Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD2CCEA4F81411EF9349C180762E951A.roa
File: AD2CCEA4F81411EF9349C180762E951A.roa (raw, json)
Hash identifier: tVhJ3/zJcaXH5DwA4kgh9Sy9H5FZXbXFccFiHEZD7s0=
Subject key identifier: 5D:B5:95:6F:A0:B8:3F:0D:5A:9C:7E:7E:26:8E:A1:88:AC:A3:08:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014111
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD2CCEA4F81411EF9349C180762E951A.roa
Signing time: Mon 03 Mar 2025 09:48:36 +0000
ROA not before: Mon 03 Mar 2025 09:48:32 +0000
ROA not after: Sat 05 Apr 2025 09:48:32 +0000
asID: 269070
IP address blocks: 156.249.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82193 (0x14111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 09:48:32 2025 GMT
Not After : Apr 5 09:48:32 2025 GMT
Subject: CN=67c57af4-2f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:b2:89:48:55:35:d2:ea:f4:95:87:cf:49:
5f:e2:f6:8c:d8:ed:ab:1a:e3:6f:71:05:56:72:6a:
57:38:51:dd:a3:96:7d:24:41:74:43:03:e1:58:2f:
19:7e:3f:3c:cf:ea:91:0e:cf:dc:41:03:7b:53:49:
27:b7:68:d9:15:3b:73:6d:75:11:49:fe:80:f1:7d:
b2:ea:d3:e9:80:86:2d:94:94:e6:b0:50:85:47:e6:
6f:ab:4f:4e:42:31:92:1c:e3:88:7e:20:33:c9:e5:
cf:d9:ba:12:b8:d2:fa:bc:de:ff:91:29:df:0c:fe:
6a:9e:70:fa:12:96:9f:c7:db:75:3a:59:67:c1:33:
5f:26:8e:e3:aa:a4:b1:17:30:50:b1:b7:8e:e5:e3:
a5:b7:77:c3:98:24:0e:79:6d:0e:de:c6:b0:f9:6e:
7a:9b:b2:ed:ff:d0:21:17:37:16:32:e0:8f:97:91:
e1:e8:00:3d:7b:74:cf:78:2b:f8:5c:19:f0:9e:dd:
b8:89:a0:b2:a7:0d:6a:85:bf:5a:98:d2:13:cd:f6:
7b:a2:d8:7b:cf:a8:af:12:3a:cd:10:9d:f6:74:26:
b3:79:c9:f6:63:2e:92:d1:17:b0:d6:77:99:88:08:
00:26:a8:21:7b:5e:25:db:8f:68:92:2e:88:02:34:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:95:6F:A0:B8:3F:0D:5A:9C:7E:7E:26:8E:A1:88:AC:A3:08:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD2CCEA4F81411EF9349C180762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.67.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ae:04:9a:06:ed:c1:ba:8f:ac:4e:bc:c7:93:b4:36:82:7d:
2e:91:55:4e:f1:b8:0b:79:4b:e2:de:57:2f:06:fa:a1:18:d5:
79:6e:a4:01:20:60:a4:5d:28:14:b2:86:56:28:44:66:51:fb:
79:20:e4:d0:4c:42:e8:74:78:35:55:14:ce:95:53:23:83:b1:
96:27:ac:46:8d:fe:a4:96:84:ef:db:12:2c:fb:df:41:dc:86:
2b:25:c4:a4:6f:7d:be:0a:67:fc:34:3e:41:d7:3c:d0:31:c7:
b4:31:7a:e9:b5:fe:2e:ed:b4:57:d0:1d:b4:82:93:66:56:f2:
6c:d7:1d:74:5b:8c:a1:da:95:c7:9b:1e:6e:17:d5:74:97:87:
a0:9a:10:c9:32:6f:5d:3c:1a:fe:c0:ca:7e:c8:ea:d4:ff:1d:
c5:05:cf:3e:b7:44:7c:c4:19:53:08:9c:fc:90:88:96:d4:47:
50:b4:35:21:61:19:14:1d:0f:11:30:de:d1:87:79:7b:28:34:
10:bd:5c:e1:38:1d:c2:a2:77:7c:6a:3b:04:59:b5:f4:52:51:
64:b0:68:5b:f8:ad:b8:db:9d:6c:65:14:5a:3a:e9:04:33:7e:
98:28:89:53:ba:a4:30:98:32:b2:c3:99:31:07:da:46:62:33:
76:6e:ac:eb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUERMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzAzMDk0ODMyWhcNMjUwNDA1MDk0ODMyWjAYMRYw
FAYDVQQDEw02N2M1N2FmNC0yZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyjWyiUhVNdLq9JWHz0lf4vaM2O2rGuNvcQVWcmpXOFHdo5Z9JEF0QwPh
WC8Zfj88z+qRDs/cQQN7U0knt2jZFTtzbXURSf6A8X2y6tPpgIYtlJTmsFCFR+Zv
q09OQjGSHOOIfiAzyeXP2boSuNL6vN7/kSnfDP5qnnD6Epafx9t1OllnwTNfJo7j
qqSxFzBQsbeO5eOlt3fDmCQOeW0O3saw+W56m7Lt/9AhFzcWMuCPl5Hh6AA9e3TP
eCv4XBnwnt24iaCypw1qhb9amNITzfZ7oth7z6ivEjrNEJ32dCazecn2Yy6S0Rew
1neZiAgAJqghe14l249oki6IAjTMQQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF21
lW+guD8NWpx+fiaOoYisowiZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRDJDQ0VBNEY4MTQxMUVGOTM0OUMxODA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPlDMA0GCSqGSIb3DQEBCwUA
A4IBAQCxrgSaBu3Buo+sTrzHk7Q2gn0ukVVO8bgLeUvi3lcvBvqhGNV5bqQBIGCk
XSgUsoZWKERmUft5IOTQTELodHg1VRTOlVMjg7GWJ6xGjf6kloTv2xIs+99B3IYr
JcSkb32+Cmf8ND5B1zzQMce0MXrptf4u7bRX0B20gpNmVvJs1x10W4yh2pXHmx5u
F9V0l4egmhDJMm9dPBr+wMp+yOrU/x3FBc8+t0R8xBlTCJz8kIiW1EdQtDUhYRkU
HQ8RMN7Rh3l7KDQQvVzhOB3Cond8ajsEWbX0UlFksGhb+K24251sZRRaOukEM36Y
KIlTuqQwmDKyw5kxB9pGYjN2bqzr
-----END CERTIFICATE-----
Generated at Fri Apr 11 18:20:47 2025 by rpki-client