Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C52FA32CF5D111EFBF56D499762E951A.roa
File: C52FA32CF5D111EFBF56D499762E951A.roa (raw, json)
Hash identifier: 7EGMZ715GZaWQQDOlpdmLi4+af2us/hEkdVmoSNUtbs=
Subject key identifier: 9D:48:8A:4B:33:CC:BC:98:D7:25:73:0C:C4:47:ED:2F:F3:B9:0F:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013DA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C52FA32CF5D111EFBF56D499762E951A.roa
Signing time: Fri 28 Feb 2025 12:44:38 +0000
ROA not before: Fri 28 Feb 2025 12:44:34 +0000
ROA not after: Sun 13 Apr 2025 12:44:34 +0000
asID: 138915
IP address blocks: 156.244.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81320 (0x13da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 12:44:34 2025 GMT
Not After : Apr 13 12:44:34 2025 GMT
Subject: CN=67c1afb6-4ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:36:f2:60:05:cb:28:9e:8f:6a:b7:0b:dc:
09:a9:87:83:f0:75:97:f5:f4:b0:78:3f:f6:3d:e0:
91:c7:49:43:47:be:b8:bc:5a:38:d3:09:a7:e2:9d:
c0:e6:b6:56:c9:c3:73:40:fa:1c:0c:66:88:d3:17:
6d:5f:a4:23:eb:b7:9a:bf:27:df:06:9d:0f:a8:c4:
0b:1a:46:9e:5f:54:6a:8e:31:3a:cb:3e:59:d5:cb:
eb:25:f7:a1:85:73:f1:cb:f2:c2:e4:01:cb:21:52:
19:b7:39:cd:a8:de:41:c7:99:4a:80:47:8d:1c:34:
a0:4e:f3:af:d3:7f:d2:7e:2c:11:7d:54:aa:13:b1:
a8:03:d3:3c:c3:10:88:32:c3:a8:fa:ec:6a:b3:97:
62:55:4f:13:98:c5:b7:6f:2e:70:19:56:31:23:80:
a2:69:c8:4d:2a:91:0e:a0:68:ed:a3:09:d6:50:9f:
7f:e9:dd:51:f4:df:b8:b7:45:b0:d7:ea:4b:dd:66:
b3:af:0b:ac:03:9b:27:7d:50:15:a2:c6:a4:7e:94:
01:8b:8c:14:2c:85:ce:ba:78:c2:3d:1e:9d:16:65:
6e:ec:75:4f:cf:76:9a:9d:29:57:14:db:8f:04:8c:
93:bc:26:4a:11:af:de:f7:f5:2a:a5:eb:e7:f3:34:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:8A:4B:33:CC:BC:98:D7:25:73:0C:C4:47:ED:2F:F3:B9:0F:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C52FA32CF5D111EFBF56D499762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.1.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c7:63:74:9c:26:75:05:5f:0a:6a:1b:64:55:bb:94:52:9e:
6b:2f:db:28:ba:26:ce:46:b6:53:26:7f:43:1c:a9:74:ca:83:
c5:e4:fd:d7:54:b5:32:78:ae:ef:3a:53:c3:8c:08:69:f5:ab:
d1:fb:f0:28:21:97:b7:d1:01:9e:c0:8a:93:31:3a:b0:d4:8b:
dc:9b:4b:98:a4:2d:84:e6:79:2e:ec:9a:e8:d9:3c:85:e6:cb:
03:8e:89:4a:96:78:ec:94:5f:05:c4:f5:d5:fb:5a:a0:7e:63:
58:91:2d:04:79:52:5d:ae:58:84:d5:28:10:bd:aa:36:6f:0d:
c0:58:a3:fd:2b:d0:f8:6c:74:f2:bb:2e:a0:a7:d1:53:99:0a:
be:2c:95:07:b9:e7:a8:55:f6:5b:08:f9:f4:79:e6:59:d2:f2:
d8:31:9d:41:2a:5a:f9:1e:ff:26:61:a5:1b:60:4a:a7:11:bf:
5f:fd:1a:31:0e:9e:69:9e:26:91:22:71:75:1f:a3:c5:30:80:
78:ec:85:45:72:8d:34:1f:12:f2:ef:24:35:39:dc:75:8c:b3:
5d:3a:8f:57:67:04:e3:93:4f:f1:bd:3e:d0:17:00:ed:0c:31:
57:5a:c1:67:3a:52:b9:11:35:11:7e:be:6e:73:3d:34:c3:95:
67:60:67:c5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAT2oMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI4MTI0NDM0WhcNMjUwNDEzMTI0NDM0WjAYMRYw
FAYDVQQDEw02N2MxYWZiNi00ZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqDo28mAFyyiej2q3C9wJqYeD8HWX9fSweD/2PeCRx0lDR764vFo40wmn
4p3A5rZWycNzQPocDGaI0xdtX6Qj67eavyffBp0PqMQLGkaeX1RqjjE6yz5Z1cvr
JfehhXPxy/LC5AHLIVIZtznNqN5Bx5lKgEeNHDSgTvOv03/SfiwRfVSqE7GoA9M8
wxCIMsOo+uxqs5diVU8TmMW3by5wGVYxI4CiachNKpEOoGjtownWUJ9/6d1R9N+4
t0Ww1+pL3WazrwusA5snfVAVosakfpQBi4wULIXOunjCPR6dFmVu7HVPz3aanSlX
FNuPBIyTvCZKEa/e9/Uqpevn8zTbeQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ1I
ikszzLyY1yVzDMRH7S/zuQ+EMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNTJGQTMyQ0Y1RDExMUVGQkY1NkQ0OTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQBMA0GCSqGSIb3DQEBCwUA
A4IBAQBWx2N0nCZ1BV8KahtkVbuUUp5rL9souibORrZTJn9DHKl0yoPF5P3XVLUy
eK7vOlPDjAhp9avR+/AoIZe30QGewIqTMTqw1Ivcm0uYpC2E5nku7Jro2TyF5ssD
jolKlnjslF8FxPXV+1qgfmNYkS0EeVJdrliE1SgQvao2bw3AWKP9K9D4bHTyuy6g
p9FTmQq+LJUHueeoVfZbCPn0eeZZ0vLYMZ1BKlr5Hv8mYaUbYEqnEb9f/RoxDp5p
niaRInF1H6PFMIB47IVFco00HxLy7yQ1Odx1jLNdOo9XZwTjk0/xvT7QFwDtDDFX
WsFnOlK5ETURfr5ucz00w5VnYGfF
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:05 2025 by rpki-client