Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF946AAF34D11EF9C5D684B762E951A.roa
File: CEF946AAF34D11EF9C5D684B762E951A.roa (raw, json)
Hash identifier: NJqTy3A03flv7426pRplpJtDaTr/QqhK0Ljzw0u2V0k=
Subject key identifier: E6:53:FA:0D:89:01:89:05:F7:B7:6D:F6:A1:73:2D:16:21:CF:E5:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF946AAF34D11EF9C5D684B762E951A.roa
Signing time: Tue 25 Feb 2025 07:54:58 +0000
ROA not before: Tue 25 Feb 2025 07:54:55 +0000
ROA not after: Sat 19 Feb 2028 07:54:55 +0000
asID: 17561
IP address blocks: 156.249.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77267 (0x12dd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 07:54:55 2025 GMT
Not After : Feb 19 07:54:55 2028 GMT
Subject: CN=67bd7752-b8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:5e:b9:ac:61:ca:55:dc:99:4f:fc:b9:c9:
dc:95:a8:90:7f:de:3e:3f:8f:5e:8c:09:e0:0b:4b:
a7:b6:91:c5:4d:0b:91:5a:5a:24:5d:48:8f:51:0b:
83:f4:d0:44:4e:41:2f:f3:aa:cc:bf:c4:52:5c:f4:
49:f0:2e:52:c6:d8:32:de:68:fa:5e:9c:6d:00:fd:
06:38:aa:93:49:c8:44:89:d2:4a:2d:0f:35:88:be:
11:93:e7:f3:47:1f:e1:73:a5:f3:b1:f7:3c:8a:e1:
31:99:ad:dd:88:45:86:c2:6d:83:0b:66:80:f2:c5:
7d:89:58:86:b6:56:4a:7c:33:cf:b2:d9:df:75:78:
cc:8a:70:14:90:2f:8c:8e:c6:82:ba:b3:c1:c8:e0:
34:4a:5b:d7:bf:15:90:44:d7:b7:79:01:7c:d5:db:
de:da:1f:57:e3:7f:07:2c:61:fe:74:d0:4a:75:e2:
cd:35:56:cf:f8:18:4a:50:1c:75:8c:00:66:60:e2:
4d:55:92:02:0d:99:01:10:82:cc:98:5d:d6:d7:62:
fd:99:8a:7b:04:7b:d4:05:48:b7:27:86:33:1d:7d:
44:7d:23:76:f7:32:3a:f3:8d:64:94:13:35:2a:50:
2a:d6:74:ed:1c:42:27:12:d0:8f:7b:40:bc:2b:8e:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:53:FA:0D:89:01:89:05:F7:B7:6D:F6:A1:73:2D:16:21:CF:E5:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF946AAF34D11EF9C5D684B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:eb:3c:60:c7:bb:c4:c8:00:0f:85:e9:9f:62:4a:37:fc:53:
9f:db:18:34:f6:bf:87:d6:fd:4b:07:e1:15:e2:9f:de:5b:d8:
fd:8a:4e:94:8b:7a:63:7d:a2:71:80:3e:75:dd:ab:aa:6a:98:
14:ae:c7:ab:ad:93:99:cc:cc:83:d3:79:a1:c1:5c:b1:4b:65:
6d:bb:9a:3f:ab:f5:3f:27:24:68:92:02:82:91:6e:01:98:f3:
0a:2c:a7:e8:ce:1d:8e:8f:d0:ec:e0:7a:5a:cc:2c:e7:07:d2:
83:7e:6a:6c:55:30:6d:b0:15:b0:df:61:50:c8:c3:16:1b:90:
38:a3:fe:90:e0:2c:ff:c2:80:a8:9e:24:07:19:8e:dd:72:0c:
eb:8a:49:27:eb:9a:84:0a:c6:d1:c7:5f:8e:e7:83:f3:78:8f:
28:7c:49:9e:dc:16:d5:11:53:ea:df:61:58:d5:fd:cc:6c:24:
19:84:c7:42:a6:ad:c6:6f:3a:41:16:96:3b:db:b8:d5:9d:08:
ae:ef:31:81:b0:3f:d2:42:dd:30:97:8c:e1:ed:51:ee:70:dd:
89:f8:75:e1:97:3b:44:f3:49:83:2a:0e:6d:9c:f1:85:23:a0:
1c:5f:f7:53:72:d0:11:7f:14:ff:30:4d:7e:45:31:27:8e:3f:
67:14:45:e1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS3TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MDc1NDU1WhcNMjgwMjE5MDc1NDU1WjAYMRYw
FAYDVQQDEw02N2JkNzc1Mi1iOGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwgJeuaxhylXcmU/8ucnclaiQf94+P49ejAngC0untpHFTQuRWlokXUiP
UQuD9NBETkEv86rMv8RSXPRJ8C5Sxtgy3mj6XpxtAP0GOKqTSchEidJKLQ81iL4R
k+fzRx/hc6Xzsfc8iuExma3diEWGwm2DC2aA8sV9iViGtlZKfDPPstnfdXjMinAU
kC+MjsaCurPByOA0SlvXvxWQRNe3eQF81dve2h9X438HLGH+dNBKdeLNNVbP+BhK
UBx1jABmYOJNVZICDZkBEILMmF3W12L9mYp7BHvUBUi3J4YzHX1EfSN29zI6841k
lBM1KlAq1nTtHEInEtCPe0C8K44ndQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOZT
+g2JAYkF97dt9qFzLRYhz+UfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRUY5NDZBQUYzNEQxMUVGOUM1RDY4NEI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPnuMA0GCSqGSIb3DQEBCwUA
A4IBAQBL6zxgx7vEyAAPhemfYko3/FOf2xg09r+H1v1LB+EV4p/eW9j9ik6Ui3pj
faJxgD513auqapgUrserrZOZzMyD03mhwVyxS2Vtu5o/q/U/JyRokgKCkW4BmPMK
LKfozh2Oj9Ds4HpazCznB9KDfmpsVTBtsBWw32FQyMMWG5A4o/6Q4Cz/woConiQH
GY7dcgzrikkn65qECsbRx1+O54PzeI8ofEme3BbVEVPq32FY1f3MbCQZhMdCpq3G
bzpBFpY727jVnQiu7zGBsD/SQt0wl4zh7VHucN2J+HXhlztE80mDKg5tnPGFI6Ac
X/dTctARfxT/ME1+RTEnjj9nFEXh
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:02 2025 by rpki-client