Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03B602ACF4A211EF90C9C267762E951A.roa
File: 03B602ACF4A211EF90C9C267762E951A.roa (raw, json)
Hash identifier: n0zLAQYsco4uDFd9wthiBsz11R3AOBBixocpov3jZ8A=
Subject key identifier: 41:7A:51:6E:1C:D0:26:4E:C5:8F:15:A6:56:D5:65:B1:5E:3C:5D:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013875
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03B602ACF4A211EF90C9C267762E951A.roa
Signing time: Thu 27 Feb 2025 00:30:16 +0000
ROA not before: Thu 27 Feb 2025 00:00:12 +0000
ROA not after: Thu 19 Feb 2026 00:00:12 +0000
asID: 984
IP address blocks: 156.232.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79989 (0x13875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:12 2025 GMT
Not After : Feb 19 00:00:12 2026 GMT
Subject: CN=67bfb217-f299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:29:ba:e6:43:08:bf:c2:e7:4f:ad:45:31:
d2:7b:17:4a:55:1c:f6:cf:51:3c:e4:0d:33:18:6f:
b3:36:5c:91:46:17:6d:b4:2d:d2:da:16:30:db:08:
3d:4c:34:94:f6:32:70:5d:95:c8:d1:4b:44:8f:1d:
6e:12:c7:74:61:5a:fa:21:3e:9c:7b:1c:85:30:7a:
e0:d9:8a:66:4a:4f:6c:c5:72:ef:4f:70:13:94:f3:
b2:22:f3:fd:1b:c7:16:0d:ca:cd:e8:31:64:9d:01:
4d:09:6c:60:39:0f:62:ba:a4:fe:2a:1b:57:c6:34:
dc:ba:7d:6d:6a:93:fa:f8:12:56:8b:89:81:ba:0d:
e1:95:0e:9a:62:67:a8:c7:f2:1e:21:cd:80:7e:3b:
f4:c4:78:75:83:ae:58:f6:1e:25:11:65:1f:d1:4a:
01:8e:1e:8b:23:c6:df:9a:5a:fe:2a:1b:00:b8:0e:
fb:db:5a:9a:31:d5:fc:21:29:bf:69:7c:7a:56:b8:
af:8b:d8:5c:2e:32:cc:ff:4d:d4:9a:44:fd:4d:72:
31:19:d4:b7:85:33:0a:0c:61:8c:a6:d2:4c:77:d9:
7e:93:57:37:6d:9b:86:22:73:01:00:a2:dc:3f:89:
e9:9f:c7:61:cc:fd:af:4d:a7:40:76:54:79:99:c4:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7A:51:6E:1C:D0:26:4E:C5:8F:15:A6:56:D5:65:B1:5E:3C:5D:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03B602ACF4A211EF90C9C267762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.66.0/24
Signature Algorithm: sha256WithRSAEncryption
85:96:60:45:a3:48:b2:4a:6c:4d:7a:cf:44:54:18:6d:1e:01:
ed:f3:46:3a:61:f1:77:1d:d0:69:06:af:f4:12:ff:6c:64:2a:
7a:59:4b:9d:44:d6:c0:0b:cd:4f:74:d6:81:db:19:12:51:70:
74:d8:8f:60:ff:6f:20:d5:12:17:91:21:fc:37:31:14:67:ae:
f0:c7:32:43:81:f5:18:40:2f:82:16:ee:ff:e7:d6:37:d1:5e:
fe:f2:e1:f8:30:80:9b:fe:dc:19:fd:36:c3:81:fe:66:fd:0f:
12:66:e0:aa:9c:e8:8b:34:18:13:9a:25:9a:9f:c1:9a:10:dc:
c5:36:dc:c1:24:90:b1:f5:62:f6:80:f7:32:43:7c:bb:74:31:
67:7b:35:23:1b:2f:85:d8:87:30:b8:7e:6d:fe:25:ed:0c:46:
8f:3e:41:3f:c9:fd:43:21:ea:53:71:82:f6:1e:bd:66:d4:a1:
0e:67:1a:34:bc:3c:66:22:b2:e8:d2:ae:2a:8c:f7:e4:b6:6b:
b8:ec:59:ce:a9:82:14:43:de:a4:fb:a3:5c:cf:36:c3:21:ff:
02:d0:6e:03:eb:b8:0d:f7:b6:5c:ae:28:d5:94:0a:39:4f:1f:
92:48:c2:78:0a:03:c2:be:b9:bc:f0:93:8d:0c:29:9f:2c:28:
74:54:01:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:54 2025 by rpki-client