7XtRaw6JJ3jyoP0+hQPr1yRqghv9
ygGUQQvAjB9XrKeQAsDhUPNtWd/CUkZ/rJu6jshiE7HhrNkA16zIuzokcVvXGLyO
GtSKLyvbQoSagcX832GfzmhXH5Q5Ohc9Iey46EQJq0j8Gurcx/oUaYuXX5fLKWdn
ymcZVNIoOn/Ab3Ca6rdyEqlApbK/YwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHc5
auu0xm8NeEvqVJBQ4EKDyJ8EMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMzZBM0M5MkU1MzgxMUVGOENDNkNBNzM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOaKMA0GCSqGSIb3DQEBCwUA
A4IBAQAFCILwhg3CXwg4NhUlbQXrOvhwsnay7zofiWpC/lPaXmNp/boqjNt81cOi
06p4fCDnXJGCBCXDP2CAKsH2iVKT2mYNdnWh+eAkeyY7D00PKPz6SELKX+DaI7A7
CNHnmLONeYflrtaHz3EsiMm3ARrssq5a3+UFs/Udas9BX7WId9IvWgLryQx7zkMx
GKmeWdjfMEaINyzqXStIVLJjzEkjQqYVbqjicsBs0Tzg1x2jD5smb2l94M3FMIGt
4V0Z/lgvK1Z4eFtUqhYPfW1j5enETQeAUj1nBeGipdXuowCCA4+oe5oRTRc16nVg
//FI0epYn1GhG1FIP6KRFMMJxoFQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:11 2025 by rpki-client