Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2179F54CF43811EF8F0EC08E762E951A.roa
File: 2179F54CF43811EF8F0EC08E762E951A.roa (raw, json)
Hash identifier: R4TyHKXK1PXv9mW22TMGrKEWnhe0CQhSnL6AWtULagE=
Subject key identifier: 8A:E5:CB:8A:50:20:08:97:C6:8B:E5:FD:73:06:1C:2E:B3:10:9D:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2179F54CF43811EF8F0EC08E762E951A.roa
Signing time: Wed 26 Feb 2025 11:52:19 +0000
ROA not before: Wed 26 Feb 2025 11:52:15 +0000
ROA not after: Thu 19 Feb 2026 11:52:15 +0000
asID: 984
IP address blocks: 156.252.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78335 (0x131ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:52:15 2025 GMT
Not After : Feb 19 11:52:15 2026 GMT
Subject: CN=67bf0073-9911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:05:6d:74:73:82:bb:df:ca:0e:44:ad:10:41:
dd:31:1e:03:31:2a:11:9c:a6:dd:c7:18:d2:58:0a:
c4:86:ef:c2:59:ed:0f:de:46:d7:dd:84:40:68:48:
dd:bc:dd:52:c3:fb:a8:36:4b:f0:b1:69:8c:75:bb:
51:02:44:57:7b:e1:71:b4:ef:c3:02:6b:71:2b:3f:
bc:3e:ce:69:55:51:3c:66:fa:98:b5:52:f4:1c:ec:
7d:ee:7a:54:9f:6d:d4:a2:56:28:0b:1d:55:cf:d0:
83:86:80:66:46:55:0a:d0:25:5a:1e:f1:cf:f5:f0:
c8:62:80:f0:5f:1f:9b:b2:f9:17:b4:bd:63:2e:06:
57:29:19:88:d9:97:09:e6:f5:f8:90:86:0a:af:25:
8f:99:ba:d9:f6:a1:f4:82:48:51:f2:01:a6:e4:00:
6d:1f:ac:ad:78:1b:e8:b9:83:f7:fc:67:6c:de:a4:
17:03:5a:5d:6b:c9:dd:d4:c7:e5:9b:18:34:55:23:
31:f4:da:86:12:dd:34:57:96:c8:03:34:03:96:45:
30:5c:1d:8b:79:ef:23:90:6d:3c:07:40:b2:c0:ca:
ed:98:80:b3:ce:5b:88:02:a5:57:00:88:b5:52:c3:
fa:4b:8a:b2:49:d9:c8:bf:cc:80:e4:74:9c:fa:1f:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E5:CB:8A:50:20:08:97:C6:8B:E5:FD:73:06:1C:2E:B3:10:9D:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2179F54CF43811EF8F0EC08E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a9:89:09:87:85:6c:23:96:fb:ab:dc:e4:3b:ce:8b:fc:37:
23:fe:c1:51:e2:c3:93:89:f4:e7:b3:71:62:e2:86:41:9d:66:
c5:17:ae:2e:4d:e0:ef:7f:ca:31:b2:e1:2b:ff:17:ef:87:0f:
7d:a9:20:33:91:3f:1c:30:60:32:25:18:90:7f:9f:0e:d5:bc:
37:2e:62:fc:5c:d1:0b:42:43:1a:8d:bc:49:ac:14:8e:04:6a:
3c:90:b7:24:0f:8d:9e:e6:08:a2:68:ed:96:d9:1b:82:91:9a:
8f:52:ac:19:e7:ae:7f:81:d1:35:ee:0d:89:5c:c9:59:61:70:
82:e7:d2:01:9a:c9:4d:07:eb:df:61:62:0f:4d:0e:d6:0b:93:
06:d2:ba:a3:66:26:92:ad:9d:9b:84:be:4f:f0:df:c1:37:f5:
3a:a2:a3:60:82:ab:d5:94:c4:1a:d5:f1:68:b7:dd:d8:bc:6e:
9b:9f:e4:dc:40:35:55:93:4f:8b:66:e1:21:8b:c1:df:f1:36:
79:d3:50:4c:ad:8c:e6:cf:68:c0:19:d8:75:51:5c:09:3f:12:
76:b0:77:e5:86:56:93:55:ce:d3:59:bc:3e:9d:37:d7:ff:7d:
a4:eb:e2:21:a3:1f:72:4c:98:67:23:9b:dd:05:8a:cc:66:53:
c4:3c:3b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:39 2025 by rpki-client