Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9FD4930F42211EF9503C477762E951A.roa
File: E9FD4930F42211EF9503C477762E951A.roa (raw, json)
Hash identifier: E4/fZ2c2ApTKD6F7pthieoBRcrHL2wdRP6JG0iWWZhI=
Subject key identifier: 56:96:11:5E:30:F8:1C:27:DF:D3:6C:68:40:A4:EA:29:A3:D7:D6:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013064
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9FD4930F42211EF9503C477762E951A.roa
Signing time: Wed 26 Feb 2025 09:20:26 +0000
ROA not before: Wed 26 Feb 2025 09:20:23 +0000
ROA not after: Thu 19 Feb 2026 09:20:23 +0000
asID: 984
IP address blocks: 156.230.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77924 (0x13064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:20:23 2025 GMT
Not After : Feb 19 09:20:23 2026 GMT
Subject: CN=67bedcda-da73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:81:95:9a:f3:1f:31:1f:ff:f8:2a:ca:c2:
1d:f3:d4:70:7e:dd:f8:31:ff:07:57:3e:a5:39:4e:
de:c2:ff:fa:05:65:94:8f:67:93:19:8c:be:e8:96:
b6:66:f8:48:a0:47:59:ba:50:19:cc:91:b1:64:99:
d7:ef:05:a7:bf:e6:f1:95:1c:92:07:09:83:f4:ee:
14:8a:b2:8d:6e:49:c9:0f:1a:12:8b:cf:39:86:7f:
a2:47:2d:4f:1b:14:4a:48:65:60:77:f7:4e:05:28:
54:ff:26:17:14:b1:50:9c:2c:18:94:e7:bc:fa:be:
f7:7f:0b:06:5a:8c:30:5d:85:76:05:82:4e:04:75:
b5:8c:2b:20:27:63:3f:fe:3e:65:e7:30:64:18:3f:
38:58:2d:e7:a0:f7:de:98:7b:5e:74:97:ce:d2:44:
45:6a:24:df:fe:0c:08:19:f3:f2:b6:ab:b1:42:fe:
e5:3f:0f:af:f0:b0:66:1b:c5:8e:b8:58:92:72:ec:
a6:6a:cf:73:01:87:21:ad:4f:d3:89:c2:89:86:2d:
63:50:a7:2b:7e:d4:80:0d:4e:d1:cf:19:0a:1d:48:
0b:f7:1d:44:a4:c5:9d:41:24:b8:e2:1a:cd:57:fa:
7f:01:33:6f:0f:88:03:ac:ce:d0:52:42:d5:cc:df:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:96:11:5E:30:F8:1C:27:DF:D3:6C:68:40:A4:EA:29:A3:D7:D6:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9FD4930F42211EF9503C477762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.26.0/24
Signature Algorithm: sha256WithRSAEncryption
42:18:c1:8f:6e:28:ee:5e:7e:ec:bc:79:78:e7:90:c8:88:04:
05:b3:e6:ef:96:09:b4:f5:70:93:24:42:1b:93:a5:d3:7f:c2:
da:7e:be:60:b5:cc:5d:db:e7:b2:ac:c8:7e:ae:ce:33:20:f4:
e9:f9:37:ed:47:00:43:34:82:39:3a:9f:ae:35:59:7e:64:46:
45:34:c7:68:69:4b:c8:a5:7f:14:e1:46:87:60:82:1e:8d:22:
53:52:27:4c:4a:82:7f:90:1e:e7:1a:20:5e:e2:d1:ad:21:db:
a9:71:51:75:e2:52:76:24:bc:fb:7c:73:64:f0:ec:75:ea:35:
06:ea:2f:0b:43:f2:4b:b1:05:7b:e9:cd:80:99:4f:50:1f:46:
f5:b9:d4:0a:68:6f:e6:4b:8f:51:99:db:86:aa:0a:c5:9b:99:
96:dc:7e:4d:fe:22:c4:49:93:65:2b:62:d2:33:d8:28:aa:25:
15:72:9e:8a:66:8a:87:b8:da:5b:8d:6e:6c:b5:25:c3:09:4b:
b6:77:1e:d6:51:86:11:e7:36:8b:ff:83:1a:99:80:92:e8:9e:
3e:23:05:3a:4e:e5:f2:ba:22:75:61:e6:0d:9f:f3:91:a1:af:
71:d7:51:56:08:f4:cb:dd:9b:aa:df:4c:1f:ed:2c:38:47:d0:
c6:d8:00:22
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATBkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MDkyMDIzWhcNMjYwMjE5MDkyMDIzWjAYMRYw
FAYDVQQDEw02N2JlZGNkYS1kYTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4L6BlZrzHzEf//gqysId89Rwft34Mf8HVz6lOU7ewv/6BWWUj2eTGYy+
6Ja2ZvhIoEdZulAZzJGxZJnX7wWnv+bxlRySBwmD9O4UirKNbknJDxoSi885hn+i
Ry1PGxRKSGVgd/dOBShU/yYXFLFQnCwYlOe8+r73fwsGWowwXYV2BYJOBHW1jCsg
J2M//j5l5zBkGD84WC3noPfemHtedJfO0kRFaiTf/gwIGfPytquxQv7lPw+v8LBm
G8WOuFiScuymas9zAYchrU/TicKJhi1jUKcrftSADU7RzxkKHUgL9x1EpMWdQSS4
4hrNV/p/ATNvD4gDrM7QUkLVzN8wrwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFaW
EV4w+Bwn39NsaECk6imj19awMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOUZENDkzMEY0MjIxMUVGOTUwM0M0Nzc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOYaMA0GCSqGSIb3DQEBCwUA
A4IBAQBCGMGPbijuXn7svHl455DIiAQFs+bvlgm09XCTJEIbk6XTf8Lafr5gtcxd
2+eyrMh+rs4zIPTp+TftRwBDNII5Op+uNVl+ZEZFNMdoaUvIpX8U4UaHYIIejSJT
UidMSoJ/kB7nGiBe4tGtIdupcVF14lJ2JLz7fHNk8Ox16jUG6i8LQ/JLsQV76c2A
mU9QH0b1udQKaG/mS49RmduGqgrFm5mW3H5N/iLESZNlK2LSM9goqiUVcp6KZoqH
uNpbjW5stSXDCUu2dx7WUYYR5zaL/4MamYCS6J4+IwU6TuXyuiJ1YeYNn/ORoa9x
11FWCPTL3Zuq30wf7Sw4R9DG2AAi
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:09 2025 by rpki-client