Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10C0FBC4F45B11EFBE7E7485762E951A.roa
File: 10C0FBC4F45B11EFBE7E7485762E951A.roa (raw, json)
Hash identifier: OHZGhkOsTbWIbPj3mftRoscLchibGBQdqNnZ8grFDaQ=
Subject key identifier: A5:80:59:25:AA:22:37:F7:2C:28:CD:7B:D7:D2:C7:A5:C0:84:FD:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013488
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10C0FBC4F45B11EFBE7E7485762E951A.roa
Signing time: Wed 26 Feb 2025 16:02:23 +0000
ROA not before: Wed 26 Feb 2025 16:02:18 +0000
ROA not after: Thu 19 Feb 2026 16:02:18 +0000
asID: 984
IP address blocks: 156.231.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78984 (0x13488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:02:18 2025 GMT
Not After : Feb 19 16:02:18 2026 GMT
Subject: CN=67bf3b0f-f41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:9a:05:5a:8a:8b:a9:19:d2:90:61:28:c9:
b0:c4:03:5c:6c:6e:e4:a5:c2:dd:8d:8a:a3:b5:af:
f5:43:7e:3d:fc:19:ea:7e:a8:e4:1a:f4:b5:8b:66:
3e:c4:4d:89:7c:4a:48:00:ed:8d:a2:17:c7:b3:2b:
6b:e4:ce:54:75:9c:24:ed:68:4f:ce:9f:b7:fe:54:
88:20:42:dd:c5:9d:57:3a:61:a2:8e:dd:00:9d:c5:
fe:8b:00:7c:34:10:80:b5:34:9c:30:25:9d:51:7d:
23:b5:63:c6:28:a4:f2:50:fb:2f:9d:11:a9:69:fb:
bc:a7:a9:c1:b8:bf:62:cf:f6:81:c3:2e:ca:4b:01:
e5:95:17:bb:08:f8:77:36:ce:84:70:66:0a:20:fb:
9b:4b:b4:94:ae:f3:f7:42:98:bb:39:37:68:bf:11:
bd:b6:5c:2f:89:b1:f3:04:ea:57:fa:62:ec:ca:33:
46:cb:b8:bb:16:6c:2c:b6:70:b4:18:8a:a3:57:d3:
44:a0:22:30:e7:50:65:5e:98:19:9c:60:e6:59:26:
b1:ab:54:c6:95:05:2c:2d:8e:96:56:df:58:c5:88:
c7:c0:64:d2:b3:21:72:23:7e:50:81:26:59:ae:b0:
72:b5:7c:a9:9f:03:9a:b2:c6:a4:d4:5e:14:fb:26:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:59:25:AA:22:37:F7:2C:28:CD:7B:D7:D2:C7:A5:C0:84:FD:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10C0FBC4F45B11EFBE7E7485762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a3:31:69:a5:19:aa:6d:b3:e7:cf:13:19:6c:cd:30:cf:0f:
f8:e1:de:4c:bc:64:29:15:dd:6f:f0:84:1c:ee:2a:d9:52:0a:
de:aa:62:01:f4:73:27:8e:63:a6:0b:d6:73:b1:f4:56:5e:94:
18:76:a9:b2:2c:1d:22:9c:57:81:76:c7:b6:30:9e:16:ad:00:
a6:74:ec:5f:de:18:5a:e3:89:e6:db:c2:e4:78:ce:24:23:d9:
08:df:24:b0:12:5a:eb:6f:c3:d0:df:e3:cd:cc:ec:11:a9:39:
57:66:55:c7:bd:40:b9:27:ff:c3:09:36:46:63:fe:32:bf:26:
49:fd:fb:c6:e3:d7:fe:fe:a5:39:d6:00:b4:7b:7c:e0:1a:f5:
74:c6:d0:e0:1a:77:de:30:cb:e8:d8:7b:99:65:58:50:6e:3a:
d9:24:dd:92:d5:0d:eb:f2:f4:ae:9e:6b:90:72:66:f1:d1:52:
38:67:20:60:e4:64:93:86:1e:ab:02:3b:a4:be:8e:41:30:f6:
f9:bc:0e:93:ba:ae:bf:13:e7:68:50:07:21:72:26:3e:ea:e6:
12:6a:5d:65:2d:fb:7f:04:08:8a:ad:3a:dc:7b:6e:0d:f7:e5:
79:7b:26:fa:ba:8c:11:5d:3f:3d:b5:4a:34:e8:4d:87:a1:15:
2c:35:01:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:44 2025 by rpki-client