Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3036EE58F45811EFB15D8B71762E951A.roa
File: 3036EE58F45811EFB15D8B71762E951A.roa (raw, json)
Hash identifier: Psih31jTf93uoOTN36LjPaxw4acqyNJ9UulJmYq39N0=
Subject key identifier: 79:D3:29:DD:78:3C:C0:43:12:4D:DF:C0:93:99:61:F0:3F:33:DB:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013463
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3036EE58F45811EFB15D8B71762E951A.roa
Signing time: Wed 26 Feb 2025 15:41:48 +0000
ROA not before: Wed 26 Feb 2025 15:41:43 +0000
ROA not after: Thu 19 Feb 2026 15:41:43 +0000
asID: 984
IP address blocks: 156.231.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78947 (0x13463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:41:43 2025 GMT
Not After : Feb 19 15:41:43 2026 GMT
Subject: CN=67bf363b-2d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:4c:76:27:2b:76:6c:32:de:8d:64:21:b7:
f5:26:0a:74:eb:f1:f3:f4:0c:eb:c6:4b:ab:7a:d9:
c2:37:51:ef:62:79:59:c4:10:4d:80:dc:44:4a:f3:
7d:db:09:fb:1e:19:6a:ee:4c:fd:21:29:1d:70:49:
97:b1:cd:ed:6d:90:57:65:15:6e:94:c9:ba:8d:7a:
c8:83:8f:be:e6:77:ba:9c:db:38:7f:28:58:cc:71:
02:b1:0c:db:7a:c8:a5:10:98:4e:d1:56:c1:60:b7:
9e:2f:28:1a:97:49:32:0e:5f:ca:76:6b:f9:e1:e3:
23:ea:d9:0b:39:c3:c7:e5:92:9b:54:54:b4:9d:46:
5a:58:77:5c:f8:85:be:d6:74:ae:6d:e4:cf:71:96:
b1:47:d9:da:f8:b7:bd:a6:72:c3:fd:a3:60:12:eb:
5c:85:5f:bf:68:66:23:96:ea:60:a1:5c:2a:f7:9c:
f6:7e:84:41:88:39:bc:8e:0c:63:89:3e:57:ec:c7:
b8:00:20:14:02:00:85:f7:77:49:81:06:36:eb:9b:
52:01:71:64:76:ec:d1:ff:5a:70:06:23:86:3f:71:
54:06:67:90:ff:1a:8c:70:01:4b:d6:bc:6a:3e:35:
38:10:80:4b:9f:bd:4a:78:7b:2e:e0:02:1d:83:c9:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D3:29:DD:78:3C:C0:43:12:4D:DF:C0:93:99:61:F0:3F:33:DB:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3036EE58F45811EFB15D8B71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:95:a4:fc:a8:1e:7b:3c:4d:86:eb:b2:e7:1a:71:1c:da:f9:
73:4f:d5:2b:0e:1b:1e:cc:ab:98:51:08:e8:b1:96:b6:93:ab:
bd:21:36:17:21:57:a5:08:8e:09:a4:39:ab:3c:9b:8f:73:9e:
b7:94:20:f8:99:fa:54:51:11:03:3c:f4:14:2c:45:46:90:48:
3f:a5:1a:e8:cb:8d:55:39:5a:44:48:3b:39:7b:91:4f:67:46:
8c:90:6b:55:c2:47:39:5e:da:ae:00:00:5a:8f:49:60:78:8f:
e1:3f:65:56:13:40:34:80:63:2b:8d:dd:17:16:4c:90:dc:d3:
e4:d3:c0:65:a6:37:69:72:04:3e:7e:4d:a8:25:c9:e3:2c:4b:
f0:89:46:cd:df:40:c9:9a:99:95:e0:d8:00:b5:fa:3d:be:37:
90:f5:cb:63:ff:58:39:db:89:32:e2:48:83:e9:fa:73:65:b3:
ef:2c:57:6a:1c:72:c7:4c:13:1b:91:58:ae:1f:09:84:9e:7b:
2f:db:9f:09:4d:52:36:b4:3e:e2:c9:68:03:fb:9f:a8:0a:a5:
6a:9e:d1:be:44:40:85:cc:20:13:3e:33:14:fc:c5:5c:bb:1b:
fa:7f:0f:6d:0e:2c:82:95:8f:ff:e0:7e:cf:55:41:71:81:1c:
c7:b0:fd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:36 2025 by rpki-client