Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCCD7EA80B8C11F0B8F72F44762E951A.roa
File: CCCD7EA80B8C11F0B8F72F44762E951A.roa (raw, json)
Hash identifier: pRw9cLQBwbA+uCW89l/UzLuQuRObL4Rn5fJqUTSiVeU=
Subject key identifier: 09:54:14:49:1E:61:3D:4A:38:65:CA:0A:A4:C5:AC:10:65:9A:33:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014883
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCCD7EA80B8C11F0B8F72F44762E951A.roa
Signing time: Fri 28 Mar 2025 04:26:21 +0000
ROA not before: Fri 28 Mar 2025 04:26:16 +0000
ROA not after: Thu 17 Apr 2025 04:26:16 +0000
asID: 21859
IP address blocks: 156.241.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84099 (0x14883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 28 04:26:16 2025 GMT
Not After : Apr 17 04:26:16 2025 GMT
Subject: CN=67e624ed-f3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:ca:48:a5:4d:fb:97:97:4b:47:b2:f5:5f:
dd:f7:36:df:56:91:54:27:14:dd:c4:ce:55:0b:ef:
a9:c1:5e:60:ab:fa:07:75:28:b8:34:ae:2f:47:ca:
6d:7c:89:a1:82:ad:fb:d8:91:fb:8a:42:e3:f3:28:
bf:13:5a:35:f1:4f:1f:6b:ad:3d:a8:36:5c:d2:a9:
57:81:9b:08:1a:83:45:c1:e9:1e:58:dc:f3:fa:84:
f2:0c:7c:9b:f2:2e:de:d2:4a:6a:6e:88:9c:a0:54:
17:6e:56:0b:6a:40:b6:fe:1f:74:f7:62:eb:0f:ad:
d0:49:25:dd:78:d9:cd:6c:4a:86:ca:55:65:68:8e:
7f:a3:73:76:53:01:f6:a9:3c:89:86:f2:19:de:f4:
c3:f3:dd:cb:da:06:87:fa:04:21:d1:13:bd:21:e1:
d6:c0:62:6c:2f:6a:2c:32:60:74:5e:72:98:40:86:
1f:02:21:7e:7c:09:8b:2c:fd:59:67:09:25:ca:6b:
5b:6e:d1:e8:24:e9:43:a3:30:89:49:63:ab:81:a7:
92:fc:5c:18:50:dd:25:c3:de:22:51:90:4c:48:dd:
b6:0c:82:96:58:49:53:2c:85:e2:2c:65:3b:65:8c:
18:49:b0:4f:45:64:68:d3:9e:ad:9c:5c:6b:2c:de:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:54:14:49:1E:61:3D:4A:38:65:CA:0A:A4:C5:AC:10:65:9A:33:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCCD7EA80B8C11F0B8F72F44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.135.0/24
Signature Algorithm: sha256WithRSAEncryption
16:09:64:87:0d:b4:03:ca:8b:65:45:a4:18:ae:43:9f:ed:57:
81:f1:fd:ac:ef:27:f9:54:1e:06:3b:82:04:d3:97:2d:78:ce:
1f:c9:4e:1e:af:0e:4d:d9:71:87:f0:31:77:74:a3:af:bb:57:
2a:2d:7d:91:6e:05:be:f4:d5:5e:b6:ad:9a:f6:9d:cf:df:ec:
00:e9:8e:1a:7e:56:3f:00:9e:84:e9:34:fd:ad:ff:a5:e6:23:
a9:57:8f:46:d1:97:dc:e2:99:fd:31:15:9b:c1:2e:05:97:0a:
f9:54:30:f0:01:93:96:b0:29:70:31:40:59:ed:5e:05:49:d3:
c5:38:3a:c5:1e:94:b9:41:e0:d7:5c:c3:27:4e:44:2f:3e:87:
ea:80:02:b2:77:ad:22:85:07:1d:96:36:14:53:e1:ed:e2:8a:
d8:cb:a7:01:b7:31:d9:5b:39:33:0e:13:43:7c:c7:1d:bc:a5:
e5:78:99:5a:91:8d:00:51:8b:39:bb:1a:3c:62:4c:87:bb:42:
4e:2d:cf:cb:fc:7b:b0:ba:73:98:ef:37:d9:b1:19:f8:2d:72:
f4:00:35:35:b9:59:a3:9a:0f:a4:38:4f:17:1c:ed:57:41:5a:
9a:d9:9f:9e:94:c9:71:9c:f5:19:3b:fe:a5:0a:f9:f7:36:e6:
23:15:c1:b6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUiDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzI4MDQyNjE2WhcNMjUwNDE3MDQyNjE2WjAYMRYw
FAYDVQQDEw02N2U2MjRlZC1mM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4PjKSKVN+5eXS0ey9V/d9zbfVpFUJxTdxM5VC++pwV5gq/oHdSi4NK4v
R8ptfImhgq372JH7ikLj8yi/E1o18U8fa609qDZc0qlXgZsIGoNFwekeWNzz+oTy
DHyb8i7e0kpqboicoFQXblYLakC2/h9092LrD63QSSXdeNnNbEqGylVlaI5/o3N2
UwH2qTyJhvIZ3vTD893L2gaH+gQh0RO9IeHWwGJsL2osMmB0XnKYQIYfAiF+fAmL
LP1ZZwklymtbbtHoJOlDozCJSWOrgaeS/FwYUN0lw94iUZBMSN22DIKWWElTLIXi
LGU7ZYwYSbBPRWRo056tnFxrLN70lQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAlU
FEkeYT1KOGXKCqTFrBBlmjPPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQ0NEN0VBODBCOEMxMUYwQjhGNzJGNDQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPGHMA0GCSqGSIb3DQEBCwUA
A4IBAQAWCWSHDbQDyotlRaQYrkOf7VeB8f2s7yf5VB4GO4IE05cteM4fyU4erw5N
2XGH8DF3dKOvu1cqLX2RbgW+9NVetq2a9p3P3+wA6Y4aflY/AJ6E6TT9rf+l5iOp
V49G0Zfc4pn9MRWbwS4Flwr5VDDwAZOWsClwMUBZ7V4FSdPFODrFHpS5QeDXXMMn
TkQvPofqgAKyd60ihQcdljYUU+Ht4orYy6cBtzHZWzkzDhNDfMcdvKXleJlakY0A
UYs5uxo8YkyHu0JOLc/L/HuwunOY7zfZsRn4LXL0ADU1uVmjmg+kOE8XHO1XQVqa
2Z+elMlxnPUZO/6lCvn3NuYjFcG2
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:20 2025 by rpki-client