Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/163A08A4F44F11EFBD53C6AF762E951A.roa
File: 163A08A4F44F11EFBD53C6AF762E951A.roa (raw, json)
Hash identifier: RLqJUef4aBM5Rc9m035pqTzieQ1iq2Nx3MSe2fwIwC0=
Subject key identifier: 8C:65:7D:6C:51:93:CE:45:B8:51:08:AD:AA:09:29:1A:4A:6A:2E:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0133D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/163A08A4F44F11EFBD53C6AF762E951A.roa
Signing time: Wed 26 Feb 2025 14:36:39 +0000
ROA not before: Wed 26 Feb 2025 14:36:35 +0000
ROA not after: Thu 19 Feb 2026 14:36:35 +0000
asID: 984
IP address blocks: 156.252.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78803 (0x133d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:36:35 2025 GMT
Not After : Feb 19 14:36:35 2026 GMT
Subject: CN=67bf26f6-90d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:50:df:a3:ff:e5:54:b0:d3:68:68:94:8c:d7:
a4:9b:a8:ef:c4:59:b6:d4:62:1a:7d:df:c1:6a:5b:
c8:57:18:b7:8f:a5:c3:05:11:b7:ca:55:61:71:7d:
3d:9f:e2:fe:24:4b:11:0e:33:ab:a2:ad:48:57:ce:
ce:56:db:66:50:7f:09:ed:10:d3:99:f3:55:1b:6f:
df:d4:9f:31:f6:ff:22:36:e7:dc:81:b0:fc:fb:1d:
7b:25:e8:36:b9:48:56:98:af:e0:66:0f:ac:31:0f:
74:ab:ca:27:85:f6:ac:3f:80:d5:10:58:48:dc:e8:
59:80:58:fc:ce:c5:7c:a3:9f:59:b1:db:2d:64:b7:
67:5e:ec:07:6e:e4:89:6b:d7:7f:10:d1:ba:0c:fb:
3e:67:67:e9:ff:39:da:8d:2c:c2:af:98:dc:15:3d:
d5:f8:a1:c0:70:a1:05:bd:8b:68:43:1c:94:1a:ac:
ea:62:28:df:d2:f0:86:b3:f8:dd:2f:e7:a5:c1:21:
b2:e3:88:f4:2c:6b:e6:75:d0:a6:cc:16:4e:71:46:
89:41:4b:de:ca:15:7c:95:2e:cd:b1:f1:81:52:e4:
a2:e3:15:c8:93:28:32:a8:7f:c7:5a:4e:03:78:d1:
cd:d3:40:ba:b7:4a:49:11:53:33:fe:07:40:d2:a5:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:7D:6C:51:93:CE:45:B8:51:08:AD:AA:09:29:1A:4A:6A:2E:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/163A08A4F44F11EFBD53C6AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.195.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:3a:f8:17:53:06:83:70:b1:e4:27:56:e3:16:08:ff:a9:68:
cb:9f:85:c7:de:18:5c:6f:5c:4d:89:c6:5b:e8:78:6a:13:9f:
73:64:06:d8:39:1d:09:5a:fd:74:f2:80:33:6e:98:47:42:7f:
96:52:33:b7:3e:3d:57:66:76:79:6a:57:89:96:23:d7:32:30:
57:44:1b:77:8a:49:6d:16:14:c1:7d:08:fa:83:f9:a3:3f:5e:
2c:f5:62:32:b4:f7:6f:91:eb:58:73:c1:2c:7f:de:ce:e7:92:
03:20:e0:c6:d0:81:d5:91:69:12:03:c4:5b:15:e2:b3:a0:dd:
0e:2d:80:9a:83:cd:0e:16:d8:e4:d2:22:82:21:e5:ed:d2:a5:
5b:12:7d:70:6a:d8:9a:24:5f:f4:96:c6:ad:48:e8:65:92:72:
53:30:0f:ff:ba:8e:2a:c6:a9:81:1f:9f:bc:33:68:e9:49:b6:
84:62:68:e1:60:04:ca:52:11:ef:5a:94:09:0f:8a:b7:43:2b:
16:27:38:7b:80:9b:67:42:27:69:b3:2e:9e:7b:01:f8:62:b0:
06:76:f4:7c:9d:fc:c6:88:69:7b:79:e4:dc:a0:5b:53:5c:fa:
e1:4b:e3:0e:1f:f6:0e:96:cd:9c:cb:e1:b1:58:70:63:f1:4e:
b6:59:d9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:34 2025 by rpki-client