Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C48B414F42811EF9E12819E762E951A.roa
File: 2C48B414F42811EF9E12819E762E951A.roa (raw, json)
Hash identifier: M5NT68jNsntBw/0D/jVN89VyGF0ibBemtBqzUr2Td7E=
Subject key identifier: CE:72:5F:EE:40:08:36:F1:ED:53:15:8C:35:71:0D:DC:66:85:3F:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C48B414F42811EF9E12819E762E951A.roa
Signing time: Wed 26 Feb 2025 09:58:05 +0000
ROA not before: Wed 26 Feb 2025 09:58:01 +0000
ROA not after: Thu 19 Feb 2026 09:58:01 +0000
asID: 984
IP address blocks: 156.230.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78010 (0x130ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:58:01 2025 GMT
Not After : Feb 19 09:58:01 2026 GMT
Subject: CN=67bee5ad-3a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:1f:05:e9:2b:b5:9c:29:e9:56:9d:7c:08:
d0:1a:ff:66:8f:3b:bb:57:c9:5d:62:be:0a:fe:0d:
53:c3:3e:fc:96:d7:fc:88:04:db:a8:1d:7b:5e:83:
04:52:64:ba:3e:67:15:80:e3:eb:45:30:00:66:ce:
50:c5:c3:67:f2:ca:d8:49:ae:94:1c:b0:27:cb:d1:
da:1c:62:61:c4:f6:aa:cb:fa:18:db:75:c3:b7:c9:
61:88:e6:0d:95:5f:0c:d9:42:b1:9f:62:a5:11:cb:
e1:11:d2:3c:ff:33:73:79:23:a0:54:86:77:34:fd:
c0:39:72:a8:6b:30:f1:c7:e3:8a:e3:73:fa:78:ef:
2d:90:90:fe:bd:7b:34:b1:69:69:d5:b8:0e:2c:44:
66:d3:11:21:dc:ec:4d:d6:a6:31:fe:1f:95:e0:e5:
15:af:bb:88:a6:05:7e:75:62:74:d0:d2:6d:36:da:
e9:5e:f9:b2:c7:fa:fe:2f:19:a2:df:06:73:9b:76:
e9:9a:1e:f8:68:75:00:5f:1d:19:fe:28:65:d2:7a:
71:ad:2f:6f:20:b5:41:14:9d:60:ec:9d:3c:a8:f2:
5d:92:38:75:ac:e5:11:f5:fd:77:7b:5c:fc:5c:cc:
0e:31:dc:82:17:95:56:70:7c:77:fc:8b:9d:2f:f5:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:72:5F:EE:40:08:36:F1:ED:53:15:8C:35:71:0D:DC:66:85:3F:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C48B414F42811EF9E12819E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.134.0/24
Signature Algorithm: sha256WithRSAEncryption
96:17:36:f7:1b:28:bb:14:8f:87:a4:8d:e7:ad:16:ef:ed:76:
83:bc:10:31:77:ee:77:43:5f:64:36:5b:70:ba:8c:4f:6a:26:
54:16:1d:00:1d:35:63:b8:b8:c5:03:17:1a:32:af:b8:9c:7f:
35:9c:ab:20:ac:6d:fe:0d:48:3b:11:83:8e:05:ed:84:4a:8c:
2b:b1:80:5f:f8:4f:5c:99:39:85:d2:49:43:a8:d4:66:2e:b1:
6d:a1:9e:3b:fb:81:2e:96:8a:1b:d9:41:15:b0:e8:e0:98:d3:
ab:d5:8f:24:29:01:0e:c0:16:6f:cd:3d:60:7f:09:40:34:5c:
25:7e:e8:ed:76:b2:e4:32:c7:7b:46:82:a0:ed:0e:08:8d:7b:
ea:92:c7:84:f5:51:df:45:fe:7f:32:93:e0:47:3a:6a:b2:cd:
74:14:7a:2d:92:ca:0f:2f:3c:13:80:77:fb:c8:fc:dd:4f:c5:
c0:26:10:a8:85:7b:e1:e1:74:0e:74:03:69:b5:72:2c:10:7b:
2e:6e:a4:15:b6:08:3c:e8:fb:f0:55:63:98:35:fa:ea:1e:1c:
b4:1d:8c:0c:e7:cd:1a:74:3b:51:9f:91:fd:49:80:e8:d9:a7:
02:0a:4c:c8:e2:28:61:07:4d:12:55:4b:d7:7e:44:4a:e2:b8:
34:61:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:50 2025 by rpki-client