Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8A287C8FB3611EF98E9FEB4762E951A.roa
File: A8A287C8FB3611EF98E9FEB4762E951A.roa (raw, json)
Hash identifier: zicwEhif0XQa5+n0OgUmM4pvZCkWjtySsbL3z5CSFgY=
Subject key identifier: 91:82:E5:E0:4F:E4:C4:9C:AB:17:18:95:E0:CC:A3:21:50:6F:FB:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014400
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8A287C8FB3611EF98E9FEB4762E951A.roa
Signing time: Fri 07 Mar 2025 09:29:25 +0000
ROA not before: Fri 07 Mar 2025 09:29:20 +0000
ROA not after: Sat 12 Apr 2025 09:29:20 +0000
asID: 20473
IP address blocks: 156.255.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82944 (0x14400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 09:29:20 2025 GMT
Not After : Apr 12 09:29:20 2025 GMT
Subject: CN=67cabc75-eef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:aa:5b:4a:e7:84:1a:8b:da:58:2e:05:0c:f4:
ea:c0:2c:2a:8b:d0:13:63:6c:21:ac:af:f4:14:87:
72:92:e1:04:7a:12:9c:35:b8:16:20:e7:e6:57:39:
43:ae:ac:a7:2e:18:d2:98:8d:46:62:d5:7e:27:04:
5a:83:a3:32:94:3a:45:4b:8b:90:c6:9e:cc:7b:40:
da:a7:71:f5:6f:8f:51:54:30:19:39:87:c2:f4:e4:
54:1b:df:a6:0b:e8:97:36:70:c9:a3:bc:08:2e:2c:
05:a3:49:01:33:d8:86:6a:f7:f2:1f:29:c5:26:68:
86:4a:c8:c3:4a:64:c0:48:0d:bd:6c:ae:3c:44:4b:
9c:e8:7c:c2:13:43:69:21:35:4d:2a:17:1b:d5:7a:
a1:ba:de:fc:be:41:f3:34:da:20:a4:a8:61:5c:b2:
59:48:bd:32:87:97:7a:f3:c1:da:df:4f:a4:04:3d:
9e:c9:01:ab:bd:db:58:da:6a:5f:1e:09:17:dc:4c:
45:2b:0b:c9:66:1f:f4:b0:0c:4b:64:9b:a0:44:77:
92:ba:75:12:48:e0:63:32:fd:26:46:2a:b4:a9:ab:
7f:62:18:16:99:6a:32:9e:f4:08:18:c0:aa:0c:d0:
87:ca:ff:71:e8:d0:cc:35:fe:28:14:bd:26:75:49:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:82:E5:E0:4F:E4:C4:9C:AB:17:18:95:E0:CC:A3:21:50:6F:FB:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8A287C8FB3611EF98E9FEB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.33.0/24
Signature Algorithm: sha256WithRSAEncryption
75:c8:99:da:f1:3c:58:e9:13:21:26:c7:06:9c:b7:dc:a0:45:
e7:b5:e6:5e:6a:4c:e1:5d:78:a8:05:e0:5c:b9:40:3e:51:b7:
6b:3d:51:b6:56:71:32:be:68:af:a4:e9:8d:86:47:ee:02:5c:
fe:ac:3b:6c:3f:89:9a:1c:96:78:1d:c3:f7:21:68:ef:a9:e6:
c2:d4:7d:57:70:f8:f1:98:41:92:a0:9b:7c:8f:d5:71:b6:99:
6a:65:23:d1:26:26:f5:d1:9e:73:c3:d5:4c:09:2c:c2:40:13:
83:c4:36:8a:94:9b:f1:ca:74:43:0b:11:92:8f:d0:9f:f0:3d:
95:5a:57:74:cf:4d:30:48:bd:5d:6b:44:1e:75:2d:ab:75:07:
47:4e:13:98:60:db:de:60:d9:61:c0:36:e7:3f:34:e1:7e:02:
6b:22:c2:ea:31:4f:e5:fe:65:0e:fe:96:a3:c8:06:5d:77:1c:
09:87:75:a1:14:ca:91:c8:14:0a:46:ff:2b:62:ce:07:fb:28:
c6:d3:26:1c:88:60:31:c7:b4:1e:4f:3f:3f:f6:47:08:82:28:
21:92:00:29:78:ad:e3:51:ff:98:f7:c5:c8:4e:e5:46:07:64:
3d:26:e5:c0:8d:9c:34:90:fc:06:95:70:3c:4f:13:30:01:2d:
3c:43:1d:6c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUQAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA3MDkyOTIwWhcNMjUwNDEyMDkyOTIwWjAYMRYw
FAYDVQQDEw02N2NhYmM3NS1lZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7apbSueEGovaWC4FDPTqwCwqi9ATY2whrK/0FIdykuEEehKcNbgWIOfm
VzlDrqynLhjSmI1GYtV+JwRag6MylDpFS4uQxp7Me0Dap3H1b49RVDAZOYfC9ORU
G9+mC+iXNnDJo7wILiwFo0kBM9iGavfyHynFJmiGSsjDSmTASA29bK48REuc6HzC
E0NpITVNKhcb1Xqhut78vkHzNNogpKhhXLJZSL0yh5d688Ha30+kBD2eyQGrvdtY
2mpfHgkX3ExFKwvJZh/0sAxLZJugRHeSunUSSOBjMv0mRiq0qat/YhgWmWoynvQI
GMCqDNCHyv9x6NDMNf4oFL0mdUm9WQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJGC
5eBP5MScqxcYleDMoyFQb/u1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BOEEyODdDOEZCMzYxMUVGOThFOUZFQjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP8hMA0GCSqGSIb3DQEBCwUA
A4IBAQB1yJna8TxY6RMhJscGnLfcoEXnteZeakzhXXioBeBcuUA+UbdrPVG2VnEy
vmivpOmNhkfuAlz+rDtsP4maHJZ4HcP3IWjvqebC1H1XcPjxmEGSoJt8j9Vxtplq
ZSPRJib10Z5zw9VMCSzCQBODxDaKlJvxynRDCxGSj9Cf8D2VWld0z00wSL1da0Qe
dS2rdQdHThOYYNveYNlhwDbnPzThfgJrIsLqMU/l/mUO/pajyAZddxwJh3WhFMqR
yBQKRv8rYs4H+yjG0yYciGAxx7QeTz8/9kcIgighkgApeK3jUf+Y98XITuVGB2Q9
JuXAjZw0kPwGlXA8TxMwAS08Qx1s
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:00 2025 by rpki-client