Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB407B9EF46111EFBF96E8B0762E951A.roa
File: DB407B9EF46111EFBF96E8B0762E951A.roa (raw, json)
Hash identifier: 0FbyFDAOhzTqJhEz46dGr0AS9t+kaMi85aJIj1qcv0Q=
Subject key identifier: 58:31:BF:EC:81:3D:66:EB:EC:E0:41:4B:7F:32:AA:FF:91:8A:21:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013525
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB407B9EF46111EFBF96E8B0762E951A.roa
Signing time: Wed 26 Feb 2025 16:51:00 +0000
ROA not before: Wed 26 Feb 2025 16:50:56 +0000
ROA not after: Thu 19 Feb 2026 16:50:56 +0000
asID: 984
IP address blocks: 156.231.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79141 (0x13525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:50:56 2025 GMT
Not After : Feb 19 16:50:56 2026 GMT
Subject: CN=67bf4674-04d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:d9:88:83:4e:61:7c:9a:cd:21:32:ec:38:
71:64:c6:36:fb:e4:c9:5f:ed:db:58:78:69:64:83:
ff:65:9d:89:b5:e9:04:10:9b:df:21:55:ad:e4:c7:
d8:03:29:16:60:4a:a6:11:64:69:28:35:1a:0e:fb:
69:35:b2:2d:db:36:93:9b:bb:93:89:ad:5c:a5:b5:
70:51:4a:cb:c8:fe:22:3b:2b:a3:86:f8:a3:cb:50:
21:e1:c1:c5:b7:d2:a2:c9:22:05:de:02:cd:c7:8e:
01:48:dc:ea:0d:db:4f:b0:e4:f7:7f:49:b4:42:1b:
a0:27:a3:9b:f0:ef:b0:17:83:3d:ba:02:09:dc:00:
a1:f9:f6:5d:0a:36:53:47:12:85:7c:90:7b:89:41:
08:e1:11:54:a1:e5:cd:a4:4e:a5:f1:50:55:c1:6b:
ce:08:b3:96:56:79:c3:f2:e1:c4:59:bf:c5:27:62:
f5:04:7e:22:29:12:9a:1b:0e:3e:41:01:39:53:13:
61:c6:80:55:64:58:13:1c:b3:ea:2d:45:d0:16:17:
3d:ec:68:2a:3e:fd:e7:ac:c1:83:10:80:55:9b:32:
99:f6:13:f8:7b:04:f2:4a:b7:4e:a6:7f:61:a2:80:
ff:97:21:79:93:79:77:98:81:09:28:a7:2a:d4:9f:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:31:BF:EC:81:3D:66:EB:EC:E0:41:4B:7F:32:AA:FF:91:8A:21:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB407B9EF46111EFBF96E8B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.249.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:80:5b:14:5e:8f:65:7d:b2:11:3b:d9:29:fc:12:17:ee:f9:
13:05:f5:fe:b9:41:e6:ed:b4:2b:6c:dd:1a:4c:4e:6b:e7:87:
e0:9c:8c:a4:aa:23:ab:b2:67:4b:10:e4:67:5a:00:d1:ea:2b:
82:29:f2:02:c3:fd:db:2a:ee:d8:64:df:60:d1:2f:fb:2f:b0:
b0:c3:d6:92:2b:ce:36:17:d7:84:eb:c2:37:66:62:7e:06:e9:
ef:05:74:7d:2c:63:ad:03:79:00:ca:5c:7c:32:a8:3d:3b:5c:
30:11:28:42:73:37:60:6b:ff:7d:f2:28:f2:44:cf:13:51:01:
6a:4f:83:d5:0b:d7:0b:68:87:1f:41:d7:8a:c0:3d:38:83:f8:
1f:9e:cf:69:c6:00:9a:6d:f7:51:6c:e1:2a:66:a4:6a:61:5f:
9a:90:cb:8b:dd:e7:36:5e:df:e0:57:fc:12:5e:70:9c:a5:69:
6a:e2:79:31:34:da:59:99:59:19:60:fe:50:1a:c1:86:34:38:
71:db:02:52:37:f7:68:68:5b:ea:2b:1e:50:1d:f8:24:f0:7f:
93:56:07:5a:99:70:3f:dc:43:5b:0c:13:ae:b0:49:9e:68:34:
6e:25:74:35:71:f4:cb:ba:7e:3f:92:7a:8a:84:29:f8:d6:44:
a2:91:d3:1d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATUlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTY1MDU2WhcNMjYwMjE5MTY1MDU2WjAYMRYw
FAYDVQQDEw02N2JmNDY3NC0wNGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyHLZiINOYXyazSEy7DhxZMY2++TJX+3bWHhpZIP/ZZ2JtekEEJvfIVWt
5MfYAykWYEqmEWRpKDUaDvtpNbIt2zaTm7uTia1cpbVwUUrLyP4iOyujhvijy1Ah
4cHFt9KiySIF3gLNx44BSNzqDdtPsOT3f0m0QhugJ6Ob8O+wF4M9ugIJ3ACh+fZd
CjZTRxKFfJB7iUEI4RFUoeXNpE6l8VBVwWvOCLOWVnnD8uHEWb/FJ2L1BH4iKRKa
Gw4+QQE5UxNhxoBVZFgTHLPqLUXQFhc97GgqPv3nrMGDEIBVmzKZ9hP4ewTySrdO
pn9hooD/lyF5k3l3mIEJKKcq1J/cEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFgx
v+yBPWbr7OBBS38yqv+RiiGWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQjQwN0I5RUY0NjExMUVGQkY5NkU4QjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOf5MA0GCSqGSIb3DQEBCwUA
A4IBAQAKgFsUXo9lfbIRO9kp/BIX7vkTBfX+uUHm7bQrbN0aTE5r54fgnIykqiOr
smdLEORnWgDR6iuCKfICw/3bKu7YZN9g0S/7L7Cww9aSK842F9eE68I3ZmJ+Bunv
BXR9LGOtA3kAylx8Mqg9O1wwEShCczdga/998ijyRM8TUQFqT4PVC9cLaIcfQdeK
wD04g/gfns9pxgCabfdRbOEqZqRqYV+akMuL3ec2Xt/gV/wSXnCcpWlq4nkxNNpZ
mVkZYP5QGsGGNDhx2wJSN/doaFvqKx5QHfgk8H+TVgdamXA/3ENbDBOusEmeaDRu
JXQ1cfTLun4/knqKhCn41kSikdMd
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:41 2025 by rpki-client