Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2130236AF46D11EF991B5981762E951A.roa
File: 2130236AF46D11EF991B5981762E951A.roa (raw, json)
Hash identifier: H026q15cF1P/XVCrWy7ebT3B+jj+TguO9DBWRj8tH3w=
Subject key identifier: EF:1D:18:CB:C3:D0:76:F4:DC:01:A8:CF:69:BD:35:F0:0C:27:F3:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01362E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2130236AF46D11EF991B5981762E951A.roa
Signing time: Wed 26 Feb 2025 18:11:42 +0000
ROA not before: Wed 26 Feb 2025 18:11:38 +0000
ROA not after: Thu 19 Feb 2026 18:11:38 +0000
asID: 984
IP address blocks: 156.245.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79406 (0x1362e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:11:38 2025 GMT
Not After : Feb 19 18:11:38 2026 GMT
Subject: CN=67bf595e-03ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:92:07:64:68:51:af:85:01:64:5d:2d:25:
b9:31:a9:fe:cf:93:ed:28:ef:5e:ea:9c:6b:da:27:
1d:93:21:02:f5:79:b1:87:c1:f7:2c:5e:af:2f:5b:
b6:50:7b:90:81:a4:3c:73:03:81:ec:df:07:bd:0c:
54:f4:b9:bd:a8:32:30:98:e1:47:c6:0f:b2:20:4c:
88:95:1f:2e:dd:50:a1:dc:60:f4:44:f8:f1:7e:30:
6c:8c:06:01:30:5e:56:fd:3a:05:f3:12:a1:b2:5f:
d9:ad:b9:54:8b:b7:17:0a:bd:1f:dc:20:ac:a4:34:
60:1d:44:4b:40:44:60:ee:6a:94:a0:d2:9c:6e:be:
1f:71:03:cd:a8:c6:ac:9a:92:fd:aa:5d:65:e6:52:
80:53:94:7e:9a:3e:35:2e:e2:3e:7b:94:bf:70:e2:
64:c4:9d:1a:3e:23:7a:b9:06:1e:2b:36:ab:e4:ed:
89:e0:a7:8d:fc:39:83:78:af:19:0a:b5:30:57:27:
ff:c8:c0:26:61:55:86:a7:ea:20:2a:59:d5:b6:ec:
c7:dd:a0:24:fb:71:9d:2a:9f:69:53:21:b1:c2:bf:
be:c5:6b:75:4e:18:71:11:91:66:9a:4d:42:0d:9e:
87:29:ea:40:7e:18:a6:00:49:de:1e:4f:28:03:37:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1D:18:CB:C3:D0:76:F4:DC:01:A8:CF:69:BD:35:F0:0C:27:F3:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2130236AF46D11EF991B5981762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:74:0a:cf:95:dd:12:6f:e9:3c:53:57:93:53:02:5f:67:8f:
11:38:26:71:22:87:fd:24:2a:e0:20:40:3b:c5:d3:de:e2:a5:
00:d0:6c:49:1f:9b:7e:a3:0e:33:c6:41:1a:42:cb:13:73:78:
8c:44:c9:37:b3:c2:47:61:bb:90:54:db:ce:96:44:8f:ab:82:
60:87:95:3b:e0:14:bf:70:e9:79:dd:56:eb:b3:67:3a:40:98:
71:98:17:66:4e:31:1b:ed:31:f0:a6:9b:e3:88:6a:7d:14:06:
7c:49:16:8e:e3:74:eb:06:f9:f9:2b:33:65:5b:fa:70:67:71:
fa:2f:33:73:44:4d:23:db:ff:1b:8e:28:67:72:01:f8:cf:14:
84:cb:8b:90:f6:d9:05:5b:33:c1:fb:b4:11:14:bf:82:a2:d3:
6e:71:22:71:7d:63:db:3f:e1:97:35:28:ee:7d:b1:bb:46:92:
a6:d3:59:1f:ea:a3:46:67:45:2c:a2:4e:7e:16:0a:96:9e:dc:
47:25:f5:18:dd:3a:bd:33:29:20:fa:a2:f6:8d:aa:ce:ac:3d:
f0:c0:6d:70:c3:b6:1a:d4:e3:88:27:c1:a1:0e:c8:3f:c3:d6:
58:64:f6:4a:0b:3a:17:53:c3:18:ed:ce:70:27:55:ec:d4:bb:
9b:10:e5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:05 2025 by rpki-client