Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D784220AF5DB11EFA83C7160762E951A.roa
File: D784220AF5DB11EFA83C7160762E951A.roa (raw, json)
Hash identifier: m9P1qtKISTGM4g4ISA/0yLZKTzcUnm0W6UxFUeYAsbA=
Subject key identifier: 76:6F:17:33:7E:EF:23:DE:35:2C:BF:22:A9:09:29:21:69:DC:A3:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D784220AF5DB11EFA83C7160762E951A.roa
Signing time: Fri 28 Feb 2025 13:56:43 +0000
ROA not before: Fri 28 Feb 2025 13:56:40 +0000
ROA not after: Sun 13 Apr 2025 13:56:40 +0000
asID: 138915
IP address blocks: 156.244.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81422 (0x13e0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:56:40 2025 GMT
Not After : Apr 13 13:56:40 2025 GMT
Subject: CN=67c1c09b-00f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:e0:5e:2f:77:34:4d:4c:52:dd:0c:30:3f:
54:46:47:fc:27:ea:b3:e0:85:c6:78:3f:f1:db:51:
91:f3:16:c0:f8:c2:09:22:db:e9:0e:b7:50:52:68:
ac:f6:be:e1:48:15:94:77:3e:3f:28:52:f9:28:2a:
22:cc:a7:7e:ec:7e:d1:97:b3:6c:37:57:5b:dd:94:
6c:2c:da:40:47:e3:35:cf:da:17:f5:ce:c9:ca:d1:
e6:ce:18:ca:e8:5a:cd:86:20:38:75:ba:de:45:6f:
c1:6c:2b:9f:30:cf:12:f3:2e:9d:eb:e4:44:95:72:
86:41:06:bf:a9:49:1d:bc:b4:c2:ab:b5:08:89:23:
88:8a:2b:4c:c5:b8:fb:c3:b9:ee:a4:8e:a3:f5:d4:
f7:54:27:c8:90:41:a8:89:88:06:50:6e:e3:35:e7:
6a:6e:0c:6f:5c:44:da:b8:b3:25:2a:c7:3b:0c:1f:
88:00:c6:ce:eb:6f:c3:cc:dd:97:86:2c:b9:8d:f1:
14:ab:f9:c2:0f:3f:f1:12:42:cf:ff:8c:2f:13:11:
a2:38:c1:05:24:b8:29:71:95:a0:79:17:ec:81:a3:
4e:6d:58:a7:d1:44:3e:b9:37:41:c8:f5:f3:29:a3:
e8:fa:be:bc:25:0f:7f:d9:53:70:05:41:a0:01:0f:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6F:17:33:7E:EF:23:DE:35:2C:BF:22:A9:09:29:21:69:DC:A3:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D784220AF5DB11EFA83C7160762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.39.0/24
Signature Algorithm: sha256WithRSAEncryption
29:75:45:19:67:51:f4:36:98:78:dc:6e:f7:3b:cc:f3:fc:c9:
1f:b1:2c:ab:53:cf:e0:c9:06:bf:cd:2b:7b:cf:05:cc:0f:4b:
ec:35:c2:1a:c5:79:92:5e:02:f7:ad:69:6b:8a:44:53:6d:31:
a3:18:36:68:d0:fc:7d:57:21:33:c8:4d:c1:6b:37:0a:60:06:
7e:bc:92:49:52:36:89:1c:8b:6f:bf:70:e2:25:b7:6f:00:a3:
6f:4e:b6:62:57:a2:a1:47:09:6b:82:b7:cb:01:53:78:4e:8a:
db:0d:96:85:78:16:03:b2:fb:01:a7:65:fb:5b:46:f6:8f:44:
f8:f4:b5:35:6c:91:5c:b1:64:87:c7:10:94:80:6f:37:76:af:
6e:c5:29:ca:fc:40:3d:2a:33:7c:c2:75:82:d1:d0:d9:6b:a9:
1b:e7:7d:80:c2:b7:5a:38:0b:8b:c7:eb:2f:0d:95:2d:0a:d6:
a7:83:db:2f:34:03:13:a5:52:8a:e2:bd:69:d7:15:87:ac:76:
00:c5:29:76:0e:2f:6b:c2:08:ca:df:21:af:68:63:98:53:82:
18:91:ad:b9:bf:6f:4a:fb:46:ed:ac:6a:94:f9:c4:4c:9c:cb:
1d:dd:6b:f9:d8:43:e9:65:b1:e8:88:4a:97:a1:38:e6:8e:26:
20:04:c7:b4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAT4OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI4MTM1NjQwWhcNMjUwNDEzMTM1NjQwWjAYMRYw
FAYDVQQDEw02N2MxYzA5Yi0wMGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApYzgXi93NE1MUt0MMD9URkf8J+qz4IXGeD/x21GR8xbA+MIJItvpDrdQ
Umis9r7hSBWUdz4/KFL5KCoizKd+7H7Rl7NsN1db3ZRsLNpAR+M1z9oX9c7JytHm
zhjK6FrNhiA4dbreRW/BbCufMM8S8y6d6+RElXKGQQa/qUkdvLTCq7UIiSOIiitM
xbj7w7nupI6j9dT3VCfIkEGoiYgGUG7jNedqbgxvXETauLMlKsc7DB+IAMbO62/D
zN2Xhiy5jfEUq/nCDz/xEkLP/4wvExGiOMEFJLgpcZWgeRfsgaNObVin0UQ+uTdB
yPXzKaPo+r68JQ9/2VNwBUGgAQ8B1QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHZv
FzN+7yPeNSy/IqkJKSFp3KM1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENzg0MjIwQUY1REIxMUVGQTgzQzcxNjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQnMA0GCSqGSIb3DQEBCwUA
A4IBAQApdUUZZ1H0Nph43G73O8zz/MkfsSyrU8/gyQa/zSt7zwXMD0vsNcIaxXmS
XgL3rWlrikRTbTGjGDZo0Px9VyEzyE3BazcKYAZ+vJJJUjaJHItvv3DiJbdvAKNv
TrZiV6KhRwlrgrfLAVN4TorbDZaFeBYDsvsBp2X7W0b2j0T49LU1bJFcsWSHxxCU
gG83dq9uxSnK/EA9KjN8wnWC0dDZa6kb532AwrdaOAuLx+svDZUtCtang9svNAMT
pVKK4r1p1xWHrHYAxSl2Di9rwgjK3yGvaGOYU4IYka25v29K+0btrGqU+cRMnMsd
3Wv52EPpZbHoiEqXoTjmjiYgBMe0
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:16 2025 by rpki-client