Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1205FB84F42D11EFB8F30741762E951A.roa
File: 1205FB84F42D11EFB8F30741762E951A.roa (raw, json)
Hash identifier: jXtez6BsrLTBjwK5SuFQJ81PF8b4+QpYxCsSZg9yRQI=
Subject key identifier: 3B:F1:54:88:2A:C7:B4:57:9B:28:0A:BF:FE:B6:94:87:4F:E4:C4:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013121
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1205FB84F42D11EFB8F30741762E951A.roa
Signing time: Wed 26 Feb 2025 10:33:08 +0000
ROA not before: Wed 26 Feb 2025 10:33:05 +0000
ROA not after: Thu 19 Feb 2026 10:33:05 +0000
asID: 328608
IP address blocks: 156.255.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78113 (0x13121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:33:05 2025 GMT
Not After : Feb 19 10:33:05 2026 GMT
Subject: CN=67beede4-7182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:18:67:a9:e3:99:18:97:14:d9:b0:cb:c5:
fb:d6:05:1b:4d:1e:70:0f:37:32:5d:a4:dc:db:0f:
b5:10:ee:40:d5:58:97:04:42:6c:77:85:77:68:98:
66:23:21:5f:af:01:44:a9:e2:cc:de:f2:3f:45:ce:
0b:88:01:48:ec:90:d6:5a:8a:de:25:84:8f:f8:99:
cd:93:24:33:37:7d:07:0a:50:fa:ed:ca:ba:a5:39:
07:ad:a9:08:53:46:c4:bc:54:8c:af:17:e8:3c:68:
49:4d:17:09:8c:09:8f:57:ca:f9:d2:46:a5:9c:08:
4d:86:8f:35:da:d5:ab:11:73:93:a8:bd:91:a7:49:
b8:85:6e:63:9c:c9:a5:c8:87:17:1f:fc:fa:fc:6a:
67:f7:26:c3:cb:4f:01:b0:ba:8a:72:35:44:1c:bc:
40:d5:8c:6c:e7:3e:53:1b:0b:5d:53:9e:ad:62:d4:
c3:38:8d:7f:7c:5f:58:df:13:24:69:4b:1c:99:e4:
76:86:80:51:88:82:29:f5:12:4e:a8:05:b1:3f:e9:
6f:ed:4f:80:a9:63:81:cc:de:5f:0a:bf:2a:02:27:
18:ea:03:ea:f7:78:80:23:7d:3c:74:28:b8:fd:17:
d3:d0:44:8e:ef:8b:aa:4f:d3:1a:5f:52:72:8a:64:
9a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:54:88:2A:C7:B4:57:9B:28:0A:BF:FE:B6:94:87:4F:E4:C4:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1205FB84F42D11EFB8F30741762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.98.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:22:58:e9:83:5f:f1:a5:ee:28:83:5e:5f:d2:7c:53:6f:50:
41:40:bc:58:19:13:88:5e:21:64:f7:23:4b:cb:96:99:41:ed:
12:ee:16:db:4b:78:3d:4f:0e:e1:f2:95:52:c1:45:e1:f6:bf:
98:90:fc:08:ac:50:a7:b4:d5:b5:8d:86:e4:24:69:5c:25:c4:
55:55:87:03:00:f5:72:4b:85:01:10:84:71:d7:76:1e:7f:d4:
cb:b0:9c:aa:e7:47:14:b5:27:ee:29:e7:87:c7:d3:e5:18:cc:
dc:1a:d9:28:63:f1:26:0e:e7:94:6f:b7:9c:ef:a4:a4:85:92:
9f:dc:50:ee:07:f3:b2:78:e8:33:97:95:6b:ee:29:a6:c7:67:
9d:d6:74:3a:9b:fe:6d:a4:ac:22:7b:c6:39:cc:46:ac:2d:aa:
da:ee:8a:e4:29:cb:19:63:79:fb:42:6c:bc:e3:34:c2:e6:df:
17:61:5d:20:7a:64:47:75:f0:b7:ef:6e:30:8e:30:5a:73:00:
e1:65:aa:33:6f:bb:2c:23:94:7f:53:fb:d0:6f:5e:43:c2:b1:
54:68:9f:dd:39:97:f0:36:9f:5a:87:52:79:2c:1c:5e:58:91:
08:ce:9c:9b:b6:57:f1:7e:a2:64:cb:9b:b9:e3:3a:c2:39:e8:
70:04:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:37 2025 by rpki-client