Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F24106ECF43911EF8E65A799762E951A.roa
File: F24106ECF43911EF8E65A799762E951A.roa (raw, json)
Hash identifier: 9X9naF4+jJKy7AOIP8oz5tQlrp+ZtKfZMYTEjebbhVw=
Subject key identifier: 09:61:79:68:8D:6B:26:9A:3F:BB:2E:9E:A9:6F:16:46:DB:11:CD:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013227
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F24106ECF43911EF8E65A799762E951A.roa
Signing time: Wed 26 Feb 2025 12:05:19 +0000
ROA not before: Wed 26 Feb 2025 12:05:15 +0000
ROA not after: Thu 19 Feb 2026 12:05:15 +0000
asID: 984
IP address blocks: 156.252.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78375 (0x13227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:05:15 2025 GMT
Not After : Feb 19 12:05:15 2026 GMT
Subject: CN=67bf037f-5aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:87:ee:aa:d5:d3:a2:90:2a:5b:e1:ef:a9:
52:f0:75:3e:93:31:77:6b:1b:a2:d2:32:bb:5d:b9:
0d:2d:35:37:c9:39:af:1a:60:f3:66:59:29:8d:7b:
f6:f1:85:c9:cb:46:c4:76:90:7c:c0:20:76:1e:3e:
64:c7:d2:38:bb:41:66:9b:0e:f4:1e:2d:57:26:f6:
ec:41:f1:40:6d:3c:81:24:19:10:7c:7f:70:05:df:
ce:00:fd:4f:70:77:3c:3e:b5:d3:aa:02:cd:cd:38:
60:c8:e5:73:61:0a:f9:69:57:1b:55:cd:53:c1:99:
99:fe:08:1c:ef:5e:01:9c:4e:e4:3b:0c:1f:ec:61:
39:e0:be:d9:22:ec:e5:8a:a5:f4:0c:bc:64:2d:66:
8f:70:99:56:00:a9:14:af:de:4e:20:a1:9c:a4:f7:
92:ea:5d:24:9d:10:a8:40:1a:0b:c4:ce:78:b1:a6:
5f:01:f5:ed:57:83:ed:0a:ef:de:0f:66:31:ef:ed:
d7:1c:f8:30:a5:6d:13:ca:5f:58:9e:d6:1f:d8:51:
9b:14:93:cc:10:c7:d2:01:f3:1e:2d:2e:bc:2d:d7:
64:11:aa:2f:13:4a:ce:47:2e:cf:5e:7b:5b:22:1f:
a9:ce:8b:48:67:c2:01:3b:9f:fb:db:cd:2b:9f:01:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:61:79:68:8D:6B:26:9A:3F:BB:2E:9E:A9:6F:16:46:DB:11:CD:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F24106ECF43911EF8E65A799762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.134.0/24
Signature Algorithm: sha256WithRSAEncryption
55:de:54:b5:52:60:c5:3c:43:c3:c7:27:b5:27:04:7e:90:0b:
13:62:79:52:c9:92:64:4a:52:b7:66:e8:c7:68:9c:9b:d5:2e:
d6:5a:79:44:96:41:23:c8:fa:e9:56:c0:a6:5e:54:5e:59:15:
ac:18:26:56:b6:31:4c:a7:41:03:2b:b3:59:23:5e:40:45:8c:
b9:b2:21:ea:a0:b0:1d:48:28:73:89:e9:dc:92:8c:32:df:ef:
f9:a0:4a:4d:cd:29:15:57:a2:6b:9b:d0:40:eb:1e:46:63:93:
7a:2a:3b:82:3b:ba:a3:ac:7f:4b:eb:74:66:c7:b6:02:cf:c8:
9c:70:3c:16:98:22:ec:4b:98:e5:89:07:ed:b8:91:9d:b8:ac:
ad:da:e9:8c:87:d8:50:04:2b:42:1e:b1:db:ea:82:e3:3a:3d:
ce:43:41:90:9d:20:96:cd:09:3d:63:48:56:c4:c8:ae:66:6d:
01:37:bf:fa:f9:8f:5f:5a:29:4c:a7:74:57:ed:e0:ea:af:c4:
78:88:75:e7:01:b3:76:e5:63:12:53:17:e8:aa:39:5a:4c:68:
78:f1:8b:e7:ab:32:d6:d6:8a:09:17:bd:c0:8d:cd:f3:e2:1c:
f9:75:c1:e8:28:fb:05:c8:b0:16:0f:be:ec:a9:da:56:3b:96:
da:ae:8a:fb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATInMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTIwNTE1WhcNMjYwMjE5MTIwNTE1WjAYMRYw
FAYDVQQDEw02N2JmMDM3Zi01YWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2WSH7qrV06KQKlvh76lS8HU+kzF3axui0jK7XbkNLTU3yTmvGmDzZlkp
jXv28YXJy0bEdpB8wCB2Hj5kx9I4u0Fmmw70Hi1XJvbsQfFAbTyBJBkQfH9wBd/O
AP1PcHc8PrXTqgLNzThgyOVzYQr5aVcbVc1TwZmZ/ggc714BnE7kOwwf7GE54L7Z
IuzliqX0DLxkLWaPcJlWAKkUr95OIKGcpPeS6l0knRCoQBoLxM54saZfAfXtV4Pt
Cu/eD2Yx7+3XHPgwpW0Tyl9YntYf2FGbFJPMEMfSAfMeLS68LddkEaovE0rORy7P
XntbIh+pzotIZ8IBO5/7280rnwHRLQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAlh
eWiNayaaP7sunqlvFkbbEc0LMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMjQxMDZFQ0Y0MzkxMUVGOEU2NUE3OTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPyGMA0GCSqGSIb3DQEBCwUA
A4IBAQBV3lS1UmDFPEPDxye1JwR+kAsTYnlSyZJkSlK3ZujHaJyb1S7WWnlElkEj
yPrpVsCmXlReWRWsGCZWtjFMp0EDK7NZI15ARYy5siHqoLAdSChzienckowy3+/5
oEpNzSkVV6Jrm9BA6x5GY5N6KjuCO7qjrH9L63Rmx7YCz8iccDwWmCLsS5jliQft
uJGduKyt2umMh9hQBCtCHrHb6oLjOj3OQ0GQnSCWzQk9Y0hWxMiuZm0BN7/6+Y9f
WilMp3RX7eDqr8R4iHXnAbN25WMSUxfoqjlaTGh48YvnqzLW1ooJF73Ajc3z4hz5
dcHoKPsFyLAWD77sqdpWO5baror7
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:44 2025 by rpki-client