Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9BD67B203EF11F09CAAFEB4762E951A.roa
File: D9BD67B203EF11F09CAAFEB4762E951A.roa (raw, json)
Hash identifier: rH2C+ppDIAI6StveRmkS4DXPzfPok5BqiOmkyu2mSVQ=
Subject key identifier: 50:C8:7D:02:F5:AB:0F:10:0F:6A:9B:2D:0F:30:70:E6:95:81:77:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9BD67B203EF11F09CAAFEB4762E951A.roa
Signing time: Tue 18 Mar 2025 11:55:13 +0000
ROA not before: Tue 18 Mar 2025 11:55:10 +0000
ROA not after: Sun 27 Apr 2025 11:55:10 +0000
asID: 44559
IP address blocks: 156.246.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83633 (0x146b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 11:55:10 2025 GMT
Not After : Apr 27 11:55:10 2025 GMT
Subject: CN=67d95f21-4bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:f4:2c:91:9a:34:78:d5:79:cb:b7:a9:54:
a3:86:00:34:ac:bf:7b:26:ed:7e:b7:68:f9:1e:59:
44:6e:15:12:54:e1:31:81:34:fe:9c:c2:46:a2:e7:
d3:d3:f9:12:83:1c:ea:48:14:8c:07:db:68:d3:e8:
85:84:8a:3f:79:f4:a4:f7:16:9f:d3:50:78:59:6f:
de:d7:1c:6f:31:e6:19:bb:f4:fa:13:df:52:b1:1d:
ee:4f:af:b7:b7:23:87:e2:62:a5:17:67:ba:43:b1:
f9:f0:50:16:9c:0d:f3:7d:c3:12:99:a3:ac:ad:f7:
25:f5:ba:cd:07:cc:70:b3:5b:59:df:4d:7b:a7:dd:
da:ca:c9:c8:38:12:f2:eb:ce:31:57:fd:92:c8:0f:
28:74:d3:cb:2b:a0:0a:b7:6c:30:a7:14:a1:58:25:
79:3f:cc:cb:19:be:c9:67:6a:e6:ff:2e:96:ee:21:
d7:7c:96:9f:81:29:81:de:88:00:00:1e:af:54:97:
31:65:73:5f:f4:ae:17:39:f3:cc:98:89:3b:83:df:
67:2f:26:e5:58:b3:b4:1b:dd:7e:bf:53:63:92:a9:
f5:0b:b3:91:58:5b:ac:88:05:98:23:a7:09:7a:ec:
f8:14:03:0a:08:d4:b5:ca:a4:59:ad:28:92:3c:fc:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C8:7D:02:F5:AB:0F:10:0F:6A:9B:2D:0F:30:70:E6:95:81:77:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9BD67B203EF11F09CAAFEB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a1:27:f8:4c:5d:de:fa:99:c5:f8:7e:99:04:6a:37:fd:26:
8f:29:16:4b:18:80:c7:ac:93:4e:4e:f6:b0:85:8f:21:a3:6a:
06:86:b2:64:24:c7:da:28:27:e5:22:48:65:6e:91:c3:84:21:
e4:59:e9:a6:0f:13:13:50:01:50:0d:69:43:42:fb:cc:81:78:
24:53:e7:5b:6e:98:51:75:1a:fc:a0:82:57:be:03:45:fd:fc:
74:bd:d1:cb:3c:db:dd:3d:2f:2e:25:47:e0:49:70:d0:46:67:
9c:6f:22:34:d3:2b:6b:9a:40:85:5a:bc:61:c6:94:bc:ab:d8:
e5:fd:33:39:3a:79:08:92:2b:07:5e:9a:a8:0e:e1:32:7c:88:
20:5a:ae:83:81:69:16:70:59:89:29:13:59:2f:f4:35:13:27:
9e:2e:46:9d:35:53:7d:a5:42:9c:18:63:a4:e2:4e:e5:0f:00:
4c:7b:eb:a5:5a:fb:b3:e3:df:8c:bc:37:db:56:8c:0b:4f:c5:
ba:e6:a0:fb:2b:89:e9:a1:b8:51:47:af:be:70:44:29:cb:9b:
f7:7e:ce:76:9d:8a:8c:d3:62:d1:81:d4:3c:13:4d:8e:a7:76:
49:27:42:16:cf:44:2c:e8:4d:be:c4:c8:bc:4d:52:cd:50:bf:
6a:de:36:38
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUaxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE4MTE1NTEwWhcNMjUwNDI3MTE1NTEwWjAYMRYw
FAYDVQQDEw02N2Q5NWYyMS00YmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA34L0LJGaNHjVecu3qVSjhgA0rL97Ju1+t2j5HllEbhUSVOExgTT+nMJG
oufT0/kSgxzqSBSMB9to0+iFhIo/efSk9xaf01B4WW/e1xxvMeYZu/T6E99SsR3u
T6+3tyOH4mKlF2e6Q7H58FAWnA3zfcMSmaOsrfcl9brNB8xws1tZ3017p93aysnI
OBLy684xV/2SyA8odNPLK6AKt2wwpxShWCV5P8zLGb7JZ2rm/y6W7iHXfJafgSmB
3ogAAB6vVJcxZXNf9K4XOfPMmIk7g99nLyblWLO0G91+v1Njkqn1C7ORWFusiAWY
I6cJeuz4FAMKCNS1yqRZrSiSPPwQPQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFDI
fQL1qw8QD2qbLQ8wcOaVgXd0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOUJENjdCMjAzRUYxMUYwOUNBQUZFQjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPbfMA0GCSqGSIb3DQEBCwUA
A4IBAQBVoSf4TF3e+pnF+H6ZBGo3/SaPKRZLGIDHrJNOTvawhY8ho2oGhrJkJMfa
KCflIkhlbpHDhCHkWemmDxMTUAFQDWlDQvvMgXgkU+dbbphRdRr8oIJXvgNF/fx0
vdHLPNvdPS8uJUfgSXDQRmecbyI00ytrmkCFWrxhxpS8q9jl/TM5OnkIkisHXpqo
DuEyfIggWq6DgWkWcFmJKRNZL/Q1EyeeLkadNVN9pUKcGGOk4k7lDwBMe+ulWvuz
49+MvDfbVowLT8W65qD7K4npobhRR6++cEQpy5v3fs52nYqM02LRgdQ8E02Op3ZJ
J0IWz0Qs6E2+xMi8TVLNUL9q3jY4
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:07 2025 by rpki-client