Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E561EF2CF44311EF830F7F61762E951A.roa
File: E561EF2CF44311EF830F7F61762E951A.roa (raw, json)
Hash identifier: OnjfJBdsRX4NQ52p6QHeHpR+6NR5wEI5sF91lPmLHv4=
Subject key identifier: 60:EA:0D:83:B4:0A:6A:6C:8D:69:2D:E3:F4:08:F2:BB:5A:C9:AE:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013303
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E561EF2CF44311EF830F7F61762E951A.roa
Signing time: Wed 26 Feb 2025 13:16:32 +0000
ROA not before: Wed 26 Feb 2025 13:16:28 +0000
ROA not after: Thu 19 Feb 2026 13:16:28 +0000
asID: 984
IP address blocks: 156.245.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78595 (0x13303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:16:28 2025 GMT
Not After : Feb 19 13:16:28 2026 GMT
Subject: CN=67bf1430-459d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:e2:5b:ae:99:23:fe:04:9e:60:ca:af:e6:
40:b5:05:1b:73:9a:22:29:78:4c:bd:71:f2:e4:d0:
ca:fc:5d:b0:6c:91:37:59:b7:9f:d5:3d:f1:6a:9f:
73:58:bd:87:77:43:17:78:f0:61:73:a8:83:3c:53:
de:7c:10:6d:b5:17:30:09:b3:3e:37:75:18:e7:8a:
21:c6:e4:c4:f4:cc:0f:91:c4:e0:19:47:79:d4:56:
6a:ef:ee:7b:fd:b3:6b:6f:1f:06:7b:ad:8e:2d:f6:
fd:19:f6:d3:f5:f5:b9:cf:e8:89:bb:48:38:39:49:
3e:1f:54:19:f8:2a:68:c9:d7:ed:31:d2:4f:ee:36:
85:a5:06:d2:ba:3e:55:a7:f2:6e:dc:88:6a:7d:59:
69:87:db:a6:e9:56:53:32:89:d4:aa:67:b6:ab:5a:
b6:0a:bc:1e:98:44:c1:10:9a:77:5b:07:d1:35:e7:
e9:8c:19:59:28:01:73:21:54:84:87:a8:91:cb:78:
75:c4:d9:4e:e9:ea:e1:ef:49:af:42:00:6e:05:68:
06:a7:88:5a:09:b2:6a:67:cb:eb:50:ea:26:fb:b3:
be:59:67:7e:6a:76:2e:96:b0:de:b6:62:f5:5b:13:
01:33:b8:de:ab:57:64:5e:56:95:08:66:ab:fa:c8:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EA:0D:83:B4:0A:6A:6C:8D:69:2D:E3:F4:08:F2:BB:5A:C9:AE:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E561EF2CF44311EF830F7F61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.235.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6d:bc:b8:1c:ba:27:d6:81:42:0c:54:04:2a:20:15:83:22:
aa:5d:5e:2a:3c:0e:a8:a5:4b:7a:d5:b1:4b:51:20:40:86:26:
14:8f:7d:24:44:f2:cc:9f:40:ca:1b:a7:6e:ca:fe:82:66:9c:
5d:50:63:58:b8:1d:2d:32:6b:4d:4c:01:54:45:5d:4e:e3:be:
00:dc:3d:5f:32:d3:4c:27:7f:1e:2d:82:99:ed:6a:d3:55:14:
1b:07:41:f9:87:87:b0:0d:35:dc:77:b7:4c:31:48:7c:50:d0:
ea:ee:2b:20:5b:9c:d4:4e:8e:5f:26:f1:18:40:b6:be:9a:9c:
93:5c:41:a9:81:27:b5:eb:cc:87:ed:f8:59:11:76:3f:0d:ab:
2d:7b:9e:3e:97:16:e5:76:ae:69:34:22:d0:06:6b:56:17:b9:
8b:32:ce:ca:f3:28:f4:32:0d:b2:de:7b:d4:81:aa:ad:db:12:
f8:94:36:b4:40:19:c0:ba:dd:cf:78:71:67:4d:44:4d:8b:f0:
7e:09:a6:d7:92:e0:8a:ca:22:62:a3:16:96:43:b1:30:0d:9a:
a2:a1:48:fe:34:f4:b0:45:d7:8d:9b:94:e4:ce:db:7b:03:5d:
4e:be:93:82:35:39:0b:8a:69:8e:65:26:b5:2c:0d:6f:15:c5:
ff:22:a8:cf
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATMDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTMxNjI4WhcNMjYwMjE5MTMxNjI4WjAYMRYw
FAYDVQQDEw02N2JmMTQzMC00NTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqxriW66ZI/4EnmDKr+ZAtQUbc5oiKXhMvXHy5NDK/F2wbJE3Wbef1T3x
ap9zWL2Hd0MXePBhc6iDPFPefBBttRcwCbM+N3UY54ohxuTE9MwPkcTgGUd51FZq
7+57/bNrbx8Ge62OLfb9GfbT9fW5z+iJu0g4OUk+H1QZ+CpoydftMdJP7jaFpQbS
uj5Vp/Ju3IhqfVlph9um6VZTMonUqme2q1q2CrwemETBEJp3WwfRNefpjBlZKAFz
IVSEh6iRy3h1xNlO6erh70mvQgBuBWgGp4haCbJqZ8vrUOom+7O+WWd+anYulrDe
tmL1WxMBM7jeq1dkXlaVCGar+sgQGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGDq
DYO0CmpsjWkt4/QI8rtaya5oMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNTYxRUYyQ0Y0NDMxMUVGODMwRjdGNjE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPXrMA0GCSqGSIb3DQEBCwUA
A4IBAQAZbby4HLon1oFCDFQEKiAVgyKqXV4qPA6opUt61bFLUSBAhiYUj30kRPLM
n0DKG6duyv6CZpxdUGNYuB0tMmtNTAFURV1O474A3D1fMtNMJ38eLYKZ7WrTVRQb
B0H5h4ewDTXcd7dMMUh8UNDq7isgW5zUTo5fJvEYQLa+mpyTXEGpgSe168yH7fhZ
EXY/Daste54+lxbldq5pNCLQBmtWF7mLMs7K8yj0Mg2y3nvUgaqt2xL4lDa0QBnA
ut3PeHFnTURNi/B+CabXkuCKyiJioxaWQ7EwDZqioUj+NPSwRdeNm5Tkztt7A11O
vpOCNTkLimmOZSa1LA1vFcX/IqjP
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:08 2025 by rpki-client