Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECF5B4E6F2C011EF81761089762E951A.roa
File: ECF5B4E6F2C011EF81761089762E951A.roa (raw, json)
Hash identifier: coyFt1xYVkMPdC9Zeyn5PLZfD+1O88C4zZiNttaSzFY=
Subject key identifier: 73:69:8F:CA:B2:93:83:61:81:9F:10:22:4B:C7:A7:BA:F8:C9:4B:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012BFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECF5B4E6F2C011EF81761089762E951A.roa
Signing time: Mon 24 Feb 2025 15:06:29 +0000
ROA not before: Mon 24 Feb 2025 15:06:26 +0000
ROA not after: Sat 29 Mar 2025 15:06:26 +0000
asID: 203020
IP address blocks: 156.230.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76795 (0x12bfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 15:06:26 2025 GMT
Not After : Mar 29 15:06:26 2025 GMT
Subject: CN=67bc8af5-d5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:3d:79:97:6b:06:96:30:ed:41:7d:28:7a:
67:e5:b9:3a:fb:13:6b:c0:98:5d:3a:aa:bc:cc:50:
7d:6a:2e:bd:e0:31:af:ab:21:32:3a:9e:4e:7a:ba:
55:0d:d1:f1:45:ba:31:97:a1:5a:23:19:22:ca:b3:
6a:b7:94:57:44:d5:03:da:0f:c5:06:b7:26:3a:17:
6d:dd:c9:75:d0:17:fc:24:47:58:2f:b8:2c:74:4e:
57:06:91:9b:09:42:60:1e:45:5a:4d:40:95:33:c4:
93:87:38:b6:fe:89:8e:72:3f:96:b3:71:09:20:a9:
5b:55:c0:20:42:52:d4:dd:7e:b7:aa:84:7b:a3:45:
6f:ee:3b:e9:af:3a:89:59:ec:f0:15:76:98:aa:c6:
ad:df:23:76:3f:29:59:a3:d3:26:ac:11:9c:90:4e:
01:2b:80:57:cf:d5:3f:35:77:c1:d1:24:96:e0:b1:
e3:78:ef:0f:18:37:71:2a:cd:2c:82:52:85:9b:02:
43:48:08:12:17:09:da:d3:18:5b:f7:93:8b:5f:76:
44:f4:77:7b:25:73:3c:b3:40:44:de:46:88:c0:1b:
ab:ae:2d:8e:6d:14:c3:d8:af:45:31:c7:26:41:bc:
c9:0a:c6:28:f0:96:56:24:92:6f:de:0f:78:cb:c6:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:69:8F:CA:B2:93:83:61:81:9F:10:22:4B:C7:A7:BA:F8:C9:4B:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECF5B4E6F2C011EF81761089762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.63.0/24
Signature Algorithm: sha256WithRSAEncryption
76:92:06:c5:61:4c:3f:23:b9:a3:1e:f6:fb:32:d3:42:4e:f1:
43:66:80:43:39:4a:c9:4a:1d:7e:1c:6f:5d:6b:ac:13:dc:18:
9a:5b:5c:b0:6f:d7:f5:db:32:72:02:98:61:ba:2c:2b:a3:d3:
0d:f7:ef:25:68:eb:4b:4c:06:57:30:c8:cb:a8:7b:01:c4:5e:
94:26:bd:ee:bf:ce:59:ec:1d:84:b7:47:41:53:31:89:73:1a:
1d:5f:ae:00:c4:12:38:35:53:40:04:21:77:5f:06:a9:e3:da:
40:08:28:40:83:82:e2:d9:5e:5e:4f:8f:99:da:59:0d:4c:b4:
f9:ce:78:f0:ee:65:d7:e9:51:47:3a:c2:b2:d0:a9:23:61:b8:
cb:c9:74:2e:46:22:7b:15:c8:19:e5:07:bc:dd:e8:bb:d9:53:
b1:a2:bf:1c:af:72:65:58:10:0d:88:6f:2d:f6:42:58:26:9f:
d3:77:00:6a:cd:7c:4e:cc:46:4b:3d:b4:27:be:88:b7:a4:59:
c7:20:a3:31:9e:c8:08:11:ee:1d:1e:c5:05:73:0f:e5:09:55:
33:b8:72:98:18:30:7d:9e:e3:c5:e9:41:5f:26:46:ec:ff:a0:
0c:5f:58:7b:f9:b5:44:67:cc:dd:50:d8:74:47:be:d3:e4:d1:
28:69:a5:f6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASv7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI0MTUwNjI2WhcNMjUwMzI5MTUwNjI2WjAYMRYw
FAYDVQQDEw02N2JjOGFmNS1kNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAttE9eZdrBpYw7UF9KHpn5bk6+xNrwJhdOqq8zFB9ai694DGvqyEyOp5O
erpVDdHxRboxl6FaIxkiyrNqt5RXRNUD2g/FBrcmOhdt3cl10Bf8JEdYL7gsdE5X
BpGbCUJgHkVaTUCVM8SThzi2/omOcj+Ws3EJIKlbVcAgQlLU3X63qoR7o0Vv7jvp
rzqJWezwFXaYqsat3yN2PylZo9MmrBGckE4BK4BXz9U/NXfB0SSW4LHjeO8PGDdx
Ks0sglKFmwJDSAgSFwna0xhb95OLX3ZE9Hd7JXM8s0BE3kaIwBurri2ObRTD2K9F
MccmQbzJCsYo8JZWJJJv3g94y8Y1BQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHNp
j8qyk4NhgZ8QIkvHp7r4yUt6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQ0Y1QjRFNkYyQzAxMUVGODE3NjEwODk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOY/MA0GCSqGSIb3DQEBCwUA
A4IBAQB2kgbFYUw/I7mjHvb7MtNCTvFDZoBDOUrJSh1+HG9da6wT3BiaW1ywb9f1
2zJyAphhuiwro9MN9+8laOtLTAZXMMjLqHsBxF6UJr3uv85Z7B2Et0dBUzGJcxod
X64AxBI4NVNABCF3Xwap49pACChAg4Li2V5eT4+Z2lkNTLT5znjw7mXX6VFHOsKy
0KkjYbjLyXQuRiJ7FcgZ5Qe83ei72VOxor8cr3JlWBANiG8t9kJYJp/TdwBqzXxO
zEZLPbQnvoi3pFnHIKMxnsgIEe4dHsUFcw/lCVUzuHKYGDB9nuPF6UFfJkbs/6AM
X1h7+bVEZ8zdUNh0R77T5NEoaaX2
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:11:14 2025 by rpki-client