Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3F70726F2CB11EF9429C151762E951A.roa
File: A3F70726F2CB11EF9429C151762E951A.roa (raw, json)
Hash identifier: XtENywcd5jI8Sui8kkg8XdBQy0QDcRoGFxAR5ZxBYU0=
Subject key identifier: 82:C3:73:C2:10:A1:D3:4F:B1:1F:35:02:30:BE:B6:03:10:E3:AA:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3F70726F2CB11EF9429C151762E951A.roa
Signing time: Mon 24 Feb 2025 16:23:12 +0000
ROA not before: Mon 24 Feb 2025 16:23:08 +0000
ROA not after: Sat 05 Apr 2025 16:23:08 +0000
asID: 134823
IP address blocks: 156.234.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76882 (0x12c52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 16:23:08 2025 GMT
Not After : Apr 5 16:23:08 2025 GMT
Subject: CN=67bc9cef-6ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:ea:97:e4:6f:75:ab:0c:76:68:cb:8b:18:
6c:3f:5d:de:b8:81:67:f5:f2:73:3e:c8:dc:43:93:
b4:67:4b:bb:7e:e3:b6:e5:8a:c0:51:48:30:06:af:
76:a0:c9:a2:47:93:25:70:80:49:b3:80:dc:16:0b:
57:a3:30:63:60:95:da:25:93:e3:87:87:bb:7a:68:
d1:a9:fc:55:e9:66:db:77:f8:4e:a5:c2:9e:2b:4d:
1a:4c:cf:e7:41:f8:fb:28:1c:76:2f:b1:82:87:65:
8d:d5:f9:f8:b4:4e:16:5b:87:00:e0:92:d4:ac:bd:
b8:7a:1c:db:34:b3:cc:97:2c:fe:37:7d:7b:bf:56:
84:62:f4:03:ca:64:ba:39:ff:19:a5:ef:8e:6d:8a:
a4:88:c2:e1:bb:1e:2a:f3:54:36:e5:e4:49:41:1c:
8d:e7:e6:db:50:c2:e2:45:24:22:d7:21:a6:b3:09:
c4:56:e4:2d:4d:a4:a2:c5:f2:d5:a7:e7:45:bb:df:
dd:d9:ab:b1:af:4b:14:37:60:23:98:93:3b:c3:72:
7b:70:dd:e0:b4:43:aa:e7:37:99:27:f7:0a:4c:ff:
67:43:1b:8e:33:be:d2:8c:bb:64:26:51:35:63:2e:
12:e5:f6:a7:59:51:d1:87:1f:d7:92:b5:03:f4:2e:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C3:73:C2:10:A1:D3:4F:B1:1F:35:02:30:BE:B6:03:10:E3:AA:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3F70726F2CB11EF9429C151762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.228.0/22
Signature Algorithm: sha256WithRSAEncryption
57:80:b3:e2:d3:47:9d:51:4e:36:93:b3:54:dd:2b:a8:49:a5:
57:63:51:11:af:6d:37:dc:c7:4e:0a:0d:bf:ef:88:39:32:1b:
1a:53:a5:1a:7f:db:51:90:77:7d:21:b2:ca:12:51:80:d6:99:
fc:81:15:ca:3d:eb:14:5f:be:8f:6e:5e:ac:ca:34:05:50:e7:
ac:a3:b1:1d:d4:9f:5f:5e:92:8f:a2:48:b7:e2:49:00:7c:80:
b8:f4:66:75:92:ab:07:52:c1:ca:60:4f:d6:be:76:bc:1c:e7:
c0:09:33:b7:e6:70:f1:f7:90:12:64:4b:fe:d3:43:d7:b5:2c:
dc:c7:aa:83:6a:d4:39:56:62:fa:24:c7:42:c8:16:69:fa:7c:
02:36:d6:db:3e:93:c7:5d:ce:7f:13:5c:49:15:f2:62:73:df:
d1:5a:c9:a6:e3:7b:b9:98:a0:11:5d:b4:f7:10:b5:db:86:cc:
0e:8c:24:6b:e6:b6:33:78:f2:54:37:99:c5:af:62:80:76:79:
e5:73:6f:52:cc:c7:db:22:5e:dc:9d:17:8d:46:b9:30:e6:6a:
a2:08:c9:86:9a:13:e8:e9:1a:f5:fc:94:e1:83:a7:fc:d8:d8:
65:52:d5:1f:97:6b:35:6a:41:d8:47:1b:f7:de:cb:75:4c:65:
a6:39:e9:76
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASxSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI0MTYyMzA4WhcNMjUwNDA1MTYyMzA4WjAYMRYw
FAYDVQQDEw02N2JjOWNlZi02ZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1h7ql+RvdasMdmjLixhsP13euIFn9fJzPsjcQ5O0Z0u7fuO25YrAUUgw
Bq92oMmiR5MlcIBJs4DcFgtXozBjYJXaJZPjh4e7emjRqfxV6Wbbd/hOpcKeK00a
TM/nQfj7KBx2L7GCh2WN1fn4tE4WW4cA4JLUrL24ehzbNLPMlyz+N317v1aEYvQD
ymS6Of8Zpe+ObYqkiMLhux4q81Q25eRJQRyN5+bbUMLiRSQi1yGmswnEVuQtTaSi
xfLVp+dFu9/d2auxr0sUN2AjmJM7w3J7cN3gtEOq5zeZJ/cKTP9nQxuOM77SjLtk
JlE1Yy4S5fanWVHRhx/XkrUD9C7RuQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFILD
c8IQodNPsR81AjC+tgMQ46peMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BM0Y3MDcyNkYyQ0IxMUVGOTQyOUMxNTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOrkMA0GCSqGSIb3DQEBCwUA
A4IBAQBXgLPi00edUU42k7NU3SuoSaVXY1ERr2033MdOCg2/74g5MhsaU6Uaf9tR
kHd9IbLKElGA1pn8gRXKPesUX76Pbl6syjQFUOeso7Ed1J9fXpKPoki34kkAfIC4
9GZ1kqsHUsHKYE/Wvna8HOfACTO35nDx95ASZEv+00PXtSzcx6qDatQ5VmL6JMdC
yBZp+nwCNtbbPpPHXc5/E1xJFfJic9/RWsmm43u5mKARXbT3ELXbhswOjCRr5rYz
ePJUN5nFr2KAdnnlc29SzMfbIl7cnReNRrkw5mqiCMmGmhPo6Rr1/JThg6f82Nhl
UtUfl2s1akHYRxv33st1TGWmOel2
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:27 2025 by rpki-client