Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/035509EEF42E11EFA97AA446762E951A.roa
File: 035509EEF42E11EFA97AA446762E951A.roa (raw, json)
Hash identifier: YGtcAY/7uVtm8xdY0qnbR5/WaFXzTh/OTWLY9Lz+nRc=
Subject key identifier: 48:34:95:51:B2:3A:23:2E:51:CB:AE:15:A4:1B:DF:E0:4B:D1:24:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013141
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/035509EEF42E11EFA97AA446762E951A.roa
Signing time: Wed 26 Feb 2025 10:39:53 +0000
ROA not before: Wed 26 Feb 2025 10:39:50 +0000
ROA not after: Thu 19 Feb 2026 10:39:50 +0000
asID: 984
IP address blocks: 156.230.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78145 (0x13141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:39:50 2025 GMT
Not After : Feb 19 10:39:50 2026 GMT
Subject: CN=67beef79-ebcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:af:c7:d8:2c:bf:c1:a5:2b:af:80:38:54:
1b:15:55:20:cc:0f:ad:96:a9:0e:81:09:27:a4:a8:
56:03:43:4e:7d:9c:fe:91:34:e0:e6:d6:3e:82:8a:
d6:ee:84:60:e9:18:25:95:76:53:dd:b1:0c:30:fc:
e0:3c:24:40:1d:42:b0:f9:73:99:5e:5a:63:99:d0:
88:29:e5:18:f4:85:2c:ed:71:3b:0c:02:2b:23:60:
48:bc:72:57:da:ac:e3:89:cf:0b:e4:6a:83:ee:56:
d2:e1:c7:3b:7c:07:f2:69:54:5a:45:6d:fd:42:ce:
22:78:19:0b:37:95:66:d2:d5:7b:20:87:f2:f8:9c:
55:69:a4:c9:be:4d:93:f9:ba:80:00:0a:14:84:2b:
33:9a:1b:65:ba:e8:4c:13:77:7a:53:a2:d3:12:82:
28:49:93:c1:96:96:be:ad:20:51:37:44:2d:47:c2:
da:33:3d:09:27:27:5a:33:df:8c:4b:09:6b:a0:b9:
f9:d4:e9:d3:92:d6:86:ac:09:4d:2c:3e:11:f0:ac:
77:26:05:43:12:98:dc:2b:0f:64:b3:6f:42:c2:c6:
79:af:ff:6a:a6:f8:e3:4b:e9:fb:ee:9e:2f:3a:50:
be:02:42:2d:7a:4e:59:0c:ef:cb:39:00:78:9d:d9:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:34:95:51:B2:3A:23:2E:51:CB:AE:15:A4:1B:DF:E0:4B:D1:24:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/035509EEF42E11EFA97AA446762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.165.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0a:47:f4:4e:3a:75:78:7b:5b:3d:43:fe:64:8b:80:75:89:
e5:f8:ff:b4:30:9c:75:bc:c0:f1:fe:c0:13:09:33:e5:fa:48:
b0:2e:06:2d:2f:7b:98:fb:ac:07:ca:29:ef:b7:a5:ea:fb:99:
b9:bd:2f:b9:7c:1f:02:14:a3:77:97:d4:94:af:25:e6:30:ef:
83:52:77:5f:17:0e:3b:c1:64:d9:83:16:e8:01:6e:2a:29:9a:
e8:5b:05:a6:c3:0b:35:38:c4:f9:a0:eb:68:ae:32:8e:78:84:
c1:1a:98:98:dc:cb:46:20:16:2e:7c:af:57:b7:9f:3a:36:4c:
43:fd:18:ea:37:7a:1e:21:6e:a3:06:8b:b2:8f:5f:ec:c2:0e:
44:16:4a:d5:11:29:dc:de:b0:f8:87:ea:e8:91:11:fc:7c:8f:
4c:9f:cb:d3:6b:d0:42:0e:72:39:87:83:29:3e:9f:bf:27:a1:
4b:4e:09:cb:27:99:0e:92:03:d1:73:d0:67:3e:b6:c0:f7:72:
e9:c2:65:a1:47:ce:21:a3:a9:ac:67:63:c8:47:1f:1c:0e:6d:
b4:82:a3:3a:fb:9b:b6:eb:e5:9b:86:b9:dc:6c:20:a7:f2:de:
54:62:4e:8c:6d:fb:02:93:b5:f6:6d:9f:4d:c0:87:5f:07:91:
5b:0f:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:59 2025 by rpki-client