Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B81DB85AF5E411EFB2710C9B762E951A.roa
File: B81DB85AF5E411EFB2710C9B762E951A.roa (raw, json)
Hash identifier: CrfJmDDxjA9jAttCgnlhChhJ7vyCd7G4XjG+CN0FqGA=
Subject key identifier: D1:1B:25:53:89:84:27:9E:68:DD:B1:DF:02:63:A5:9F:F1:72:30:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B81DB85AF5E411EFB2710C9B762E951A.roa
Signing time: Fri 28 Feb 2025 15:00:16 +0000
ROA not before: Fri 28 Feb 2025 15:00:12 +0000
ROA not after: Sun 13 Apr 2025 15:00:12 +0000
asID: 138915
IP address blocks: 156.244.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81535 (0x13e7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 15:00:12 2025 GMT
Not After : Apr 13 15:00:12 2025 GMT
Subject: CN=67c1cf80-a685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:b4:45:85:7f:0c:86:35:17:ac:6d:d0:8a:
b6:9e:c7:6b:98:28:76:f4:cb:e0:c2:e0:5e:0f:f3:
5f:34:72:08:f8:ea:15:88:15:65:1f:1e:4a:5b:c0:
9c:67:0c:42:a4:6e:13:24:15:39:34:b4:a3:f6:d7:
15:9a:e5:6a:6c:1a:43:73:a8:29:ea:2e:53:9e:ba:
80:ba:af:3a:44:77:4b:09:e7:d6:fb:dd:a5:d5:a9:
68:f9:91:4f:6b:48:95:79:ec:a4:ff:21:52:92:02:
5f:d3:53:6a:3e:df:8d:bb:b0:d3:f3:7c:58:8c:f6:
a0:ac:88:00:04:15:a0:0f:de:48:dd:d9:5c:77:0d:
06:32:1f:de:97:1e:3f:c6:98:5b:3e:f0:42:73:59:
93:30:47:c8:a9:d8:61:a4:8c:b7:d1:b2:f6:43:50:
e3:af:59:b8:45:fc:40:53:fd:67:9c:1d:3c:5c:20:
59:44:de:2c:c0:a7:bb:50:30:e3:1c:36:24:7c:ce:
70:47:c9:98:b2:c9:7e:d1:11:18:07:9b:69:1b:0b:
22:15:7d:ba:2d:4a:cc:b6:1d:29:31:1d:1b:a7:05:
32:c1:bf:2b:7b:3b:1a:1b:51:6f:df:c7:cc:6f:20:
11:2d:2c:ae:bf:dd:89:09:bf:19:a2:8f:80:66:a5:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1B:25:53:89:84:27:9E:68:DD:B1:DF:02:63:A5:9F:F1:72:30:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B81DB85AF5E411EFB2710C9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.15.0/24
Signature Algorithm: sha256WithRSAEncryption
23:4a:79:df:57:1a:4f:ec:70:2d:ee:09:6f:f8:46:ce:40:21:
52:fb:cb:a7:4c:b4:5e:b0:0e:c0:3f:99:eb:67:81:df:2a:92:
f0:f9:a4:24:14:aa:1d:73:e8:c4:94:ad:62:5e:79:36:b6:cc:
66:aa:e3:65:40:6b:6d:70:46:d0:d9:de:0b:b5:85:40:4a:c8:
dd:b4:e9:9b:2f:a7:14:3c:85:3e:0c:60:9a:b7:19:70:0f:6a:
52:ea:2d:97:a7:e1:d6:4e:7c:3e:4e:9c:d8:0b:0a:a6:4d:8e:
b3:7b:ac:e7:82:e7:ea:29:33:98:9d:6f:03:18:10:9a:0e:6f:
5b:25:b5:dd:4d:54:26:50:12:ab:5f:85:29:b3:47:ab:0f:3c:
d2:c9:7a:68:94:f7:03:d4:b0:05:f5:fa:c7:82:fc:bd:89:c0:
3f:5b:17:4f:f5:b3:a3:6a:db:53:f7:4e:b4:9e:29:1d:ce:0c:
a8:32:1f:1a:a0:d0:8c:f5:3b:16:73:07:6c:ee:04:4c:5e:a4:
a7:13:7c:b6:31:72:a8:c6:62:24:cb:ad:11:0c:53:cd:ce:28:
37:97:5e:c7:40:8e:aa:7f:d5:40:94:2b:17:0a:56:20:f8:71:
69:63:77:e4:d3:04:0f:3e:0a:f1:e9:ca:38:22:97:09:96:20:
41:12:59:81
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAT5/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI4MTUwMDEyWhcNMjUwNDEzMTUwMDEyWjAYMRYw
FAYDVQQDEw02N2MxY2Y4MC1hNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsLe0RYV/DIY1F6xt0Iq2nsdrmCh29MvgwuBeD/NfNHII+OoViBVlHx5K
W8CcZwxCpG4TJBU5NLSj9tcVmuVqbBpDc6gp6i5TnrqAuq86RHdLCefW+92l1alo
+ZFPa0iVeeyk/yFSkgJf01NqPt+Nu7DT83xYjPagrIgABBWgD95I3dlcdw0GMh/e
lx4/xphbPvBCc1mTMEfIqdhhpIy30bL2Q1Djr1m4RfxAU/1nnB08XCBZRN4swKe7
UDDjHDYkfM5wR8mYssl+0REYB5tpGwsiFX26LUrMth0pMR0bpwUywb8rezsaG1Fv
38fMbyARLSyuv92JCb8Zoo+AZqVzWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNEb
JVOJhCeeaN2x3wJjpZ/xcjAPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CODFEQjg1QUY1RTQxMUVGQjI3MTBDOUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQPMA0GCSqGSIb3DQEBCwUA
A4IBAQAjSnnfVxpP7HAt7glv+EbOQCFS+8unTLResA7AP5nrZ4HfKpLw+aQkFKod
c+jElK1iXnk2tsxmquNlQGttcEbQ2d4LtYVASsjdtOmbL6cUPIU+DGCatxlwD2pS
6i2Xp+HWTnw+TpzYCwqmTY6ze6zngufqKTOYnW8DGBCaDm9bJbXdTVQmUBKrX4Up
s0erDzzSyXpolPcD1LAF9frHgvy9icA/WxdP9bOjattT9060nikdzgyoMh8aoNCM
9TsWcwds7gRMXqSnE3y2MXKoxmIky60RDFPNzig3l17HQI6qf9VAlCsXClYg+HFp
Y3fk0wQPPgrx6co4IpcJliBBElmB
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:45 2025 by rpki-client