Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075FEDC6F43B11EFB1AA84A2762E951A.roa
File: 075FEDC6F43B11EFB1AA84A2762E951A.roa (raw, json)
Hash identifier: 9OLzNzSHF4UqTshFzk3gw60MGq7C453K/P4NdD6eBLA=
Subject key identifier: BA:38:90:47:92:D5:C1:7C:FB:F8:54:CC:F2:85:41:78:C2:FA:83:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013240
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075FEDC6F43B11EFB1AA84A2762E951A.roa
Signing time: Wed 26 Feb 2025 12:13:04 +0000
ROA not before: Wed 26 Feb 2025 12:13:00 +0000
ROA not after: Thu 19 Feb 2026 12:13:00 +0000
asID: 984
IP address blocks: 156.245.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78400 (0x13240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:13:00 2025 GMT
Not After : Feb 19 12:13:00 2026 GMT
Subject: CN=67bf054f-1595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:ba:26:cd:ae:6a:01:af:b6:98:46:90:8b:
90:79:bd:6f:fe:a8:8d:c5:81:fb:cb:3c:f4:83:35:
8d:d9:8d:7b:d7:da:b0:56:47:72:96:a4:86:50:a3:
53:9b:02:03:0a:7f:40:45:a7:8d:e1:65:8a:8c:33:
f2:e7:0a:86:6f:fc:91:c0:44:5b:1d:94:ad:91:0f:
22:ab:07:45:c0:6d:91:06:56:3b:25:5e:55:b8:3f:
73:2a:50:d6:df:56:d6:d0:f4:3e:35:b1:e4:14:0b:
51:88:66:3d:ab:18:89:03:14:fc:cc:64:13:25:69:
68:38:90:65:c5:45:ef:1e:61:99:1f:f8:85:96:4b:
c9:d0:3e:e8:91:23:93:d5:da:6b:de:08:25:32:7e:
9c:c7:bb:7d:c6:b8:07:5f:eb:2f:f3:43:f3:75:3a:
ad:da:d5:d3:f7:13:f8:26:5c:0f:fa:08:72:d4:74:
59:90:7b:0e:91:0d:31:2a:45:09:d8:d1:3b:8e:33:
44:fb:97:84:ea:49:27:48:b4:c8:e2:06:22:5b:0c:
11:78:ad:50:a1:f3:5d:47:d9:e6:ff:10:64:fa:87:
f2:43:67:b3:50:bb:c5:7f:51:a2:9f:61:92:bf:7d:
c1:95:e4:6b:bf:78:4c:1e:a8:23:c7:ce:84:d5:7b:
65:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:38:90:47:92:D5:C1:7C:FB:F8:54:CC:F2:85:41:78:C2:FA:83:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075FEDC6F43B11EFB1AA84A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.225.0/24
Signature Algorithm: sha256WithRSAEncryption
71:81:78:18:f3:fa:5a:87:ab:d0:7f:26:f7:2e:9b:38:5f:8b:
2f:0e:dd:ce:71:f7:45:61:9f:c0:6a:11:9f:54:10:74:6d:cd:
ff:85:cc:67:ad:5d:e0:56:91:c3:12:e5:38:82:9d:c0:b8:d3:
36:6c:16:a9:6c:7b:8d:54:48:a4:49:30:11:cb:0c:e4:0e:3a:
e1:62:bb:1a:3b:c2:e7:50:37:fd:09:64:65:fa:87:d4:91:53:
3b:89:88:f5:c0:49:ef:bc:13:55:a6:3d:d4:95:98:55:f5:c4:
ce:11:8b:36:34:97:8b:76:80:6a:a5:d6:8a:8b:da:19:90:d7:
b1:54:52:4e:4f:34:34:27:a5:37:e4:64:57:0d:b7:c6:4e:56:
35:e0:cf:b3:a6:39:eb:14:7e:b7:30:4f:bc:8d:43:92:6c:83:
1b:ac:f4:3e:8b:b1:54:48:07:13:63:99:5f:e9:37:81:74:1a:
8e:64:c1:bb:94:c8:5e:2f:4c:58:c1:9b:65:65:83:9c:3c:92:
65:85:12:6e:62:94:b8:d0:a5:ee:b1:c4:8c:1d:a0:ae:4a:4e:
db:6d:b8:72:5a:ca:14:7e:6f:0e:c4:39:ee:83:00:24:1f:04:
85:9c:8a:4f:1f:e8:6b:3d:db:92:e5:b6:ec:6e:69:94:5a:34:
83:68:65:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:48 2025 by rpki-client