Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C770DEB2E9B511EF9C5E9FAC762E951A.roa
File: C770DEB2E9B511EF9C5E9FAC762E951A.roa (raw, json)
Hash identifier: nwqBu3znNlwj28t+IvG0vTXKMtNK5rlI4IPmpVeWSlM=
Subject key identifier: B6:FE:AD:F1:74:2D:2D:A0:5C:B5:87:89:79:41:68:E8:17:4F:89:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0121AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C770DEB2E9B511EF9C5E9FAC762E951A.roa
Signing time: Thu 13 Feb 2025 02:54:02 +0000
ROA not before: Thu 13 Feb 2025 02:53:58 +0000
ROA not after: Wed 31 Dec 2025 02:53:58 +0000
asID: 17561
IP address blocks: 156.236.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74158 (0x121ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 02:53:58 2025 GMT
Not After : Dec 31 02:53:58 2025 GMT
Subject: CN=67ad5ec9-a5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:a8:39:02:cb:e2:d6:da:9a:cd:9f:b2:5f:
1e:d2:eb:79:f9:7e:40:c1:f2:be:5b:17:27:e0:e7:
56:13:9b:95:ab:d6:75:64:f7:36:22:2d:01:61:97:
a9:e5:bd:a3:c8:e4:f0:2d:33:bf:8a:3c:72:28:66:
f7:a8:6d:f9:ed:0a:99:de:ff:5f:a2:8f:ab:71:cf:
02:48:1e:13:87:3d:bf:d6:1d:03:54:3c:c2:91:f1:
49:c7:aa:83:06:2c:19:cd:cf:72:37:82:43:a2:f5:
4c:d6:36:aa:f9:d2:75:c8:e7:b8:ed:22:83:fa:2e:
25:0d:47:2a:63:c9:3c:95:f0:55:97:1e:bb:5b:d0:
aa:fa:a8:0b:1d:f8:33:70:44:4a:0f:00:01:fd:6c:
c7:b7:ae:71:de:2a:ee:64:b1:68:cc:6d:80:21:cd:
a7:6f:e9:fb:0c:a2:a0:d7:b3:7c:de:5b:2e:e5:db:
51:f2:82:62:39:5a:8f:ac:18:b6:bf:24:9b:fc:ea:
2d:6d:78:97:08:da:d0:c5:ff:62:b2:52:ae:71:bf:
2b:bd:cc:64:13:50:de:c7:21:f6:e3:b0:25:8d:eb:
2e:b6:17:f8:e6:b4:0d:f1:c7:4b:39:b0:d9:0f:fc:
72:fd:d1:d6:1b:c8:73:e3:7a:aa:b4:68:80:c9:d2:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:AD:F1:74:2D:2D:A0:5C:B5:87:89:79:41:68:E8:17:4F:89:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C770DEB2E9B511EF9C5E9FAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.40.0/24
Signature Algorithm: sha256WithRSAEncryption
13:69:70:20:99:7c:1c:cd:5e:f2:cc:f8:3a:d2:df:43:30:c4:
54:4f:fc:3e:db:65:3c:4f:00:ca:30:a9:7d:73:21:67:13:5b:
67:3d:68:b1:48:51:6b:fe:83:71:33:29:71:2f:75:bb:9c:4d:
2b:d8:da:69:54:86:3d:ff:6d:ac:08:29:6c:ae:ca:b9:f1:fe:
20:95:c1:87:f8:e5:d3:8d:0f:9d:80:8e:15:f1:0b:08:4c:22:
1b:40:fe:74:5c:26:bf:82:2a:75:54:06:47:a9:ce:f1:61:e6:
9c:97:59:0a:85:43:45:5f:e4:16:a0:f0:50:46:77:0f:e9:88:
93:ed:a3:07:85:57:da:47:80:21:a6:33:06:4a:72:29:52:f0:
5b:de:09:47:bf:e5:af:62:83:6f:44:86:bc:e1:86:2d:8b:82:
d0:87:87:f0:c5:ba:b6:4d:84:53:c7:52:88:19:f2:04:90:04:
29:e8:db:35:72:ab:34:a4:de:1d:83:85:99:c0:d2:79:fd:f2:
ba:8a:8a:35:9b:00:0c:fa:88:3e:67:d0:04:2d:e3:4f:ab:0c:
b7:47:cb:59:4a:04:ee:81:62:f0:91:76:e3:ce:3c:d5:30:1e:
3f:73:fa:f7:82:d9:89:24:c9:7d:b0:15:0d:59:e7:df:83:f7:
ac:b0:d1:4b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASGuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjEzMDI1MzU4WhcNMjUxMjMxMDI1MzU4WjAYMRYw
FAYDVQQDEw02N2FkNWVjOS1hNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzkioOQLL4tbams2fsl8e0ut5+X5AwfK+Wxcn4OdWE5uVq9Z1ZPc2Ii0B
YZep5b2jyOTwLTO/ijxyKGb3qG357QqZ3v9foo+rcc8CSB4Thz2/1h0DVDzCkfFJ
x6qDBiwZzc9yN4JDovVM1jaq+dJ1yOe47SKD+i4lDUcqY8k8lfBVlx67W9Cq+qgL
HfgzcERKDwAB/WzHt65x3iruZLFozG2AIc2nb+n7DKKg17N83lsu5dtR8oJiOVqP
rBi2vySb/OotbXiXCNrQxf9islKucb8rvcxkE1DexyH247Aljesuthf45rQN8cdL
ObDZD/xy/dHWG8hz43qqtGiAydIOTwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLb+
rfF0LS2gXLWHiXlBaOgXT4kFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNzcwREVCMkU5QjUxMUVGOUM1RTlGQUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOwoMA0GCSqGSIb3DQEBCwUA
A4IBAQATaXAgmXwczV7yzPg60t9DMMRUT/w+22U8TwDKMKl9cyFnE1tnPWixSFFr
/oNxMylxL3W7nE0r2NppVIY9/22sCClsrsq58f4glcGH+OXTjQ+dgI4V8QsITCIb
QP50XCa/gip1VAZHqc7xYeacl1kKhUNFX+QWoPBQRncP6YiT7aMHhVfaR4AhpjMG
SnIpUvBb3glHv+WvYoNvRIa84YYti4LQh4fwxbq2TYRTx1KIGfIEkAQp6Ns1cqs0
pN4dg4WZwNJ5/fK6ioo1mwAM+og+Z9AELeNPqwy3R8tZSgTugWLwkXbjzjzVMB4/
c/r3gtmJJMl9sBUNWeffg/essNFL
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:30 2025 by rpki-client