Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FD9F1ACF44A11EFAC64318E762E951A.roa
File: 2FD9F1ACF44A11EFAC64318E762E951A.roa (raw, json)
Hash identifier: mv3LOjNLdWdBC386ee5KqChGTmujIXk1YLnSbbBxnb4=
Subject key identifier: 4C:B6:9C:90:28:0C:3E:7F:82:3B:22:8C:9F:A8:29:E6:7E:66:F0:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013384
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FD9F1ACF44A11EFAC64318E762E951A.roa
Signing time: Wed 26 Feb 2025 14:01:34 +0000
ROA not before: Wed 26 Feb 2025 14:01:30 +0000
ROA not after: Thu 19 Feb 2026 14:01:30 +0000
asID: 984
IP address blocks: 156.231.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78724 (0x13384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:01:30 2025 GMT
Not After : Feb 19 14:01:30 2026 GMT
Subject: CN=67bf1ebe-13ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:aa:7b:7c:a1:8f:bc:43:3d:b1:66:f0:bb:77:
64:e3:e7:a1:e7:0d:fd:7f:3b:c0:a7:58:8d:98:15:
82:27:cc:7e:86:ff:89:03:80:71:ff:6d:70:d0:fd:
d6:38:aa:b4:a2:20:77:10:1f:c5:05:df:49:7e:02:
8f:a0:80:a5:62:8d:b6:50:44:da:57:81:b8:23:45:
d4:37:a6:12:24:4a:6e:88:48:c3:f2:9f:c8:03:01:
59:6b:7f:30:09:e8:f8:58:01:79:d0:57:2c:cd:32:
0f:ee:2f:59:2f:c9:22:f2:1a:a2:07:5e:84:c4:ce:
85:3c:80:9b:0e:d5:a0:b0:a3:be:42:2a:58:86:11:
64:7e:aa:b8:fb:ba:8e:5f:23:47:a1:b9:f9:35:f4:
fc:81:ba:1f:da:fb:92:5a:35:e2:19:b5:b4:4a:1a:
c7:f2:5e:cf:a9:ed:38:a4:34:41:26:9a:f4:96:82:
d2:b0:7f:85:9e:1c:12:f9:1b:8b:e6:dd:4e:cf:ef:
33:66:a0:81:be:7c:c1:8d:dd:12:31:83:59:95:3a:
57:24:b4:19:a5:7e:16:92:f1:d7:2b:c4:b4:bd:58:
86:b3:cc:ab:2e:96:f2:53:bf:95:ad:c3:9a:8b:ed:
ad:e9:89:fa:cf:71:2d:45:99:cd:68:8b:64:3b:2f:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B6:9C:90:28:0C:3E:7F:82:3B:22:8C:9F:A8:29:E6:7E:66:F0:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FD9F1ACF44A11EFAC64318E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.165.0/24
Signature Algorithm: sha256WithRSAEncryption
33:33:b0:18:3d:df:fa:f9:ec:d2:60:e7:79:2e:ad:e0:96:4d:
d2:9e:e4:c8:df:5a:76:a0:30:77:69:83:10:38:08:1f:1f:02:
6d:2f:66:97:7f:29:a8:bf:61:3f:a2:0e:ab:36:2b:28:f5:8c:
10:e1:ad:34:22:cd:06:c5:c5:5f:c4:b7:a0:b4:a7:93:80:10:
d4:9b:d1:de:6b:5c:e5:7d:1f:53:7b:d7:66:2f:43:b2:d8:ee:
ce:23:e3:db:1e:52:9e:83:45:35:57:fa:df:ad:7d:a9:44:33:
5a:77:66:17:7b:14:2c:81:97:ed:78:15:db:b0:c3:2e:54:d8:
c0:b4:fb:e3:fc:88:8c:2b:dd:eb:f0:99:87:a6:3f:1f:47:25:
79:9e:1a:6a:b3:bc:c6:e8:9d:14:9b:42:99:3f:f5:c2:0b:60:
de:f1:8f:91:55:2d:81:41:de:f0:39:3b:ae:61:43:b0:51:9f:
91:34:7b:fe:cb:94:91:4e:6d:37:48:f8:8a:7c:ef:37:44:43:
5e:9c:a5:49:41:8a:95:6c:af:7b:7e:5d:43:c9:cd:44:3b:3a:
74:bc:84:c5:57:19:59:c5:74:7f:97:06:39:45:dc:08:d0:7b:
9c:69:9c:bc:b1:b1:b9:93:e4:86:7b:6c:0e:d1:24:8d:f6:84:
b8:92:92:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:37:22 2025 by rpki-client