Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7E83838F45B11EF8EDF7F8A762E951A.roa
File: E7E83838F45B11EF8EDF7F8A762E951A.roa (raw, json)
Hash identifier: kf5Frhc7iUrorOH6oP7Lby64WJl65T7shjqE5jjVL7s=
Subject key identifier: 14:57:95:6A:BD:A6:30:BE:4D:3D:7E:CB:DB:A5:D6:87:BC:FD:77:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013492
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7E83838F45B11EF8EDF7F8A762E951A.roa
Signing time: Wed 26 Feb 2025 16:08:25 +0000
ROA not before: Wed 26 Feb 2025 16:08:09 +0000
ROA not after: Thu 19 Feb 2026 16:08:09 +0000
asID: 984
IP address blocks: 156.252.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78994 (0x13492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:08:09 2025 GMT
Not After : Feb 19 16:08:09 2026 GMT
Subject: CN=67bf3c79-c67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:46:d6:9f:79:c1:1e:52:8c:c1:78:e2:c1:
b0:e7:50:0d:88:6a:dd:eb:9d:5f:e6:33:b8:76:21:
ea:a6:ae:b2:23:6e:94:f0:fc:60:4e:b3:a4:53:54:
24:cd:be:bb:a6:c8:94:b0:94:6b:8c:a5:c6:94:60:
37:c8:9a:02:41:d2:e2:36:5d:5e:0e:8f:73:27:d9:
44:1e:16:b4:83:79:85:58:0e:fd:28:cd:77:29:68:
83:f7:7d:97:ba:1a:d8:e5:2c:7e:44:ff:d8:7f:fa:
f9:48:71:40:3a:c8:b7:b8:7a:0c:c8:86:23:a1:0f:
c0:e7:4a:b6:d2:d5:37:34:f7:a7:4a:17:40:8e:7b:
95:1c:c9:71:e0:41:15:88:ff:ec:85:a1:03:34:8b:
37:6c:9e:7f:53:b5:9c:b1:37:ec:b8:a5:b1:6c:21:
66:ca:50:ee:71:ee:1d:75:5f:ce:be:e4:c4:86:36:
b1:3a:19:08:5e:88:6f:3c:5e:b8:4a:d7:82:ed:1a:
4f:ea:8c:f2:8e:d1:5e:26:07:e8:3f:37:47:ad:68:
40:72:f4:22:64:89:1f:2c:28:1a:7e:37:3b:2d:1a:
3d:7a:d1:f4:e3:00:c5:64:63:22:a3:10:7f:f7:5c:
22:ce:48:8a:bd:7e:35:a5:e8:de:00:50:6c:4e:06:
57:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:57:95:6A:BD:A6:30:BE:4D:3D:7E:CB:DB:A5:D6:87:BC:FD:77:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7E83838F45B11EF8EDF7F8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d0:56:8d:17:aa:69:75:ad:4d:e3:8c:e7:48:12:bb:46:d6:
42:76:2f:46:f9:ed:bf:0d:17:0c:c1:5b:9b:44:0e:38:8b:f9:
43:18:b5:45:d8:ff:89:53:b4:c1:be:47:82:9c:1f:32:58:b8:
49:2c:59:d9:d9:72:d1:09:44:58:71:c0:58:e9:5f:2f:3d:c6:
5a:4a:37:b0:29:0e:04:7e:0b:51:71:de:44:30:ad:88:f2:e6:
ef:5b:cd:40:7f:9c:7a:6b:d1:15:70:43:e2:f7:d8:0a:49:16:
4d:22:73:6f:a4:d4:8f:44:3e:d7:b9:fd:35:18:3e:19:4a:a3:
d4:01:13:c5:73:97:76:ee:06:a6:56:5f:5d:f7:14:ae:ab:ee:
02:19:bf:56:d7:b3:ac:c2:a3:ba:5b:f4:af:7a:43:5d:06:1f:
dc:60:f9:13:ce:37:fb:ac:6d:b0:22:a1:3c:4f:80:2b:08:50:
f7:18:c8:71:72:73:af:75:55:42:4b:f9:c5:a2:03:68:64:19:
91:95:82:2d:2c:17:24:34:bd:f6:bb:2d:81:7e:cb:b9:ec:d1:
be:53:c2:89:07:7f:46:10:ca:39:13:bf:62:3e:78:c2:cb:3c:
d8:da:55:21:a9:ed:7b:39:1b:2d:f2:62:9a:8c:2a:73:8d:f8:
32:e8:70:ea
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATSSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTYwODA5WhcNMjYwMjE5MTYwODA5WjAYMRYw
FAYDVQQDEw02N2JmM2M3OS1jNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo75G1p95wR5SjMF44sGw51ANiGrd651f5jO4diHqpq6yI26U8PxgTrOk
U1Qkzb67psiUsJRrjKXGlGA3yJoCQdLiNl1eDo9zJ9lEHha0g3mFWA79KM13KWiD
932XuhrY5Sx+RP/Yf/r5SHFAOsi3uHoMyIYjoQ/A50q20tU3NPenShdAjnuVHMlx
4EEViP/shaEDNIs3bJ5/U7WcsTfsuKWxbCFmylDuce4ddV/OvuTEhjaxOhkIXohv
PF64SteC7RpP6ozyjtFeJgfoPzdHrWhAcvQiZIkfLCgafjc7LRo9etH04wDFZGMi
oxB/91wizkiKvX41pejeAFBsTgZXjQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBRX
lWq9pjC+TT1+y9ul1oe8/XeZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FN0U4MzgzOEY0NUIxMUVGOEVERjdGOEE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPzkMA0GCSqGSIb3DQEBCwUA
A4IBAQBb0FaNF6ppda1N44znSBK7RtZCdi9G+e2/DRcMwVubRA44i/lDGLVF2P+J
U7TBvkeCnB8yWLhJLFnZ2XLRCURYccBY6V8vPcZaSjewKQ4EfgtRcd5EMK2I8ubv
W81Af5x6a9EVcEPi99gKSRZNInNvpNSPRD7Xuf01GD4ZSqPUARPFc5d27gamVl9d
9xSuq+4CGb9W17OswqO6W/SvekNdBh/cYPkTzjf7rG2wIqE8T4ArCFD3GMhxcnOv
dVVCS/nFogNoZBmRlYItLBckNL32uy2Bfsu57NG+U8KJB39GEMo5E79iPnjCyzzY
2lUhqe17ORst8mKajCpzjfgy6HDq
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:29 2025 by rpki-client