Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB6518C2F46A11EFA9E6C06F762E951A.roa
File: AB6518C2F46A11EFA9E6C06F762E951A.roa (raw, json)
Hash identifier: 2gr33htkHzX08WXl9a5uU0iK6WIsTTgpY+ZiNfaTNx8=
Subject key identifier: C2:7B:65:B0:C1:45:97:B3:8E:AA:3B:F8:F1:41:3D:2D:7E:8D:FB:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB6518C2F46A11EFA9E6C06F762E951A.roa
Signing time: Wed 26 Feb 2025 17:54:05 +0000
ROA not before: Wed 26 Feb 2025 17:54:01 +0000
ROA not after: Sat 19 Feb 2028 17:54:01 +0000
asID: 17561
IP address blocks: 156.233.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79348 (0x135f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:54:01 2025 GMT
Not After : Feb 19 17:54:01 2028 GMT
Subject: CN=67bf553d-37c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:4c:24:84:cf:14:25:26:e2:d1:bb:50:ca:
8d:07:de:0d:d1:0d:2d:70:87:a0:77:3b:c0:cd:01:
ec:ca:18:fc:51:37:13:4b:7d:c0:c2:08:a5:bb:96:
3f:d5:9f:eb:d8:93:ee:c9:7b:a7:60:8c:4b:d6:40:
71:84:d3:e7:58:11:fb:d5:fc:fc:16:b0:75:92:a0:
27:3a:ca:33:fb:42:a3:37:29:16:cb:9c:b1:43:78:
14:56:03:79:cb:ed:c8:d4:9e:91:c9:c4:70:71:1d:
39:28:86:f2:6a:12:4b:59:3b:11:86:61:f6:6e:d5:
34:2d:da:b9:2f:5c:1a:85:6d:67:6d:cd:67:e3:4a:
b5:a4:ad:84:b8:cd:81:cb:69:3d:7e:02:d8:f9:8d:
4c:88:c7:5a:82:5f:4c:5a:87:28:29:e7:35:19:80:
5e:1b:dc:c1:a2:b9:59:6d:74:a8:60:30:46:7f:84:
8b:8e:55:58:e5:f9:ff:1c:ba:91:74:23:ea:ae:08:
1a:ac:1a:8c:5c:f6:fe:09:4c:5a:f2:a7:26:ff:7e:
cb:ab:ee:fa:ba:e8:07:4d:e0:71:c5:cf:cd:3a:a3:
83:d6:45:cd:26:33:97:7c:a2:ae:19:b1:5d:7c:30:
e6:91:c2:72:0e:93:90:49:e0:06:da:32:8d:2e:b2:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:65:B0:C1:45:97:B3:8E:AA:3B:F8:F1:41:3D:2D:7E:8D:FB:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB6518C2F46A11EFA9E6C06F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.106.0/24
Signature Algorithm: sha256WithRSAEncryption
af:24:96:b8:84:8e:b8:3b:a8:0d:01:9a:11:00:ae:79:37:5f:
5a:14:8c:8e:33:24:70:e7:82:4a:0a:31:2a:ac:22:ab:2c:99:
97:82:21:6a:24:c7:bd:10:6c:5e:e2:e9:78:73:4d:0d:a4:76:
bf:27:20:bc:18:a3:2c:bf:4e:5f:1d:0d:8e:a1:26:06:82:b7:
79:d2:52:c8:82:5b:de:eb:34:90:b6:12:a3:ce:36:f5:78:a1:
b1:91:11:60:61:b6:f4:0e:db:cf:06:53:06:05:b2:34:1a:c5:
01:65:ad:e5:67:94:55:51:f3:df:0b:49:dc:53:65:9b:3d:ad:
69:56:6e:5f:17:4d:72:2c:0b:75:00:2d:b0:63:db:57:17:13:
be:34:b4:a4:a8:86:02:9c:d0:d2:d4:f6:c3:2b:f0:34:af:9c:
43:76:a0:cc:c4:37:51:1c:de:c8:e1:90:94:70:82:32:e6:83:
11:63:e0:36:35:47:8f:7b:8d:0d:24:5a:9f:62:a6:bb:06:9f:
39:b6:4e:93:8b:4e:6d:8e:dc:e7:1b:b6:6d:85:94:cc:d7:54:
53:75:de:2e:2b:38:fb:c8:ad:ce:5f:f8:94:77:ec:70:5e:ad:
ba:17:8f:63:c1:d5:67:31:38:55:84:ed:88:d1:8c:c0:4f:75:
96:a7:2e:22
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATX0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTc1NDAxWhcNMjgwMjE5MTc1NDAxWjAYMRYw
FAYDVQQDEw02N2JmNTUzZC0zN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4T1MJITPFCUm4tG7UMqNB94N0Q0tcIegdzvAzQHsyhj8UTcTS33Awgil
u5Y/1Z/r2JPuyXunYIxL1kBxhNPnWBH71fz8FrB1kqAnOsoz+0KjNykWy5yxQ3gU
VgN5y+3I1J6RycRwcR05KIbyahJLWTsRhmH2btU0Ldq5L1wahW1nbc1n40q1pK2E
uM2By2k9fgLY+Y1MiMdagl9MWocoKec1GYBeG9zBorlZbXSoYDBGf4SLjlVY5fn/
HLqRdCPqrggarBqMXPb+CUxa8qcm/37Lq+76uugHTeBxxc/NOqOD1kXNJjOXfKKu
GbFdfDDmkcJyDpOQSeAG2jKNLrK6dQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMJ7
ZbDBRZezjqo7+PFBPS1+jfsqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQjY1MThDMkY0NkExMUVGQTlFNkMwNkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOlqMA0GCSqGSIb3DQEBCwUA
A4IBAQCvJJa4hI64O6gNAZoRAK55N19aFIyOMyRw54JKCjEqrCKrLJmXgiFqJMe9
EGxe4ul4c00NpHa/JyC8GKMsv05fHQ2OoSYGgrd50lLIglve6zSQthKjzjb1eKGx
kRFgYbb0DtvPBlMGBbI0GsUBZa3lZ5RVUfPfC0ncU2WbPa1pVm5fF01yLAt1AC2w
Y9tXFxO+NLSkqIYCnNDS1PbDK/A0r5xDdqDMxDdRHN7I4ZCUcIIy5oMRY+A2NUeP
e40NJFqfYqa7Bp85tk6Ti05tjtznG7ZthZTM11RTdd4uKzj7yK3OX/iUd+xwXq26
F49jwdVnMThVhO2I0YzAT3WWpy4i
-----END CERTIFICATE-----
Generated at Fri Apr 11 03:13:07 2025 by rpki-client