Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5553270F46F11EF8CA17F92762E951A.roa
File: D5553270F46F11EF8CA17F92762E951A.roa (raw, json)
Hash identifier: AIOrtbMAHX+goq3zblLpw7aT2PQplLrjcVKPPssN7XU=
Subject key identifier: B4:DD:06:AF:41:31:C0:57:D8:1A:71:E7:6C:C6:50:F1:E6:EF:15:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013669
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5553270F46F11EF8CA17F92762E951A.roa
Signing time: Wed 26 Feb 2025 18:31:03 +0000
ROA not before: Wed 26 Feb 2025 18:30:59 +0000
ROA not after: Thu 19 Feb 2026 18:30:59 +0000
asID: 984
IP address blocks: 156.245.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79465 (0x13669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:30:59 2025 GMT
Not After : Feb 19 18:30:59 2026 GMT
Subject: CN=67bf5de7-dab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3b:1b:b1:6a:ed:2c:d9:a6:1b:6a:fb:50:8c:
d9:d1:f6:df:07:25:00:93:72:90:0b:d4:94:58:5e:
97:29:bf:2a:b8:1e:fb:f1:fa:d1:cb:19:17:c2:eb:
81:75:15:ba:40:38:ba:50:d4:cb:71:6f:ea:76:05:
fa:1c:a6:ab:a1:fe:d0:98:25:99:7e:2a:f9:53:6a:
09:46:8c:59:04:2d:d6:6b:ef:e3:23:fa:51:d9:c1:
89:71:f0:bd:4d:37:51:55:8d:b7:b5:2a:2c:e5:82:
74:90:28:9e:44:6f:87:3e:96:84:c8:1c:7d:16:3d:
2c:3d:b9:d6:84:a7:e8:40:70:93:d0:5f:6b:30:35:
6b:8f:0e:7a:87:69:9c:5e:74:56:b9:77:c0:dd:49:
66:9a:4e:82:98:73:50:5c:04:56:2e:f9:dc:31:c6:
c9:b8:4b:ea:bd:6b:00:2e:3a:96:64:91:82:32:74:
50:c9:96:23:bf:89:7b:61:29:07:17:5b:0c:88:f9:
62:40:28:a9:c3:8e:dd:3e:e8:b1:5b:08:de:e8:ed:
ff:f6:ef:08:4d:25:c4:df:1f:68:a0:63:b6:6c:53:
8c:2f:88:4b:94:52:b8:38:a1:dd:85:f2:6e:4e:bf:
e5:90:6f:53:d1:1a:ed:f0:64:67:6f:38:5d:66:b5:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DD:06:AF:41:31:C0:57:D8:1A:71:E7:6C:C6:50:F1:E6:EF:15:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5553270F46F11EF8CA17F92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.112.0/24
Signature Algorithm: sha256WithRSAEncryption
22:49:30:91:1b:13:65:42:e3:80:34:9f:19:fd:c3:1a:f3:d3:
f0:32:ec:6e:c1:9e:3d:1e:62:9e:aa:87:d3:72:ff:59:39:4d:
04:19:59:d0:99:00:18:a2:6a:8b:ac:20:f0:75:f8:b4:49:8f:
de:9b:3c:21:72:74:5f:e8:a8:cc:35:eb:44:3b:e1:0d:01:86:
0d:2d:61:b1:82:d7:7e:14:a1:ab:b8:39:06:09:63:07:76:72:
9d:e1:64:80:42:4a:9f:d2:00:34:16:0c:1b:36:d6:c2:7f:93:
be:60:91:be:35:a0:e5:9f:2f:5a:51:59:2c:a7:6f:4f:26:7a:
51:91:5f:a5:4b:9a:f2:8f:2d:39:1e:33:aa:2b:a2:2b:73:cb:
73:a5:e8:e3:17:be:0f:ef:fb:85:8e:c2:7e:0c:88:4f:0e:8d:
b6:a2:0a:9f:37:4e:5d:b4:2a:a0:bd:08:e8:c0:55:09:a3:29:
93:78:6e:6f:f7:cd:37:a2:74:35:e7:cd:04:7f:de:e0:4a:e7:
f7:9a:48:cc:7e:36:84:51:7e:fb:4a:6b:5d:18:aa:3d:97:2a:
b9:dd:fe:44:07:42:10:6c:de:94:6b:27:9e:e9:9d:5b:a2:da:
23:b8:40:60:ad:40:05:18:a5:ba:45:d8:03:c0:de:9b:84:07:
a0:e5:76:10
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATZpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTgzMDU5WhcNMjYwMjE5MTgzMDU5WjAYMRYw
FAYDVQQDEw02N2JmNWRlNy1kYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5TsbsWrtLNmmG2r7UIzZ0fbfByUAk3KQC9SUWF6XKb8quB778frRyxkX
wuuBdRW6QDi6UNTLcW/qdgX6HKarof7QmCWZfir5U2oJRoxZBC3Wa+/jI/pR2cGJ
cfC9TTdRVY23tSos5YJ0kCieRG+HPpaEyBx9Fj0sPbnWhKfoQHCT0F9rMDVrjw56
h2mcXnRWuXfA3Ulmmk6CmHNQXARWLvncMcbJuEvqvWsALjqWZJGCMnRQyZYjv4l7
YSkHF1sMiPliQCipw47dPuixWwje6O3/9u8ITSXE3x9ooGO2bFOML4hLlFK4OKHd
hfJuTr/lkG9T0Rrt8GRnbzhdZrV2HwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLTd
Bq9BMcBX2Bpx52zGUPHm7xXKMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENTU1MzI3MEY0NkYxMUVGOENBMTdGOTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPVwMA0GCSqGSIb3DQEBCwUA
A4IBAQAiSTCRGxNlQuOANJ8Z/cMa89PwMuxuwZ49HmKeqofTcv9ZOU0EGVnQmQAY
omqLrCDwdfi0SY/emzwhcnRf6KjMNetEO+ENAYYNLWGxgtd+FKGruDkGCWMHdnKd
4WSAQkqf0gA0FgwbNtbCf5O+YJG+NaDlny9aUVksp29PJnpRkV+lS5ryjy05HjOq
K6Irc8tzpejjF74P7/uFjsJ+DIhPDo22ogqfN05dtCqgvQjowFUJoymTeG5v9803
onQ1580Ef97gSuf3mkjMfjaEUX77SmtdGKo9lyq53f5EB0IQbN6Uayee6Z1botoj
uEBgrUAFGKW6RdgDwN6bhAeg5XYQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:54 2025 by rpki-client