Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9755B72CD3D11EF8B9B77AE762E951A.roa
File: D9755B72CD3D11EF8B9B77AE762E951A.roa (raw, json)
Hash identifier: xl7NmkeKPriwyete/rZ/ldk+OiZdh256JvEGDNro0JQ=
Subject key identifier: 00:33:11:29:2A:E6:AE:BF:92:09:69:20:2A:37:54:44:37:F3:E9:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9755B72CD3D11EF8B9B77AE762E951A.roa
Signing time: Tue 07 Jan 2025 21:25:00 +0000
ROA not before: Tue 07 Jan 2025 21:24:56 +0000
ROA not after: Sat 13 Dec 2025 21:24:56 +0000
asID: 984
IP address blocks: 156.243.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65111 (0xfe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 21:24:56 2025 GMT
Not After : Dec 13 21:24:56 2025 GMT
Subject: CN=677d9bac-bf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:76:59:cd:a2:c0:09:67:e8:a4:b8:dc:b9:
51:f8:15:6b:03:7f:fd:04:b7:f2:49:25:c8:ad:43:
c2:b4:dd:5d:29:1c:02:74:e7:d3:7b:84:c2:5a:53:
79:bc:01:b0:3c:99:8b:10:5e:f4:91:7d:e4:4f:c5:
cb:db:59:41:d4:5d:7e:8b:6d:6e:49:47:a5:e9:a0:
df:d0:44:a1:b9:af:34:ab:65:a5:24:31:a6:da:b5:
c7:4d:75:8f:55:17:57:25:65:92:09:0e:42:fa:3c:
39:d7:2a:a6:bd:27:41:5b:8e:c1:dd:87:27:e1:c9:
07:e1:8e:e6:66:ed:78:f7:95:84:21:46:75:26:f5:
d1:8b:1a:48:19:46:ce:26:ca:97:8a:e4:ba:26:29:
93:8f:34:f8:7e:1c:81:17:82:f8:08:a1:8f:cd:fa:
ec:3c:35:74:f6:c4:93:51:04:22:5b:74:5f:0e:51:
01:7e:c5:e0:ce:57:7e:3d:9c:45:53:00:d3:3c:2e:
7e:b4:c3:9a:29:e5:9c:25:d3:23:6a:f4:56:72:65:
e9:e2:e6:f2:6e:28:85:d1:f3:a0:37:b1:fc:b0:57:
aa:3c:e8:7f:f0:34:dd:12:0b:9e:ac:89:42:1a:76:
e0:74:d0:0f:33:f8:af:71:3f:9e:b4:42:2a:2f:2b:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:33:11:29:2A:E6:AE:BF:92:09:69:20:2A:37:54:44:37:F3:E9:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9755B72CD3D11EF8B9B77AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.84.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8e:4e:05:a3:64:2b:c2:11:4b:ae:cf:b6:bb:c9:b9:2a:9d:
d5:cc:ec:0c:8f:7c:d2:32:73:c4:75:d6:b4:a8:bb:42:3c:35:
75:0e:5c:3e:f9:a9:46:5d:d8:ce:c2:f4:64:b8:30:cb:02:61:
7f:83:18:dd:7b:cc:47:79:78:ee:9f:7f:f8:de:5e:0c:6f:27:
4a:7e:7a:98:8d:62:ac:60:3d:38:a0:dc:d5:1a:c3:89:4c:aa:
fe:9d:06:3d:a0:d7:48:a9:0c:16:0c:f7:ce:e3:19:4b:6c:f0:
3a:a7:74:f2:54:90:34:24:86:14:19:34:20:3b:a9:ea:b0:1a:
31:53:16:bb:a5:94:55:ee:ba:38:f9:a9:b8:96:ec:7d:87:4a:
ae:88:32:37:b1:2f:4b:56:0a:83:94:d1:fb:20:59:66:48:33:
12:5f:23:27:d5:03:cd:e0:6f:46:4d:1f:eb:38:04:24:38:a8:
a8:a3:15:57:12:8b:60:8b:67:49:3b:16:35:cc:d2:93:01:b3:
a8:12:4e:32:b6:32:f7:c7:32:42:0a:7a:ae:9c:78:7b:e9:29:
96:1e:06:de:be:4f:28:4f:0d:af:76:a2:b3:07:6d:e9:93:9d:
8a:f1:0b:6c:c2:aa:4a:cc:c6:4d:ea:f7:94:eb:41:5b:89:7e:
2e:4a:00:23
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP5XMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MjEyNDU2WhcNMjUxMjEzMjEyNDU2WjAYMRYw
FAYDVQQDEw02NzdkOWJhYy1iZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyo92Wc2iwAln6KS43LlR+BVrA3/9BLfySSXIrUPCtN1dKRwCdOfTe4TC
WlN5vAGwPJmLEF70kX3kT8XL21lB1F1+i21uSUel6aDf0EShua80q2WlJDGm2rXH
TXWPVRdXJWWSCQ5C+jw51yqmvSdBW47B3Ycn4ckH4Y7mZu1495WEIUZ1JvXRixpI
GUbOJsqXiuS6JimTjzT4fhyBF4L4CKGPzfrsPDV09sSTUQQiW3RfDlEBfsXgzld+
PZxFUwDTPC5+tMOaKeWcJdMjavRWcmXp4ubybiiF0fOgN7H8sFeqPOh/8DTdEgue
rIlCGnbgdNAPM/ivcT+etEIqLyv+8wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAAz
ESkq5q6/kglpICo3VEQ38+mZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOTc1NUI3MkNEM0QxMUVGOEI5Qjc3QUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPNUMA0GCSqGSIb3DQEBCwUA
A4IBAQALjk4Fo2QrwhFLrs+2u8m5Kp3VzOwMj3zSMnPEdda0qLtCPDV1Dlw++alG
XdjOwvRkuDDLAmF/gxjde8xHeXjun3/43l4MbydKfnqYjWKsYD04oNzVGsOJTKr+
nQY9oNdIqQwWDPfO4xlLbPA6p3TyVJA0JIYUGTQgO6nqsBoxUxa7pZRV7ro4+am4
lux9h0quiDI3sS9LVgqDlNH7IFlmSDMSXyMn1QPN4G9GTR/rOAQkOKiooxVXEotg
i2dJOxY1zNKTAbOoEk4ytjL3xzJCCnqunHh76SmWHgbevk8oTw2vdqKzB23pk52K
8QtswqpKzMZN6veU60FbiX4uSgAj
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:31:04 2025 by rpki-client