Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5C51ABAF06011EFAC0A158E762E951A.roa
File: F5C51ABAF06011EFAC0A158E762E951A.roa (raw, json)
Hash identifier: vya1nd1fEJiwslixQRAFWhF//PysP07ulPIxMlHBxWY=
Subject key identifier: F9:B7:4F:5E:96:68:F8:90:12:F3:7C:73:0A:35:E7:E4:02:04:AF:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01288A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5C51ABAF06011EFAC0A158E762E951A.roa
Signing time: Fri 21 Feb 2025 14:34:30 +0000
ROA not before: Fri 21 Feb 2025 14:34:26 +0000
ROA not after: Fri 15 Aug 2025 14:34:26 +0000
asID: 55933
IP address blocks: 156.254.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75914 (0x1288a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 21 14:34:26 2025 GMT
Not After : Aug 15 14:34:26 2025 GMT
Subject: CN=67b88ef6-76ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:35:72:5f:d1:5f:5c:1f:ae:dc:ae:c0:47:
71:ae:30:34:1a:16:e8:3f:f2:32:f8:2d:ae:0f:c5:
cf:4e:cb:ae:04:71:f9:84:d1:b8:af:30:ff:9c:e5:
ba:26:bb:d4:d8:2d:1b:ef:43:77:ad:4a:31:f7:f5:
6d:f9:83:70:7e:10:89:80:33:52:02:7d:b4:06:f0:
70:4e:59:32:b2:99:8e:4c:fb:e4:6f:55:89:ed:db:
52:87:52:39:e4:a6:20:08:c3:23:1d:3c:90:a9:99:
00:7e:9b:28:3a:59:e6:87:0c:0e:a0:31:93:a2:5f:
be:33:3d:4e:de:88:bb:42:8e:31:5d:98:5d:9d:7b:
21:26:d9:66:30:1b:64:63:0b:be:bb:bf:5f:4f:72:
27:a0:13:ea:8f:47:58:73:44:e5:f2:0e:dc:30:38:
9e:99:18:4a:3c:55:2f:da:51:d4:95:8b:55:c1:42:
c7:4b:f6:ef:ec:07:54:ba:13:1e:c9:11:81:15:e3:
9c:e6:f6:78:2a:4a:24:6b:fd:20:4c:38:80:39:09:
0d:ef:20:e4:7c:f0:18:39:69:95:2a:d2:4f:32:29:
a8:b0:e0:ba:96:39:ae:2b:20:02:a8:11:a1:68:9d:
73:50:94:7f:42:1d:48:ad:3e:75:36:55:02:a7:f8:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B7:4F:5E:96:68:F8:90:12:F3:7C:73:0A:35:E7:E4:02:04:AF:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5C51ABAF06011EFAC0A158E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.6.0/23
Signature Algorithm: sha256WithRSAEncryption
94:42:95:48:2a:ba:26:f1:c8:3c:63:ab:17:30:bb:39:9f:4f:
82:f8:9c:3e:d3:37:32:04:e1:4b:6b:87:92:9b:25:09:a6:c4:
cd:c5:b1:fc:0e:d9:f6:6b:3a:4b:52:43:66:04:b0:c4:6c:01:
1d:35:db:fb:85:89:91:08:ab:a5:22:83:44:83:41:e4:bf:19:
0e:14:6f:a1:e3:d2:24:26:a2:b2:53:44:d7:41:d8:a1:49:05:
12:53:6e:e6:f6:a3:21:bf:27:ba:3b:1a:0e:26:28:8e:8e:9e:
bb:c2:f3:ad:47:6f:af:ee:55:c9:de:6a:e6:48:3e:e4:fd:74:
16:0d:02:16:8a:46:af:bf:63:af:2a:41:08:ef:37:28:c1:64:
f1:d6:31:34:ed:5f:52:b2:d5:9b:a1:90:ce:82:e2:b3:44:2c:
a7:d4:1e:1a:ad:e0:ec:0d:f1:07:b3:1a:16:65:1a:2f:88:46:
cf:68:5d:9a:a8:e2:87:d6:7d:5c:cd:c6:d2:90:82:1d:11:ab:
b3:62:78:af:55:8d:1a:ca:b0:f6:ea:78:f9:a9:4f:d3:1a:96:
0e:80:7c:3e:e5:95:40:98:6b:e5:cf:85:5d:bc:ec:20:0a:9c:
57:0c:c1:85:98:a3:b7:a8:c3:b6:e6:ea:28:74:48:82:97:11:
06:3b:ba:38
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASiKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjIxMTQzNDI2WhcNMjUwODE1MTQzNDI2WjAYMRYw
FAYDVQQDEw02N2I4OGVmNi03NmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtKk1cl/RX1wfrtyuwEdxrjA0GhboP/Iy+C2uD8XPTsuuBHH5hNG4rzD/
nOW6JrvU2C0b70N3rUox9/Vt+YNwfhCJgDNSAn20BvBwTlkyspmOTPvkb1WJ7dtS
h1I55KYgCMMjHTyQqZkAfpsoOlnmhwwOoDGTol++Mz1O3oi7Qo4xXZhdnXshJtlm
MBtkYwu+u79fT3InoBPqj0dYc0Tl8g7cMDiemRhKPFUv2lHUlYtVwULHS/bv7AdU
uhMeyRGBFeOc5vZ4Kkoka/0gTDiAOQkN7yDkfPAYOWmVKtJPMimosOC6ljmuKyAC
qBGhaJ1zUJR/Qh1IrT51NlUCp/g9KwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPm3
T16WaPiQEvN8cwo15+QCBK+CMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNUM1MUFCQUYwNjAxMUVGQUMwQTE1OEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP4GMA0GCSqGSIb3DQEBCwUA
A4IBAQCUQpVIKrom8cg8Y6sXMLs5n0+C+Jw+0zcyBOFLa4eSmyUJpsTNxbH8Dtn2
azpLUkNmBLDEbAEdNdv7hYmRCKulIoNEg0HkvxkOFG+h49IkJqKyU0TXQdihSQUS
U27m9qMhvye6OxoOJiiOjp67wvOtR2+v7lXJ3mrmSD7k/XQWDQIWikavv2OvKkEI
7zcowWTx1jE07V9SstWboZDOguKzRCyn1B4areDsDfEHsxoWZRoviEbPaF2aqOKH
1n1czcbSkIIdEauzYnivVY0ayrD26nj5qU/TGpYOgHw+5ZVAmGvlz4VdvOwgCpxX
DMGFmKO3qMO25uoodEiClxEGO7o4
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:33 2025 by rpki-client