Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DB8CBBCF44311EF8B52995A762E951A.roa
File: 1DB8CBBCF44311EF8B52995A762E951A.roa (raw, json)
Hash identifier: 0k1TH4ti9uKUPCRobxAvlRUaAgfkUQBQzssg+Zb2JpE=
Subject key identifier: 9F:3A:8F:EB:19:5E:2F:CF:00:C2:E7:B2:7E:F0:EA:4F:6A:9A:6E:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0132F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DB8CBBCF44311EF8B52995A762E951A.roa
Signing time: Wed 26 Feb 2025 13:10:57 +0000
ROA not before: Wed 26 Feb 2025 13:10:53 +0000
ROA not after: Thu 19 Feb 2026 13:10:53 +0000
asID: 984
IP address blocks: 156.231.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78580 (0x132f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:10:53 2025 GMT
Not After : Feb 19 13:10:53 2026 GMT
Subject: CN=67bf12e1-aa12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:65:4b:81:44:8a:13:4c:b1:28:2c:f1:b3:
0f:30:a9:f8:6d:a9:08:3d:a7:5e:83:bd:3d:35:23:
f8:4f:51:ea:9b:4a:af:4b:2e:7a:07:e3:32:89:13:
d3:44:84:4e:d8:42:37:8d:18:2c:24:34:2a:ab:9f:
26:d1:91:4d:0f:00:cb:17:8c:2f:84:8a:22:5f:56:
ea:a7:fa:cc:3f:8a:5a:ad:21:30:b4:04:31:5d:d2:
22:68:f3:5d:79:f9:10:ae:54:ac:8f:aa:64:35:8d:
31:91:7e:84:2b:71:e1:59:ae:c5:b7:1e:70:3d:c1:
73:6a:4b:d5:52:0a:88:d5:a7:7d:2e:a7:ed:ac:12:
86:b7:7a:20:99:27:d7:e7:43:78:e8:76:c0:19:22:
dc:c2:6b:6a:6a:9a:17:3c:83:9f:f5:d8:65:12:ed:
8a:29:82:d7:14:bf:63:9c:bf:ae:05:42:c0:eb:27:
33:4b:39:3e:93:89:6f:f2:2e:69:01:f4:4d:b1:fc:
fe:17:e5:b6:55:9a:24:6e:04:81:3b:a5:84:f7:9e:
0c:04:57:0b:0b:10:d3:93:e7:10:6d:9d:d2:54:9c:
ba:d4:e4:e9:78:ef:c3:09:bb:12:1c:5b:5b:63:67:
45:59:eb:74:6b:84:04:37:0d:ce:30:aa:1d:84:ec:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3A:8F:EB:19:5E:2F:CF:00:C2:E7:B2:7E:F0:EA:4F:6A:9A:6E:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DB8CBBCF44311EF8B52995A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d7:20:80:f8:03:2d:47:db:4d:5c:12:1c:ba:53:47:29:fb:
34:e5:52:2c:63:4c:3d:2a:68:7a:1f:7d:05:01:47:04:27:5b:
76:1f:87:4e:41:ad:69:5e:d0:15:f6:60:2d:af:5e:18:e1:2b:
7b:fb:d9:03:6d:1f:62:d0:0d:b6:ad:7e:53:58:d4:f5:49:8c:
87:1f:19:3e:11:a1:9b:ff:2c:d4:49:2f:7d:2a:48:8d:a2:44:
a8:02:36:74:60:7f:5b:04:3d:09:73:57:82:99:1c:49:51:8e:
8d:4c:ea:fe:c4:f7:94:9c:d6:41:b4:53:89:88:e3:12:b6:a3:
e4:9c:54:4c:0a:05:30:d6:50:d4:5e:db:a7:aa:05:e9:2d:f7:
89:ac:5b:ac:2f:0d:7f:2c:04:f9:84:d1:d0:83:bc:66:cc:f8:
15:21:55:d4:ab:6f:a5:75:48:b1:7d:92:7c:6f:e1:ba:07:43:
ad:7c:b2:11:b7:d0:d0:e8:07:3c:32:f1:dd:b5:07:d3:c6:17:
e8:82:c4:f8:1e:ea:ae:24:0b:61:11:3a:99:75:e5:bb:2d:e4:
b8:da:ac:c6:c2:7a:e3:f5:fc:c2:ea:da:3d:57:0e:9b:df:83:
7c:c0:fe:2f:6e:4c:bb:1b:38:52:8f:ef:3d:2b:66:ff:e3:94:
37:e8:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:08 2025 by rpki-client