Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE05E218CD7B11EF8FFC8C4C762E951A.roa
File: DE05E218CD7B11EF8FFC8C4C762E951A.roa (raw, json)
Hash identifier: aKDNJhRyghyhRvUdGxRbgsL3W+JF1CmniWGwmOMOkB8=
Subject key identifier: 2E:D9:2B:EC:D9:70:A8:52:D2:DC:86:E5:FD:A1:2C:63:1E:14:35:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFDD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE05E218CD7B11EF8FFC8C4C762E951A.roa
Signing time: Wed 08 Jan 2025 04:48:56 +0000
ROA not before: Wed 08 Jan 2025 04:48:52 +0000
ROA not after: Sat 13 Dec 2025 04:48:52 +0000
asID: 984
IP address blocks: 156.250.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65501 (0xffdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 8 04:48:52 2025 GMT
Not After : Dec 13 04:48:52 2025 GMT
Subject: CN=677e03b8-0553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:9e:10:b3:89:84:46:de:d7:f4:f0:74:22:
d3:c6:f8:03:f2:d0:16:fe:3e:48:1b:26:ec:59:77:
41:f9:5d:f4:0f:c1:2f:40:15:f1:14:5d:49:4c:1a:
01:01:60:40:2c:c2:92:6a:10:dc:cb:b9:c0:45:a0:
74:c3:2a:74:33:d4:1b:68:ed:93:a9:95:65:ee:1c:
f1:54:45:67:30:89:15:b4:5a:9e:03:cb:9f:cb:66:
54:92:59:12:8b:3f:0f:99:ac:36:7c:db:60:2b:c2:
75:1c:76:5e:26:5e:72:db:16:63:a3:74:47:67:68:
b3:fa:5e:cc:42:44:16:91:ec:d8:90:82:1b:81:07:
6e:a5:de:ec:aa:fe:31:fe:79:6e:06:59:b1:b1:37:
82:03:6d:bf:49:ba:bd:05:48:c9:5e:7c:5e:50:fa:
05:6a:a1:01:8d:b4:59:4b:8d:58:60:a2:0c:6e:f6:
64:2e:0b:02:45:cf:57:b8:a5:63:8c:99:d7:10:bf:
f4:28:8f:00:92:55:ca:8c:ca:c5:f3:5c:03:87:8e:
2c:45:de:82:9f:22:87:01:c7:b1:40:3c:2f:c9:fd:
1e:a8:c8:66:a2:11:35:e3:c7:be:09:06:b8:d0:3d:
5a:1a:d6:5f:7f:c7:16:66:98:d3:c7:5b:a2:90:48:
ad:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D9:2B:EC:D9:70:A8:52:D2:DC:86:E5:FD:A1:2C:63:1E:14:35:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE05E218CD7B11EF8FFC8C4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:64:72:ce:81:c7:ff:aa:59:48:53:4b:ba:83:5e:b8:23:cd:
b5:ef:51:1e:93:f7:f6:61:e4:dd:c6:bc:5d:70:62:eb:b5:c6:
c6:ad:c4:72:7d:48:5d:d0:b5:ec:d4:89:1b:5c:93:68:59:7c:
47:6e:d7:46:8d:38:de:c0:39:50:08:4f:cd:0b:3b:14:96:dc:
16:66:c5:f5:2c:34:37:9a:33:83:dd:98:63:bb:7d:d1:03:3a:
4b:4d:8c:bd:d5:2a:78:a7:b9:42:d6:54:b5:f4:6e:d3:02:bd:
21:7a:61:0b:68:84:24:ca:80:a1:a8:93:69:ff:21:47:81:0a:
27:16:b0:9d:4f:6b:c4:fd:6e:dd:f9:19:a5:0b:96:27:3d:b4:
c9:62:7c:9e:7c:97:c5:2e:59:bb:2e:9a:41:ae:2c:dd:4f:c1:
12:f3:50:03:3a:78:f4:43:16:ee:ad:75:53:0f:e5:2a:e7:96:
39:d1:69:cb:d5:32:2d:cb:48:31:7b:aa:81:6f:94:cd:ef:fb:
14:f2:12:2f:06:68:fd:5c:91:3d:db:2d:e7:a4:f0:41:fc:54:
5d:70:9f:3c:39:a7:6b:cc:29:ca:69:cd:ee:c1:a5:7e:03:fd:
e4:e9:65:44:c9:dc:6d:ce:97:09:99:b6:7f:34:8c:21:0d:cf:
7f:82:fb:cf
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP/dMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDQ0ODUyWhcNMjUxMjEzMDQ0ODUyWjAYMRYw
FAYDVQQDEw02NzdlMDNiOC0wNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsBWeELOJhEbe1/TwdCLTxvgD8tAW/j5IGybsWXdB+V30D8EvQBXxFF1J
TBoBAWBALMKSahDcy7nARaB0wyp0M9QbaO2TqZVl7hzxVEVnMIkVtFqeA8ufy2ZU
klkSiz8Pmaw2fNtgK8J1HHZeJl5y2xZjo3RHZ2iz+l7MQkQWkezYkIIbgQdupd7s
qv4x/nluBlmxsTeCA22/Sbq9BUjJXnxeUPoFaqEBjbRZS41YYKIMbvZkLgsCRc9X
uKVjjJnXEL/0KI8AklXKjMrF81wDh44sRd6CnyKHAcexQDwvyf0eqMhmohE148e+
CQa40D1aGtZff8cWZpjTx1uikEit3wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC7Z
K+zZcKhS0tyG5f2hLGMeFDW1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERTA1RTIxOENEN0IxMUVGOEZGQzhDNEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPo0MA0GCSqGSIb3DQEBCwUA
A4IBAQAbZHLOgcf/qllIU0u6g164I82171Eek/f2YeTdxrxdcGLrtcbGrcRyfUhd
0LXs1IkbXJNoWXxHbtdGjTjewDlQCE/NCzsUltwWZsX1LDQ3mjOD3Zhju33RAzpL
TYy91Sp4p7lC1lS19G7TAr0hemELaIQkyoChqJNp/yFHgQonFrCdT2vE/W7d+Rml
C5YnPbTJYnyefJfFLlm7LppBrizdT8ES81ADOnj0QxburXVTD+Uq55Y50WnL1TIt
y0gxe6qBb5TN7/sU8hIvBmj9XJE92y3npPBB/FRdcJ88OadrzCnKac3uwaV+A/3k
6WVEydxtzpcJmbZ/NIwhDc9/gvvP
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:25:12 2025 by rpki-client