Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/304FFC94F44011EF92B96646762E951A.roa
File: 304FFC94F44011EF92B96646762E951A.roa (raw, json)
Hash identifier: FpBMa/p43IfzrdFz/9VpDYEAuWaWEM/cNnlyrIqPk/s=
Subject key identifier: 8C:15:30:47:5A:75:58:71:82:30:9F:32:48:56:97:CE:38:21:A8:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0132BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/304FFC94F44011EF92B96646762E951A.roa
Signing time: Wed 26 Feb 2025 12:50:00 +0000
ROA not before: Wed 26 Feb 2025 12:49:56 +0000
ROA not after: Thu 19 Feb 2026 12:49:56 +0000
asID: 984
IP address blocks: 156.231.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78522 (0x132ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:49:56 2025 GMT
Not After : Feb 19 12:49:56 2026 GMT
Subject: CN=67bf0df8-2184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:e8:be:13:cc:dd:4f:25:f4:ee:68:85:69:
5a:c2:45:b6:d9:0d:e5:83:29:a8:d1:78:64:6d:2d:
d0:7b:bf:60:89:1b:07:92:9b:33:37:9e:16:fd:35:
d5:fe:06:89:71:b2:cf:fe:f2:33:88:8d:66:83:59:
12:6e:45:c7:5a:d7:55:3a:57:95:68:7c:2d:99:8c:
df:c6:68:f2:ee:41:59:cc:9e:2d:30:44:2c:e8:f7:
61:3b:50:dc:f9:f4:fc:48:af:1f:61:fe:ab:d5:8e:
b2:27:c7:2a:b2:78:3d:69:f2:12:16:06:fd:28:5a:
03:e5:ee:79:0c:bf:b7:99:33:49:4b:f8:84:5b:21:
69:29:e9:f7:c1:c6:a5:fe:33:6a:ee:41:ee:9a:26:
27:dc:9a:d5:39:a1:47:27:13:ab:6f:b8:2a:22:9d:
ab:4b:ea:98:2d:fd:81:82:19:0d:50:44:90:0b:44:
3f:2a:e1:96:b7:ed:c5:39:32:ab:8d:4e:df:9b:85:
2c:b6:4d:39:7d:84:e1:08:9e:42:67:05:2d:60:9c:
55:d6:e8:d0:de:57:6d:9d:d5:6f:1f:79:6c:50:5c:
b7:cd:15:57:7f:ac:d1:0f:d2:cd:9b:02:72:ef:c1:
66:ee:8c:4b:89:c8:51:cf:7f:f8:67:aa:05:a7:95:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:15:30:47:5A:75:58:71:82:30:9F:32:48:56:97:CE:38:21:A8:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/304FFC94F44011EF92B96646762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.4.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:01:b2:30:5c:1f:2b:48:5f:c6:e4:e8:99:f9:68:fa:e4:b4:
c8:d0:42:12:ee:24:5b:0b:85:84:86:c6:b1:30:ff:23:92:f1:
ba:04:3c:ac:06:77:44:4f:6d:3b:d9:de:26:18:08:30:79:b6:
e4:09:41:b0:14:03:a4:e7:37:68:b4:5f:bc:83:7f:68:81:41:
d4:1f:4f:38:4d:63:24:4f:7f:9e:6e:9d:59:1b:f2:e0:23:30:
6e:3e:56:ca:0d:a9:77:15:25:7c:33:ed:fd:1c:23:04:1f:80:
84:bb:2a:92:85:21:b9:04:8f:e8:e2:bc:c9:1b:95:00:e8:b9:
42:e0:f5:53:bc:6b:0d:ef:24:aa:f7:be:e4:85:82:b4:67:e6:
64:2f:b4:6d:93:22:f0:34:4a:a6:2a:15:fd:cf:2b:04:ae:da:
7b:28:29:5a:0e:8b:4f:c6:3e:9c:8a:08:1f:b1:04:8e:be:05:
97:32:06:19:cc:8e:69:ed:ad:5c:6e:a1:d2:56:57:2b:c0:1f:
4e:67:44:aa:8f:e7:8e:1a:eb:b9:5c:25:c2:ab:25:ec:10:6f:
60:8c:26:24:9e:90:0e:de:3b:6a:4b:dd:e6:7b:96:35:90:42:
d2:75:87:80:7e:d3:e8:95:6d:09:ee:1f:c1:fa:66:ee:b2:c8:
be:32:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:54 2025 by rpki-client