Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6253F22D4AE11EF8A22899C762E951A.roa
File: E6253F22D4AE11EF8A22899C762E951A.roa (raw, json)
Hash identifier: QFiWMGAAkyC6QNDBHuvgrAf1OFXDC9io8Mwq789lrsU=
Subject key identifier: 83:78:2A:72:54:A9:76:37:41:93:8B:94:F2:FE:D5:65:BD:37:B6:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01093F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6253F22D4AE11EF8A22899C762E951A.roa
Signing time: Fri 17 Jan 2025 08:41:52 +0000
ROA not before: Fri 17 Jan 2025 08:41:49 +0000
ROA not after: Thu 17 Jul 2025 08:41:49 +0000
asID: 63199
IP address blocks: 156.227.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67903 (0x1093f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 08:41:49 2025 GMT
Not After : Jul 17 08:41:49 2025 GMT
Subject: CN=678a17d0-5a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:5b:e5:31:22:4b:80:3d:0f:67:9a:bb:42:
93:8e:02:87:98:79:d0:51:73:09:2f:5d:36:fe:51:
2c:72:ff:1c:e3:7e:6b:40:cb:e2:92:9d:f5:59:52:
1a:e0:9c:37:b2:b6:cc:02:cf:49:fb:70:5c:20:4d:
e3:5c:5a:79:67:fa:98:75:75:1f:2f:02:f1:9b:f5:
a3:b9:28:0c:44:c1:c8:c2:03:85:a8:8d:f3:a6:61:
ad:8f:af:17:f0:de:83:d8:f6:2d:33:84:cf:3d:fc:
03:fb:e7:dd:fb:66:12:7f:21:ff:43:a2:89:af:b6:
11:4b:83:47:09:28:04:69:0b:be:98:78:51:76:11:
ce:46:99:28:13:87:5f:44:6d:48:6c:ce:17:ff:9f:
4e:bd:4a:af:d5:ad:73:b3:f7:7b:69:2a:7f:2a:11:
04:8d:32:b5:6d:99:d2:fa:c5:24:4f:69:6b:2a:db:
0a:aa:82:23:09:94:46:0c:27:25:71:d0:be:ee:c1:
31:90:d4:83:26:34:5b:e0:2f:6c:44:1b:ff:fa:8f:
a7:f0:bf:a5:fd:9f:8a:42:16:c2:6d:19:1b:cb:7a:
07:a0:ed:32:f5:88:09:ce:50:29:40:01:fb:c5:f3:
95:67:12:3d:0c:21:41:46:73:11:55:36:55:c7:08:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:78:2A:72:54:A9:76:37:41:93:8B:94:F2:FE:D5:65:BD:37:B6:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6253F22D4AE11EF8A22899C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.8.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8a:fa:e2:9a:31:a5:1a:84:c7:c5:bc:fa:75:2a:a2:8a:28:
60:4f:93:a9:51:0c:a8:d6:30:8c:cf:e3:56:1f:46:33:67:b8:
08:f3:17:6f:d5:6a:cc:df:80:59:a5:a3:21:b9:07:a9:45:c0:
13:e3:a4:bf:b1:4f:14:ff:ce:ad:ea:6b:c0:bb:75:46:b8:9c:
cf:45:d3:7a:e1:f7:b5:8c:59:fb:0d:c3:2b:ae:70:da:19:6d:
64:d6:35:90:bc:2c:51:4b:20:b7:5f:5d:06:f0:0d:7f:93:c9:
78:84:36:4c:16:37:9b:c8:97:25:c0:6b:2f:97:3e:37:8c:1d:
2d:ef:47:ec:3f:8e:59:37:23:c2:2b:44:ee:9c:ee:da:8f:d7:
84:fc:dc:fd:1c:16:54:f9:79:b6:3e:61:35:3d:ae:8e:b4:5c:
3a:a6:1d:d3:80:db:74:ac:8e:db:27:77:86:db:79:78:65:8f:
ab:8d:9d:d4:9b:96:13:82:9d:6d:e9:20:4f:52:ca:34:f7:dc:
73:14:cf:60:a0:80:76:c9:71:c6:9b:e8:fa:a4:b7:0e:85:60:
0d:16:b6:de:30:3a:72:fd:d0:d0:2d:48:6e:29:43:3e:1c:1c:
5d:57:69:3e:51:87:23:56:a4:e1:59:df:4a:9e:24:f5:37:2b:
d1:2e:83:2d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQk/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MDg0MTQ5WhcNMjUwNzE3MDg0MTQ5WjAYMRYw
FAYDVQQDEw02NzhhMTdkMC01YTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsa9b5TEiS4A9D2eau0KTjgKHmHnQUXMJL102/lEscv8c435rQMvikp31
WVIa4Jw3srbMAs9J+3BcIE3jXFp5Z/qYdXUfLwLxm/WjuSgMRMHIwgOFqI3zpmGt
j68X8N6D2PYtM4TPPfwD++fd+2YSfyH/Q6KJr7YRS4NHCSgEaQu+mHhRdhHORpko
E4dfRG1IbM4X/59OvUqv1a1zs/d7aSp/KhEEjTK1bZnS+sUkT2lrKtsKqoIjCZRG
DCclcdC+7sExkNSDJjRb4C9sRBv/+o+n8L+l/Z+KQhbCbRkby3oHoO0y9YgJzlAp
QAH7xfOVZxI9DCFBRnMRVTZVxwjrpQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIN4
KnJUqXY3QZOLlPL+1WW9N7a4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNjI1M0YyMkQ0QUUxMUVGOEEyMjg5OUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOMIMA0GCSqGSIb3DQEBCwUA
A4IBAQApivrimjGlGoTHxbz6dSqiiihgT5OpUQyo1jCMz+NWH0YzZ7gI8xdv1WrM
34BZpaMhuQepRcAT46S/sU8U/86t6mvAu3VGuJzPRdN64fe1jFn7DcMrrnDaGW1k
1jWQvCxRSyC3X10G8A1/k8l4hDZMFjebyJclwGsvlz43jB0t70fsP45ZNyPCK0Tu
nO7aj9eE/Nz9HBZU+Xm2PmE1Pa6OtFw6ph3TgNt0rI7bJ3eG23l4ZY+rjZ3Um5YT
gp1t6SBPUso099xzFM9goIB2yXHGm+j6pLcOhWANFrbeMDpy/dDQLUhuKUM+HBxd
V2k+UYcjVqThWd9KniT1NyvRLoMt
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:26 2025 by rpki-client