Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C933EC78F43F11EFA315BB45762E951A.roa
File: C933EC78F43F11EFA315BB45762E951A.roa (raw, json)
Hash identifier: EIgK4lCksd6bkwnplKjFv0DkjAyk0DDbbAK1uAJasZo=
Subject key identifier: 74:63:7C:32:35:0C:A9:EF:42:FC:55:8D:A2:00:A5:F7:35:6C:FB:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0132B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C933EC78F43F11EFA315BB45762E951A.roa
Signing time: Wed 26 Feb 2025 12:47:07 +0000
ROA not before: Wed 26 Feb 2025 12:47:03 +0000
ROA not after: Thu 19 Feb 2026 12:47:03 +0000
asID: 984
IP address blocks: 156.231.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78516 (0x132b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:47:03 2025 GMT
Not After : Feb 19 12:47:03 2026 GMT
Subject: CN=67bf0d4b-56ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:8c:94:68:17:1c:83:f2:fc:6f:68:24:96:
0a:8f:8c:7b:75:22:c3:c7:21:ee:c2:3a:33:7c:2a:
95:87:30:c0:bb:61:5e:ab:e2:25:53:55:66:e0:f3:
68:84:15:cb:bd:13:d4:0c:4c:83:27:78:c1:ad:60:
dc:02:20:84:84:8b:36:18:51:b9:fc:89:5f:73:69:
83:4c:09:93:9e:ff:b6:99:a4:d3:4f:64:c2:e8:c3:
02:7d:63:de:d6:e7:93:a1:11:82:18:da:0c:81:c3:
e6:c0:94:d0:c3:3b:42:bc:53:5f:d2:ac:35:f4:28:
dc:fa:cf:ac:18:ff:88:e8:98:b9:1c:67:c6:c9:34:
a6:85:d4:68:5a:9f:87:63:a6:08:39:c9:b8:71:49:
2a:d1:f1:e4:43:5c:d5:1e:9d:8c:6a:ab:58:ee:d1:
91:86:49:2e:a7:05:86:af:16:5b:b9:9a:e2:a6:7b:
dd:e2:b0:b7:51:89:58:1f:f4:aa:07:2b:6c:9e:11:
10:fe:83:91:fe:da:5c:36:99:58:b8:70:2c:73:1a:
d8:0f:97:c7:6d:22:64:6f:f1:fa:1a:85:d5:91:f1:
9b:87:0e:8d:e7:3f:92:bd:39:cd:01:3d:0c:cf:1b:
c8:70:47:fe:b0:34:a2:b0:92:1b:02:cc:68:dc:f6:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:63:7C:32:35:0C:A9:EF:42:FC:55:8D:A2:00:A5:F7:35:6C:FB:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C933EC78F43F11EFA315BB45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.3.0/24
Signature Algorithm: sha256WithRSAEncryption
41:4e:c8:99:cf:b1:1f:66:c9:6e:2c:93:45:df:d5:28:bb:7b:
00:e8:52:ab:e2:49:28:f7:6a:6d:1f:55:16:da:43:21:91:d0:
ba:db:11:b6:69:c8:1e:38:94:59:3c:23:de:19:90:ad:55:91:
31:1b:7b:35:d6:79:13:0b:7a:43:b3:ce:6f:36:eb:05:3c:90:
46:43:66:9e:23:21:00:b8:be:fe:38:9e:4d:6a:4c:26:93:1e:
1f:f1:2f:0c:36:95:3e:30:4e:03:2f:45:2e:9c:b4:a3:53:8e:
07:69:eb:da:59:17:1e:95:ca:08:bf:36:f0:f4:8b:98:ef:0c:
44:5c:cb:92:76:d8:fd:da:fe:9e:b7:5e:3f:fb:9e:74:76:57:
c7:9e:7f:8d:76:c0:c9:8b:5a:e3:f9:e3:99:59:58:d9:7b:76:
19:c6:92:f7:76:cc:6f:39:9b:f9:97:8e:a1:bf:51:7e:56:0f:
29:93:d0:32:c2:22:44:4e:94:f8:1f:ef:35:ee:3a:2b:a8:8e:
87:96:c6:af:99:c2:dd:35:37:12:6f:c6:9e:d8:ce:fb:5a:56:
8d:28:5c:4d:4a:e5:d4:bd:7b:99:27:b6:5e:53:3f:c0:18:7c:
9e:b6:a3:21:90:c1:9d:9e:50:88:55:0e:ae:f5:6b:2d:eb:fd:
e1:8a:10:c9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATK0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTI0NzAzWhcNMjYwMjE5MTI0NzAzWjAYMRYw
FAYDVQQDEw02N2JmMGQ0Yi01NmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs+mMlGgXHIPy/G9oJJYKj4x7dSLDxyHuwjozfCqVhzDAu2Feq+IlU1Vm
4PNohBXLvRPUDEyDJ3jBrWDcAiCEhIs2GFG5/Ilfc2mDTAmTnv+2maTTT2TC6MMC
fWPe1ueToRGCGNoMgcPmwJTQwztCvFNf0qw19Cjc+s+sGP+I6Ji5HGfGyTSmhdRo
Wp+HY6YIOcm4cUkq0fHkQ1zVHp2MaqtY7tGRhkkupwWGrxZbuZripnvd4rC3UYlY
H/SqBytsnhEQ/oOR/tpcNplYuHAscxrYD5fHbSJkb/H6GoXVkfGbhw6N5z+SvTnN
AT0MzxvIcEf+sDSisJIbAsxo3PYSFwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHRj
fDI1DKnvQvxVjaIApfc1bPu4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DOTMzRUM3OEY0M0YxMUVGQTMxNUJCNDU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOcDMA0GCSqGSIb3DQEBCwUA
A4IBAQBBTsiZz7EfZsluLJNF39Uou3sA6FKr4kko92ptH1UW2kMhkdC62xG2acge
OJRZPCPeGZCtVZExG3s11nkTC3pDs85vNusFPJBGQ2aeIyEAuL7+OJ5Nakwmkx4f
8S8MNpU+ME4DL0UunLSjU44HaevaWRcelcoIvzbw9IuY7wxEXMuSdtj92v6et14/
+550dlfHnn+NdsDJi1rj+eOZWVjZe3YZxpL3dsxvOZv5l46hv1F+Vg8pk9AywiJE
TpT4H+817jorqI6HlsavmcLdNTcSb8ae2M77WlaNKFxNSuXUvXuZJ7ZeUz/AGHye
tqMhkMGdnlCIVQ6u9Wst6/3hihDJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:51 2025 by rpki-client