Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/040E3E8EF44A11EFA0D23C8C762E951A.roa
File: 040E3E8EF44A11EFA0D23C8C762E951A.roa (raw, json)
Hash identifier: gzXSNE6Fk/cvbnhSyX1lEkjPVHW5CJMzE3+M0TRIsFc=
Subject key identifier: EF:E5:93:30:DC:3F:F7:F2:2E:4B:02:AE:DC:ED:86:27:09:FE:28:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01337F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/040E3E8EF44A11EFA0D23C8C762E951A.roa
Signing time: Wed 26 Feb 2025 14:00:21 +0000
ROA not before: Wed 26 Feb 2025 14:00:17 +0000
ROA not after: Thu 19 Feb 2026 14:00:17 +0000
asID: 984
IP address blocks: 156.247.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78719 (0x1337f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:00:17 2025 GMT
Not After : Feb 19 14:00:17 2026 GMT
Subject: CN=67bf1e74-7c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:1e:1f:91:c4:cb:fb:6a:34:be:ba:ed:db:
6d:d0:c5:d7:cf:c6:95:d8:e4:9e:6d:12:26:a7:99:
6e:dc:67:54:b5:2e:74:22:a1:29:de:cd:cf:38:dc:
59:40:26:07:73:af:32:b8:32:78:dd:fd:51:11:c5:
27:b7:b8:07:86:bb:ed:b3:53:25:26:a5:66:5c:56:
65:26:37:3d:ed:b9:55:7b:08:85:3d:c1:f6:ad:55:
17:3e:33:89:f6:0a:a9:6d:ba:17:4f:f1:ea:f1:bd:
92:d6:d5:70:32:a1:c5:92:16:47:78:4e:89:39:be:
ec:13:30:a6:9e:ae:47:39:ee:08:eb:91:e4:23:79:
24:5d:13:24:76:74:f4:e7:ad:cc:a8:24:d6:5b:95:
e4:62:73:e3:6d:c8:69:cc:7a:4a:d7:19:ab:81:e2:
20:2d:b0:03:86:7a:82:3d:6e:f1:76:0c:48:e2:0d:
b7:04:7b:b4:d5:21:a6:f8:ee:a8:e2:b5:5d:1c:6c:
29:af:90:13:05:19:b1:b1:7e:f8:f3:39:4c:de:32:
8c:d3:bc:bd:5a:3e:4d:56:37:cd:05:c7:b1:b5:ed:
f6:81:60:c3:03:d6:91:11:47:f8:54:2e:e0:a8:49:
67:ba:81:56:1f:dd:37:4b:36:af:54:91:7b:f2:d0:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E5:93:30:DC:3F:F7:F2:2E:4B:02:AE:DC:ED:86:27:09:FE:28:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/040E3E8EF44A11EFA0D23C8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.3.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:49:32:4e:f8:65:b6:82:f6:54:c2:9f:18:cc:d1:e8:f4:48:
d6:7f:0d:f5:0e:c1:d0:2f:7e:05:b1:fc:02:36:52:96:ac:1b:
bb:23:45:25:df:be:88:83:89:2d:03:0f:56:5e:90:b8:67:98:
63:ca:65:92:c4:cd:3b:07:31:a9:14:2b:fa:84:f3:90:1d:7f:
d9:fd:d6:44:49:d9:91:29:dc:ab:26:a5:ef:fa:9f:2f:be:d5:
a9:17:65:0d:24:f8:f9:12:e6:9d:02:e2:6a:74:95:2a:eb:1f:
3a:34:9a:47:40:e8:f4:7d:d1:c8:01:62:33:84:58:7f:cb:42:
b5:7c:7f:1b:8c:49:0f:cd:d9:bf:e8:67:9c:a1:99:e9:58:89:
07:a5:7a:a9:64:fc:c9:08:c1:6b:35:a7:a5:eb:ca:54:bd:75:
85:94:2c:da:49:4d:03:4f:cb:16:c0:7c:eb:5e:a6:b0:5b:0a:
ad:75:d1:41:a2:30:07:5e:7d:38:7d:09:ea:ad:0e:db:c0:a1:
ef:ea:c2:3c:82:10:5e:5d:31:8e:49:7f:72:92:ea:81:59:d2:
0f:a5:4f:03:2a:42:02:b7:1a:9d:df:96:69:f5:07:ec:ad:cf:
8e:fd:90:d8:2c:e4:91:42:7a:50:a3:d2:fe:98:15:24:e0:5f:
66:d2:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:36 2025 by rpki-client