Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDA8A06C04BA11F092BBCCA6762E951A.roa
File: FDA8A06C04BA11F092BBCCA6762E951A.roa (raw, json)
Hash identifier: B6wwTloIxgAYBMnXmz0QLRFxCvrCsYyl7qLC3Dgp4ms=
Subject key identifier: F0:E5:CB:AD:05:E3:68:B0:D1:3C:6B:9D:7C:8D:25:6A:43:08:6C:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDA8A06C04BA11F092BBCCA6762E951A.roa
Signing time: Wed 19 Mar 2025 12:09:22 +0000
ROA not before: Wed 19 Mar 2025 12:09:18 +0000
ROA not after: Tue 22 Apr 2025 12:09:18 +0000
asID: 213725
IP address blocks: 156.253.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83708 (0x146fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 19 12:09:18 2025 GMT
Not After : Apr 22 12:09:18 2025 GMT
Subject: CN=67dab3f1-ff82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:1a:df:9f:33:3c:15:a3:3f:c6:9b:b7:4c:
e8:01:50:04:3f:d2:6a:84:6f:c6:a8:0d:2b:79:6d:
6d:a8:a5:bb:d0:3c:6d:77:de:6c:10:4d:38:95:0b:
60:14:58:37:a5:5c:24:60:9c:65:a1:0e:63:a9:5f:
36:01:83:5e:93:e9:92:09:bb:a2:a9:8f:19:e1:0f:
ad:7f:ac:c0:e0:55:b6:d1:fa:c2:67:c0:dd:fd:71:
f8:9a:e9:e1:a4:92:0e:32:db:62:1a:da:87:12:bb:
95:11:b1:f4:55:8c:ea:28:31:e7:15:2c:87:b6:43:
fe:ab:33:36:03:bd:d6:a0:14:bd:cf:ed:19:d8:9c:
f0:d3:79:82:36:f5:04:51:fb:fc:03:e5:08:7c:b1:
61:b7:bc:96:20:88:6b:df:cc:6f:42:00:02:78:97:
2c:40:33:57:91:c6:de:d1:23:2e:c1:a0:07:55:09:
fc:27:23:40:68:d0:5b:35:62:44:1e:6f:a8:cd:2b:
a8:06:68:44:47:81:1c:9e:b8:34:0a:6a:8c:d6:27:
e8:e2:25:98:3f:c5:1e:75:14:d9:86:d5:ac:c6:ec:
80:2e:e7:2c:05:99:50:18:8d:b1:06:87:58:f6:f1:
cf:3f:14:20:58:91:d7:0a:04:7a:75:df:f8:72:29:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E5:CB:AD:05:E3:68:B0:D1:3C:6B:9D:7C:8D:25:6A:43:08:6C:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDA8A06C04BA11F092BBCCA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:57:45:55:1a:7f:68:c1:1e:00:fd:27:3a:8d:7a:f2:5d:87:
83:e2:05:4e:b1:7c:c4:ca:07:f3:43:13:f9:24:f5:c5:d8:92:
57:7c:54:b6:00:a2:a4:15:11:bb:6f:a0:5c:eb:bf:36:27:e5:
98:66:ef:a9:c9:79:9f:c5:5a:97:ab:9a:70:85:09:26:5f:50:
47:f1:15:46:80:bf:fb:74:c7:fa:45:1f:02:59:b9:ed:d2:0d:
ec:6b:57:9a:d8:10:a4:07:bf:71:3f:a7:00:9d:a6:a0:43:13:
3e:de:f1:9b:08:a6:0b:82:de:88:15:90:50:bf:f5:33:e9:16:
d2:73:73:ca:8f:61:0c:ed:ae:42:0e:4f:5c:6b:31:e9:67:7b:
a8:d6:de:c4:87:21:36:07:85:31:53:fc:91:b6:57:3a:5c:ec:
b9:0e:c1:b0:5c:fb:ab:8d:05:b4:b8:65:24:66:5d:3d:d1:f7:
d6:62:84:c0:67:aa:67:69:5b:d0:57:10:c4:8c:4d:35:34:31:
0c:0e:18:c3:5f:71:18:6a:7b:f3:4a:2f:f6:f3:95:51:b9:9f:
28:b2:2f:f7:74:a9:c8:b0:0c:21:a6:e0:fb:e5:74:cd:ae:68:
29:8c:73:ae:72:3c:d4:e1:fd:bd:52:57:05:67:38:19:6c:04:
bd:d6:25:df
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUb8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE5MTIwOTE4WhcNMjUwNDIyMTIwOTE4WjAYMRYw
FAYDVQQDEw02N2RhYjNmMS1mZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArVYa358zPBWjP8abt0zoAVAEP9JqhG/GqA0reW1tqKW70Dxtd95sEE04
lQtgFFg3pVwkYJxloQ5jqV82AYNek+mSCbuiqY8Z4Q+tf6zA4FW20frCZ8Dd/XH4
munhpJIOMttiGtqHEruVEbH0VYzqKDHnFSyHtkP+qzM2A73WoBS9z+0Z2Jzw03mC
NvUEUfv8A+UIfLFht7yWIIhr38xvQgACeJcsQDNXkcbe0SMuwaAHVQn8JyNAaNBb
NWJEHm+ozSuoBmhER4Ecnrg0CmqM1ifo4iWYP8UedRTZhtWsxuyALucsBZlQGI2x
BodY9vHPPxQgWJHXCgR6dd/4cinAqQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPDl
y60F42iw0TxrnXyNJWpDCGwtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GREE4QTA2QzA0QkExMUYwOTJCQkNDQTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP36MA0GCSqGSIb3DQEBCwUA
A4IBAQB+V0VVGn9owR4A/Sc6jXryXYeD4gVOsXzEygfzQxP5JPXF2JJXfFS2AKKk
FRG7b6Bc6782J+WYZu+pyXmfxVqXq5pwhQkmX1BH8RVGgL/7dMf6RR8CWbnt0g3s
a1ea2BCkB79xP6cAnaagQxM+3vGbCKYLgt6IFZBQv/Uz6RbSc3PKj2EM7a5CDk9c
azHpZ3uo1t7EhyE2B4UxU/yRtlc6XOy5DsGwXPurjQW0uGUkZl090ffWYoTAZ6pn
aVvQVxDEjE01NDEMDhjDX3EYanvzSi/285VRuZ8osi/3dKnIsAwhpuD75XTNrmgp
jHOucjzU4f29UlcFZzgZbAS91iXf
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:14 2025 by rpki-client