Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24812B54F42211EFB8359372762E951A.roa
File: 24812B54F42211EFB8359372762E951A.roa (raw, json)
Hash identifier: aRxmNnI34k2tXQBs5Q9tnK54PcM6Tb4QAEgIXZ7E1Uo=
Subject key identifier: A5:43:23:BE:83:25:B1:9C:84:F7:27:7A:CE:10:9C:41:DD:0A:5F:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013057
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24812B54F42211EFB8359372762E951A.roa
Signing time: Wed 26 Feb 2025 09:14:55 +0000
ROA not before: Wed 26 Feb 2025 09:14:51 +0000
ROA not after: Thu 19 Feb 2026 09:14:51 +0000
asID: 984
IP address blocks: 156.252.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77911 (0x13057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:14:51 2025 GMT
Not After : Feb 19 09:14:51 2026 GMT
Subject: CN=67bedb8f-542b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:3d:28:75:0f:ba:35:9c:10:1d:d0:02:04:
0d:33:f2:aa:78:92:ba:fa:5a:ca:46:52:fc:7c:a6:
4e:9e:75:6e:ef:0a:67:bc:e4:63:b1:27:3e:bb:c1:
56:2d:ba:f8:e5:db:50:16:7c:7d:9b:ef:cc:10:94:
3f:bb:b5:1b:a2:c4:5d:f1:43:d9:c0:86:18:d3:40:
a6:43:3b:6b:4f:7c:f0:b1:16:a6:4b:25:3a:d7:2b:
f6:97:1d:f4:8e:0b:b0:62:5e:9f:d1:4d:c3:bc:77:
e9:fc:d6:53:69:53:e8:94:06:23:40:d3:21:f2:5b:
30:be:ab:be:0c:72:62:84:98:c4:83:ad:04:a5:6d:
cf:3b:05:c9:e8:8b:0b:40:e4:cc:03:22:f7:86:42:
55:a1:16:ab:12:49:92:95:87:ac:0e:c0:68:4f:36:
4a:37:0f:22:bf:79:0d:7e:2f:f4:57:9f:05:d1:af:
9c:1b:f2:57:c3:ef:1a:f9:19:de:1a:65:0c:91:2a:
4e:3e:c4:18:38:89:01:a6:04:2a:d5:29:51:60:f3:
c9:b1:19:5b:71:42:de:ff:c8:e2:f5:0d:a8:1f:df:
c9:14:f9:fe:a9:d0:11:0c:1f:68:04:c4:b4:ae:91:
6b:b1:f2:87:ff:a4:e9:ba:30:48:59:47:ab:7e:26:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:43:23:BE:83:25:B1:9C:84:F7:27:7A:CE:10:9C:41:DD:0A:5F:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24812B54F42211EFB8359372762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.49.0/24
Signature Algorithm: sha256WithRSAEncryption
31:49:28:1f:43:fd:95:67:e5:3f:80:85:b9:2d:dd:f6:fc:55:
85:f9:4b:06:7e:22:a8:e7:02:52:c1:68:1a:ad:5d:07:0f:ae:
15:33:e5:62:40:68:8e:08:c8:53:5d:9e:a8:88:1e:d0:1c:23:
87:cc:93:78:f2:bb:e7:c0:f3:11:c9:78:d7:b2:04:bf:e5:2b:
c9:58:71:e8:5e:9c:c5:e4:3f:ba:3b:8b:87:00:a2:32:6b:29:
d8:b1:80:34:60:75:d9:2d:b4:78:8d:06:4a:63:2e:68:a5:2f:
6a:bb:8f:20:81:32:58:0a:6e:cd:86:a0:3a:48:72:eb:f2:f8:
56:56:ef:4e:e3:7d:02:1c:f5:a6:a2:e8:34:bb:26:9e:c5:29:
20:1a:69:44:e5:4c:7d:e2:55:69:83:14:72:59:d2:b8:70:7c:
06:b3:f5:56:75:7f:d6:00:43:2a:4c:b9:f7:b0:75:3e:a0:84:
80:a6:d7:42:f6:fa:b5:94:20:ff:67:13:d7:d1:57:4b:72:10:
6b:11:71:a0:ee:d6:7b:b2:92:80:f6:b2:61:2c:46:46:03:39:
b6:c8:29:9c:f3:7d:3f:12:ba:ca:cc:51:83:c8:fa:1f:5b:7d:
79:c5:16:8a:72:44:dd:c1:ba:89:c8:47:38:4d:0d:81:eb:5d:
4e:fc:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:59 2025 by rpki-client