Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB50148CF42C11EFAA5CBFBB762E951A.roa
File: BB50148CF42C11EFAA5CBFBB762E951A.roa (raw, json)
Hash identifier: jK+sa8LjrIEjr09GPf8tars0XovaA7w1h8UbN2SxI9o=
Subject key identifier: 9A:8B:BB:F6:E4:E5:73:86:B0:2B:B9:2F:5E:86:59:F8:52:0C:31:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013116
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB50148CF42C11EFAA5CBFBB762E951A.roa
Signing time: Wed 26 Feb 2025 10:30:43 +0000
ROA not before: Wed 26 Feb 2025 10:30:39 +0000
ROA not after: Thu 19 Feb 2026 10:30:39 +0000
asID: 328608
IP address blocks: 156.255.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78102 (0x13116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:30:39 2025 GMT
Not After : Feb 19 10:30:39 2026 GMT
Subject: CN=67beed53-3bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:3c:48:84:6e:78:b0:66:e1:63:e1:25:d8:
9c:ec:13:d1:e1:2f:0c:8e:e3:5a:a9:ae:9d:ec:93:
43:37:ed:f0:7f:13:01:a6:6d:55:a6:4a:65:35:16:
83:fc:59:63:32:41:77:d7:d0:d4:77:28:dd:b0:a3:
7e:e9:62:d6:56:28:81:90:b6:be:80:58:54:c1:bb:
b0:f8:e0:b0:b0:e5:c0:40:3b:1e:7c:50:0c:6d:0b:
25:20:63:f3:8f:0a:f1:46:bf:6a:cb:ab:fa:3d:2a:
79:88:1d:db:da:ca:f9:19:63:29:bd:56:7e:a5:a3:
07:44:5a:0e:ea:22:b1:dc:2a:80:9a:15:12:21:17:
5b:00:53:c6:2b:d1:d0:d6:ae:87:c6:74:a2:35:38:
31:e3:dc:f3:99:8c:e6:a6:d9:2b:27:4c:7b:21:e7:
8b:81:3a:ca:98:ce:d7:dd:02:27:74:65:ee:f3:ac:
78:86:3f:4a:a1:e0:af:09:f7:ee:ff:97:e0:34:f8:
76:1f:af:52:aa:28:34:4d:06:45:4b:02:af:7b:44:
59:63:98:09:0f:bd:68:1d:12:f9:cc:3f:22:59:55:
a6:cc:91:f9:51:04:7f:f6:23:31:36:e5:0a:e3:59:
4b:f0:2d:d4:db:82:4d:02:80:dc:3d:78:e6:a8:7e:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8B:BB:F6:E4:E5:73:86:B0:2B:B9:2F:5E:86:59:F8:52:0C:31:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB50148CF42C11EFAA5CBFBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a9:cf:e3:d5:ca:af:a0:de:ec:a7:fb:2d:f6:15:0b:4f:bd:
44:3a:45:ad:f2:2b:6c:fd:5e:27:3d:51:40:b5:12:38:b2:11:
70:5f:23:46:b1:e3:39:c5:78:70:0f:49:d1:c0:07:14:90:cd:
35:47:39:48:92:74:43:f1:35:78:1d:c0:2d:a9:b8:1e:e1:04:
25:67:22:f7:25:f7:0f:d0:f6:0e:af:20:32:87:e8:85:b2:d2:
fe:c1:ec:84:06:2b:46:ba:7f:3e:c0:2d:76:e9:35:ce:3a:bc:
80:ae:6e:25:7c:10:ba:d9:76:c5:0a:e0:9b:1b:74:64:ee:e6:
ee:a2:bf:bf:4f:6a:18:9c:69:1b:fe:ef:4b:63:6c:95:5e:06:
37:bc:15:6f:aa:bc:8a:69:8a:2a:18:fd:ee:6f:7f:85:4a:97:
9c:56:bf:64:c8:27:c5:7a:c8:20:b5:ec:a2:f3:4d:f3:a0:9a:
9f:da:36:c8:85:38:7e:e9:79:01:0d:96:ad:59:b4:51:ab:3b:
26:5c:1b:3d:26:07:a9:ad:b0:9e:e1:7d:d6:c9:d9:1f:e2:4e:
ed:55:cc:ba:4e:2f:56:5d:10:bf:81:69:78:a2:ff:54:c9:e2:
dc:cc:da:fe:20:4b:0c:62:4c:e5:cd:06:46:bf:dc:fb:19:c2:
5b:1a:26:23
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATEWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTAzMDM5WhcNMjYwMjE5MTAzMDM5WjAYMRYw
FAYDVQQDEw02N2JlZWQ1My0zYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyNw8SIRueLBm4WPhJdic7BPR4S8MjuNaqa6d7JNDN+3wfxMBpm1Vpkpl
NRaD/FljMkF319DUdyjdsKN+6WLWViiBkLa+gFhUwbuw+OCwsOXAQDsefFAMbQsl
IGPzjwrxRr9qy6v6PSp5iB3b2sr5GWMpvVZ+paMHRFoO6iKx3CqAmhUSIRdbAFPG
K9HQ1q6HxnSiNTgx49zzmYzmptkrJ0x7IeeLgTrKmM7X3QIndGXu86x4hj9KoeCv
Cffu/5fgNPh2H69Sqig0TQZFSwKve0RZY5gJD71oHRL5zD8iWVWmzJH5UQR/9iMx
NuUK41lL8C3U24JNAoDcPXjmqH5FqQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJqL
u/bk5XOGsCu5L16GWfhSDDGyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQjUwMTQ4Q0Y0MkMxMUVGQUE1Q0JGQkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP9hMA0GCSqGSIb3DQEBCwUA
A4IBAQCfqc/j1cqvoN7sp/st9hULT71EOkWt8its/V4nPVFAtRI4shFwXyNGseM5
xXhwD0nRwAcUkM01RzlIknRD8TV4HcAtqbge4QQlZyL3JfcP0PYOryAyh+iFstL+
weyEBitGun8+wC126TXOOryArm4lfBC62XbFCuCbG3Rk7ubuor+/T2oYnGkb/u9L
Y2yVXgY3vBVvqryKaYoqGP3ub3+FSpecVr9kyCfFesggteyi803zoJqf2jbIhTh+
6XkBDZatWbRRqzsmXBs9JgeprbCe4X3Wydkf4k7tVcy6Ti9WXRC/gWl4ov9UyeLc
zNr+IEsMYkzlzQZGv9z7GcJbGiYj
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:04 2025 by rpki-client