Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD718FCCF47611EF92540643762E951A.roa
File: AD718FCCF47611EF92540643762E951A.roa (raw, json)
Hash identifier: qqAxkiiJbF86GxZfVdnOItESBbvIHPR04XOyLzh+T28=
Subject key identifier: 14:0F:B8:9C:C3:52:BD:9C:33:72:4B:49:B9:EF:54:CD:C3:92:76:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD718FCCF47611EF92540643762E951A.roa
Signing time: Wed 26 Feb 2025 19:20:02 +0000
ROA not before: Wed 26 Feb 2025 19:19:59 +0000
ROA not after: Thu 19 Feb 2026 19:19:59 +0000
asID: 984
IP address blocks: 156.247.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79606 (0x136f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:19:59 2025 GMT
Not After : Feb 19 19:19:59 2026 GMT
Subject: CN=67bf6962-4775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:49:d1:2c:6a:7b:28:57:f0:03:2c:c0:d7:
77:c5:5e:2b:81:f1:fc:2f:71:3a:5d:5c:20:52:32:
bf:6d:52:b9:58:c7:d5:79:7e:d9:e3:19:92:24:d4:
36:08:7e:ed:9f:11:43:94:8f:18:54:42:34:91:03:
91:2e:8a:fc:b3:cd:24:62:d5:74:00:29:04:c5:db:
14:f4:b5:2e:f4:f8:5c:b3:ae:aa:24:e5:1e:48:57:
2d:e7:83:6f:ac:bd:c3:cf:de:39:d1:26:cd:05:08:
df:e7:ed:fd:7e:50:05:6b:78:b6:47:22:c3:09:81:
4d:a1:a3:a4:51:c3:de:f4:b7:d6:62:0d:62:ee:b6:
8f:ea:fd:c6:5e:9d:03:34:d6:94:7e:58:8f:17:1c:
10:6f:11:22:ae:ab:a6:92:71:d5:68:75:25:1e:81:
96:55:04:52:f2:56:9d:6b:fb:d7:55:7a:4b:b2:bd:
80:99:98:df:79:63:81:64:13:fc:ce:95:1d:fb:39:
3b:79:dc:fe:07:4a:90:c8:ac:97:88:2b:18:18:a8:
43:96:bd:d3:97:d6:39:a7:9a:c8:91:3c:e1:10:b3:
80:a8:d5:5e:54:05:39:fd:c4:87:5d:bd:19:2d:b5:
ef:ef:50:9c:dc:8d:be:58:d4:2b:62:c2:0b:ce:bc:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:B8:9C:C3:52:BD:9C:33:72:4B:49:B9:EF:54:CD:C3:92:76:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD718FCCF47611EF92540643762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.25.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a9:c6:40:98:6b:73:38:8f:b7:82:d4:a0:cb:b8:62:2f:18:
1d:16:f4:61:6c:6b:4b:df:fe:5d:1e:29:d5:af:04:9f:4b:57:
71:82:01:61:e7:2e:ba:d0:3a:0c:ab:90:96:c7:a0:67:8c:2a:
6e:d7:6a:36:a7:10:1f:94:99:f2:ab:0f:87:0f:72:85:05:08:
59:b2:2d:bc:0b:5d:4c:9d:d3:48:65:63:65:15:83:f1:4f:c5:
4a:07:97:c8:bf:4a:c6:38:00:68:58:7d:be:e6:f8:3e:13:b1:
da:96:b9:87:80:f5:44:cc:66:33:8d:65:4b:06:4f:76:11:ea:
d2:96:7f:e9:55:c7:78:dd:78:c3:7c:e3:06:d3:f3:08:69:7a:
3e:59:da:57:3e:96:e8:af:d2:0c:12:39:cd:5c:2a:be:5a:77:
e3:af:70:36:31:75:ed:f8:df:fa:60:fb:dc:73:f5:1b:56:6d:
0b:a1:29:c2:68:10:ae:1b:2c:1c:c7:e4:3f:e6:8f:1d:36:68:
d8:dd:21:44:d1:72:64:16:ee:a7:a8:9c:0b:8e:21:eb:ca:09:
2e:b5:4e:a8:c8:af:ef:d6:c1:28:71:5c:38:eb:22:9c:b6:96:
12:d7:9b:c1:ed:13:00:ef:2e:24:52:cf:d3:d7:f2:7f:f7:53:
e5:ea:d2:0e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATb2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTkxOTU5WhcNMjYwMjE5MTkxOTU5WjAYMRYw
FAYDVQQDEw02N2JmNjk2Mi00Nzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0aNJ0SxqeyhX8AMswNd3xV4rgfH8L3E6XVwgUjK/bVK5WMfVeX7Z4xmS
JNQ2CH7tnxFDlI8YVEI0kQORLor8s80kYtV0ACkExdsU9LUu9Phcs66qJOUeSFct
54NvrL3Dz9450SbNBQjf5+39flAFa3i2RyLDCYFNoaOkUcPe9LfWYg1i7raP6v3G
Xp0DNNaUfliPFxwQbxEirqumknHVaHUlHoGWVQRS8lada/vXVXpLsr2AmZjfeWOB
ZBP8zpUd+zk7edz+B0qQyKyXiCsYGKhDlr3Tl9Y5p5rIkTzhELOAqNVeVAU5/cSH
Xb0ZLbXv71Cc3I2+WNQrYsILzryG3wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBQP
uJzDUr2cM3JLSbnvVM3DknYIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRDcxOEZDQ0Y0NzYxMUVGOTI1NDA2NDM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPcZMA0GCSqGSIb3DQEBCwUA
A4IBAQBCqcZAmGtzOI+3gtSgy7hiLxgdFvRhbGtL3/5dHinVrwSfS1dxggFh5y66
0DoMq5CWx6BnjCpu12o2pxAflJnyqw+HD3KFBQhZsi28C11MndNIZWNlFYPxT8VK
B5fIv0rGOABoWH2+5vg+E7HalrmHgPVEzGYzjWVLBk92EerSln/pVcd43XjDfOMG
0/MIaXo+WdpXPpbor9IMEjnNXCq+Wnfjr3A2MXXt+N/6YPvcc/UbVm0LoSnCaBCu
Gywcx+Q/5o8dNmjY3SFE0XJkFu6nqJwLjiHrygkutU6oyK/v1sEocVw46yKctpYS
15vB7RMA7y4kUs/T1/J/91Pl6tIO
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:09 2025 by rpki-client