Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23B1C7F8CCC011EF9ED79396762E951A.roa
File: 23B1C7F8CCC011EF9ED79396762E951A.roa (raw, json)
Hash identifier: phsbLaz66dAtItAQcs6xa4KZ0fvSpOVrMdogE3C4H0g=
Subject key identifier: BF:C0:B0:DE:CC:B1:E6:B2:26:EE:AC:10:4D:06:21:2C:1B:85:A9:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA1A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23B1C7F8CCC011EF9ED79396762E951A.roa
Signing time: Tue 07 Jan 2025 06:25:08 +0000
ROA not before: Tue 07 Jan 2025 06:25:04 +0000
ROA not after: Sat 13 Dec 2025 06:25:04 +0000
asID: 984
IP address blocks: 156.233.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64026 (0xfa1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 06:25:04 2025 GMT
Not After : Dec 13 06:25:04 2025 GMT
Subject: CN=677cc8c4-d497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:b5:fe:c7:c7:2d:8c:a4:88:0f:dd:3c:e2:
88:4d:b1:8d:93:3d:44:e9:2c:60:e2:73:4a:2f:d5:
31:bc:2f:61:08:ff:be:35:5e:a1:7a:7d:d8:f2:cc:
a2:7b:1f:d9:75:df:3f:cc:a6:9b:8c:81:0c:66:90:
fd:43:d3:db:97:42:21:c4:ef:cb:10:ed:44:21:48:
ae:d3:4b:c1:cc:d2:58:a7:2f:77:9c:3c:21:24:ed:
35:ad:4a:4d:30:20:7a:ad:f5:ce:9f:c7:19:2d:6d:
47:35:1b:4b:ec:8a:95:66:02:38:ad:e9:18:ef:e3:
73:d5:94:a2:98:c7:3b:0d:9f:32:7f:da:19:67:eb:
79:b7:9f:40:8d:c3:55:90:4b:80:f5:7b:c2:ba:9c:
d0:05:19:4c:4c:94:0e:e5:cb:b8:ca:c5:00:51:19:
30:68:ac:f3:3e:d1:9c:cf:30:c3:ca:d5:ab:6d:69:
2e:54:4c:85:ce:28:76:36:89:80:b8:62:66:13:b8:
1c:57:5a:81:f1:3e:c0:4e:7c:f7:98:aa:89:05:9c:
52:34:2c:85:53:6b:61:a9:2e:a0:f4:7e:bd:60:5e:
d1:e2:bd:5e:f2:71:98:c7:e1:7f:23:07:12:eb:3a:
11:29:0b:15:c9:57:05:95:92:45:f3:96:0c:91:e3:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C0:B0:DE:CC:B1:E6:B2:26:EE:AC:10:4D:06:21:2C:1B:85:A9:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23B1C7F8CCC011EF9ED79396762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.36.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1a:89:e2:d4:94:68:f1:78:2c:80:06:40:45:f6:bf:22:05:
8a:10:16:6a:5d:28:90:a8:2f:8e:88:92:94:b0:88:2f:a4:26:
0e:12:1a:a5:79:cd:4c:7a:b7:6d:1b:8a:4a:26:d8:91:b6:83:
0f:f5:19:06:13:a2:31:6d:b0:22:16:3d:3f:0a:80:44:cb:95:
e1:9a:bd:6f:de:58:2f:0b:a8:3d:7e:66:67:93:2a:f6:98:97:
44:ff:c9:6b:5e:f8:0a:36:f9:68:02:f7:b6:a0:e4:3b:f0:12:
45:06:e4:28:b8:ea:a8:9d:7f:05:45:43:c6:ea:95:44:78:5d:
3a:8a:d9:58:be:c1:ee:8d:61:f8:80:e7:0d:13:13:fa:3b:7d:
3f:a6:f1:1a:ca:56:4b:b0:92:02:e5:5d:52:d4:35:a0:02:d9:
56:b4:ed:84:d5:88:b3:1d:17:74:1a:90:12:cc:63:29:8d:e0:
6e:ca:f7:2a:ff:46:48:83:0c:99:7e:c0:87:ba:b9:b0:18:f6:
38:9c:0d:f2:a1:95:7d:ba:2a:de:66:c7:6d:4f:2b:a3:16:8e:
1b:63:ad:16:11:d8:0d:d3:f5:57:08:e9:49:c1:04:62:21:7a:
51:ac:df:7a:70:90:f2:ed:a5:25:c2:ba:51:c8:1a:d8:49:19:
c4:58:ff:93
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPoaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDYyNTA0WhcNMjUxMjEzMDYyNTA0WjAYMRYw
FAYDVQQDEw02NzdjYzhjNC1kNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA54+1/sfHLYykiA/dPOKITbGNkz1E6Sxg4nNKL9UxvC9hCP++NV6hen3Y
8syiex/Zdd8/zKabjIEMZpD9Q9Pbl0IhxO/LEO1EIUiu00vBzNJYpy93nDwhJO01
rUpNMCB6rfXOn8cZLW1HNRtL7IqVZgI4rekY7+Nz1ZSimMc7DZ8yf9oZZ+t5t59A
jcNVkEuA9XvCupzQBRlMTJQO5cu4ysUAURkwaKzzPtGczzDDytWrbWkuVEyFzih2
NomAuGJmE7gcV1qB8T7ATnz3mKqJBZxSNCyFU2thqS6g9H69YF7R4r1e8nGYx+F/
IwcS6zoRKQsVyVcFlZJF85YMkeNsYQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL/A
sN7MseayJu6sEE0GISwbhakTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yM0IxQzdGOENDQzAxMUVGOUVENzkzOTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOkkMA0GCSqGSIb3DQEBCwUA
A4IBAQCSGoni1JRo8XgsgAZARfa/IgWKEBZqXSiQqC+OiJKUsIgvpCYOEhqlec1M
erdtG4pKJtiRtoMP9RkGE6IxbbAiFj0/CoBEy5Xhmr1v3lgvC6g9fmZnkyr2mJdE
/8lrXvgKNvloAve2oOQ78BJFBuQouOqonX8FRUPG6pVEeF06itlYvsHujWH4gOcN
ExP6O30/pvEaylZLsJIC5V1S1DWgAtlWtO2E1YizHRd0GpASzGMpjeBuyvcq/0ZI
gwyZfsCHurmwGPY4nA3yoZV9uireZsdtTyujFo4bY60WEdgN0/VXCOlJwQRiIXpR
rN96cJDy7aUlwrpRyBrYSRnEWP+T
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:45:42 2025 by rpki-client