Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1447B2D8F45611EF9BA18F61762E951A.roa
File: 1447B2D8F45611EF9BA18F61762E951A.roa (raw, json)
Hash identifier: SJcNioujQyvSgm78W2GP+PfnoR9F9DRGJ/qjfxN9xek=
Subject key identifier: 9D:A1:01:4B:5C:B0:C4:86:EB:FA:9D:7E:69:FC:62:D0:57:CB:5E:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013443
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1447B2D8F45611EF9BA18F61762E951A.roa
Signing time: Wed 26 Feb 2025 15:26:42 +0000
ROA not before: Wed 26 Feb 2025 15:26:38 +0000
ROA not after: Thu 19 Feb 2026 15:26:38 +0000
asID: 984
IP address blocks: 156.231.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78915 (0x13443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:26:38 2025 GMT
Not After : Feb 19 15:26:38 2026 GMT
Subject: CN=67bf32b1-e192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:c4:5a:95:d4:dd:d6:ee:7c:de:f8:13:f0:
81:f1:d2:7d:50:d4:5b:3e:11:ba:06:28:0b:bf:33:
e2:7c:01:e6:cc:ee:5a:c9:66:a6:27:5d:e2:13:3b:
fe:31:d2:17:27:71:cf:b0:f6:40:d4:23:c1:33:aa:
08:2d:81:c1:ee:26:6e:9c:50:0b:e0:d8:9b:3d:52:
5f:e2:2b:cc:9c:2d:e4:03:ea:54:1d:ea:59:00:94:
94:14:98:e1:9a:5b:d7:51:28:dd:07:60:a0:d0:bf:
fe:b5:64:d6:26:7d:40:65:3a:7f:25:a2:79:3c:da:
da:9d:b1:2d:91:1f:bc:1f:09:84:75:f5:5d:5d:f3:
17:3d:72:3d:af:85:01:30:81:9c:25:8b:74:07:74:
bd:4c:ae:09:7f:79:04:af:b5:e8:8d:51:a8:ae:fa:
9c:15:45:05:af:1c:e3:05:58:0e:dc:a6:bd:a2:18:
78:13:19:5b:61:46:e7:e5:90:dd:0d:d0:26:f0:6f:
2c:ea:cb:e2:68:d6:63:88:6d:61:1e:9e:e0:79:40:
81:51:77:25:94:c6:fe:c7:9e:e9:2d:f4:56:c4:55:
2c:9e:66:63:f3:bf:cc:d0:c3:c5:7a:6b:95:2b:29:
54:ff:f6:3f:2c:f0:d6:65:dd:2e:0f:be:3d:12:b4:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A1:01:4B:5C:B0:C4:86:EB:FA:9D:7E:69:FC:62:D0:57:CB:5E:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1447B2D8F45611EF9BA18F61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.210.0/24
Signature Algorithm: sha256WithRSAEncryption
57:bd:03:09:d5:13:f0:70:37:05:88:be:4b:24:5f:a0:03:25:
cb:52:99:3a:83:94:1d:e7:81:be:bb:7d:bf:a7:a8:a3:d0:54:
c9:90:01:fb:85:ea:07:10:d8:96:1b:35:18:38:79:44:a7:c1:
c4:07:ef:9a:5a:7f:5f:3c:71:49:0d:7d:24:b7:3b:5b:1d:d9:
26:bd:3d:ab:7f:52:b8:70:8e:60:53:42:dc:db:93:70:16:1e:
f6:e4:5d:41:8c:b3:2c:59:75:2d:e9:62:9a:cc:e1:e6:1a:5d:
78:bd:36:a9:22:d4:ac:64:7d:cc:98:77:a3:62:65:36:67:10:
14:b7:cb:7c:ce:23:57:c7:63:b8:ed:19:17:14:ca:4a:1e:75:
13:22:eb:d1:07:b6:bf:c9:93:3e:94:30:c4:8f:f1:ad:27:c5:
16:77:79:ac:e6:c1:e0:27:52:cf:63:d7:96:3d:25:08:02:16:
aa:41:20:dd:f4:39:32:04:a6:23:2c:d8:22:a9:27:74:26:74:
4a:58:77:09:40:a3:27:c5:3f:99:c9:8d:00:3b:ac:05:c6:64:
2c:08:8c:be:82:25:61:df:16:c9:61:3e:33:e7:ed:cd:96:b5:
b1:1a:3f:5c:8e:da:fa:35:0c:49:31:d9:9a:01:89:e1:64:a7:
82:ed:79:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:21:43 2025 by rpki-client