Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C95A78BEE06E11EFB50081A9762E951A.roa
File: C95A78BEE06E11EFB50081A9762E951A.roa (raw, json)
Hash identifier: gfOVWr331+ZsE8LeIVStvVOZwe8+y/RZzdqijLTNCK4=
Subject key identifier: 7F:F5:0F:23:B7:B5:ED:62:9D:20:E6:7D:4B:8A:18:6F:75:BB:04:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01187F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C95A78BEE06E11EFB50081A9762E951A.roa
Signing time: Sat 01 Feb 2025 07:33:10 +0000
ROA not before: Sat 01 Feb 2025 07:33:06 +0000
ROA not after: Thu 01 May 2025 07:33:06 +0000
asID: 328608
IP address blocks: 156.244.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71807 (0x1187f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 1 07:33:06 2025 GMT
Not After : May 1 07:33:06 2025 GMT
Subject: CN=679dce36-e144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:be:ef:0d:32:03:57:2f:f3:22:dc:96:8a:
e0:61:53:b3:15:b4:4c:f8:79:6d:23:ac:5d:52:02:
0f:be:5c:b4:86:f8:90:3a:5a:dd:49:8e:74:07:a5:
90:b1:70:2b:bc:20:52:ba:fd:9d:e4:4d:7a:8a:de:
81:44:35:cc:aa:d5:93:4f:70:b6:3b:ae:a6:6a:d6:
52:ed:04:f7:75:3f:5c:41:4e:1e:83:55:da:3e:4a:
8f:aa:1f:cc:80:c4:86:96:40:89:46:23:2b:df:95:
d4:21:3d:88:34:c6:54:78:66:9c:6d:cf:0a:5a:f0:
cd:3f:24:79:aa:b8:cd:55:c3:1f:5f:07:3f:3a:2d:
ef:74:87:fe:a9:e1:54:b8:9a:a1:2a:14:cd:2b:79:
3d:45:0e:ed:90:68:65:da:b3:fc:52:e3:21:a4:6f:
17:41:2c:77:5b:52:c0:85:f0:30:88:1a:c7:bb:5a:
bc:d7:ff:89:fe:4c:5f:ad:a6:20:70:2f:79:1b:67:
f5:8b:b7:d0:15:50:47:85:4e:8f:f1:0d:b1:bf:4e:
0e:e1:e6:73:9a:34:fe:9c:28:9b:8b:ae:75:01:9d:
c7:18:24:a1:e7:08:ea:93:0b:55:f9:b1:74:6a:a2:
23:1c:7c:ab:02:0f:4d:99:7f:fc:3c:f5:b2:4b:6c:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F5:0F:23:B7:B5:ED:62:9D:20:E6:7D:4B:8A:18:6F:75:BB:04:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C95A78BEE06E11EFB50081A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.204.0/22
Signature Algorithm: sha256WithRSAEncryption
64:b1:fa:7f:00:b6:33:0e:64:6f:22:a9:c0:c2:e8:5b:f8:13:
4d:4c:5e:f8:3d:f1:56:6d:d1:8d:ce:56:73:94:dc:c5:34:5a:
82:ff:60:28:0b:8c:b5:a4:bd:e8:b2:f6:50:15:8d:30:7a:f2:
69:ea:cf:e3:16:14:6a:3a:bc:6e:cd:ef:2c:8d:22:02:82:06:
34:22:6b:55:94:8e:dc:3b:dd:a0:a9:8b:f1:d7:c3:f0:50:3c:
16:7f:10:3b:c0:a2:17:5d:04:44:c4:fa:e6:d8:cc:12:f8:6d:
fa:90:0c:29:75:6b:42:7a:36:49:a1:ac:1e:35:9f:56:65:de:
a5:ec:65:c5:6c:3e:8a:96:01:cc:3d:14:14:0d:e9:e3:7a:5d:
2b:1f:1a:49:fc:73:f9:fd:b8:0e:a6:73:83:6d:d5:ab:af:74:
cd:af:4c:89:2b:12:84:fc:f4:71:fc:8e:32:a5:ef:fb:c3:73:
f5:a5:46:24:53:e0:66:05:82:45:48:71:e0:5f:b7:29:9b:a3:
c5:24:64:ed:c8:e7:d8:db:fb:7e:fe:db:57:58:e3:c1:1b:59:
45:7f:f1:f9:70:c0:9b:1e:88:b2:9f:ed:d4:3d:07:e0:db:da:
e1:63:b1:74:2a:2a:00:3d:af:c8:6b:02:c2:88:ed:88:b0:85:
bb:09:29:70
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARh/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjAxMDczMzA2WhcNMjUwNTAxMDczMzA2WjAYMRYw
FAYDVQQDEw02NzlkY2UzNi1lMTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn9S+7w0yA1cv8yLclorgYVOzFbRM+HltI6xdUgIPvly0hviQOlrdSY50
B6WQsXArvCBSuv2d5E16it6BRDXMqtWTT3C2O66matZS7QT3dT9cQU4eg1XaPkqP
qh/MgMSGlkCJRiMr35XUIT2INMZUeGacbc8KWvDNPyR5qrjNVcMfXwc/Oi3vdIf+
qeFUuJqhKhTNK3k9RQ7tkGhl2rP8UuMhpG8XQSx3W1LAhfAwiBrHu1q81/+J/kxf
raYgcC95G2f1i7fQFVBHhU6P8Q2xv04O4eZzmjT+nCibi651AZ3HGCSh5wjqkwtV
+bF0aqIjHHyrAg9NmX/8PPWyS2wy0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH/1
DyO3te1inSDmfUuKGG91uwSQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DOTVBNzhCRUUwNkUxMUVGQjUwMDgxQTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPTMMA0GCSqGSIb3DQEBCwUA
A4IBAQBksfp/ALYzDmRvIqnAwuhb+BNNTF74PfFWbdGNzlZzlNzFNFqC/2AoC4y1
pL3osvZQFY0wevJp6s/jFhRqOrxuze8sjSICggY0ImtVlI7cO92gqYvx18PwUDwW
fxA7wKIXXQRExPrm2MwS+G36kAwpdWtCejZJoaweNZ9WZd6l7GXFbD6KlgHMPRQU
Denjel0rHxpJ/HP5/bgOpnODbdWrr3TNr0yJKxKE/PRx/I4ype/7w3P1pUYkU+Bm
BYJFSHHgX7cpm6PFJGTtyOfY2/t+/ttXWOPBG1lFf/H5cMCbHoiyn+3UPQfg29rh
Y7F0KioAPa/IawLCiO2IsIW7CSlw
-----END CERTIFICATE-----
Generated at Fri Apr 11 19:47:07 2025 by rpki-client