Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35FAEFA0F49011EFB8264472762E951A.roa
File: 35FAEFA0F49011EFB8264472762E951A.roa (raw, json)
Hash identifier: p2TwUL0/pURvbp5rC7CAQ9N2B3AbX+rj4TE7zOb3E1o=
Subject key identifier: 15:54:97:EC:C6:9D:71:8B:AA:68:DD:F5:0B:EA:09:FA:A5:B7:68:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013825
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35FAEFA0F49011EFB8264472762E951A.roa
Signing time: Wed 26 Feb 2025 22:22:49 +0000
ROA not before: Wed 26 Feb 2025 22:22:45 +0000
ROA not after: Thu 19 Feb 2026 22:22:45 +0000
asID: 984
IP address blocks: 156.232.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79909 (0x13825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 22:22:45 2025 GMT
Not After : Feb 19 22:22:45 2026 GMT
Subject: CN=67bf9439-2c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3a:03:50:f1:82:f8:55:07:e4:24:7a:ad:5d:
94:88:14:03:eb:c3:83:36:d7:2e:0e:fd:c9:3c:49:
c3:46:45:56:b0:6e:15:55:12:5f:5b:4d:06:18:f8:
ad:4d:49:b1:44:98:5f:88:a8:41:b4:a1:67:50:c2:
49:d4:7f:c6:69:de:0e:d4:e8:bc:1d:bd:88:46:7e:
28:be:43:66:03:9e:1a:2a:5b:9c:e6:cc:ba:e5:ee:
ef:b7:40:8d:6d:6a:52:2a:35:69:4e:e0:7d:9b:50:
3b:00:a0:ca:cd:98:98:33:eb:5d:9e:fe:ee:7f:d6:
c7:6f:b0:af:45:a0:d0:42:bc:fb:66:97:c3:a6:9e:
ba:08:3a:6d:c0:78:de:c9:00:b9:4e:9f:16:cf:75:
d3:84:f5:f0:a7:d8:f4:22:64:e7:6f:2c:26:07:6a:
73:56:ce:b1:da:3d:f2:c3:0d:9f:78:af:9c:40:d7:
21:7b:a3:7e:28:58:09:7e:9d:9f:fb:5d:85:ed:3c:
95:30:e2:cb:63:26:64:e6:9e:44:bf:6c:30:37:b4:
f7:68:bc:e4:11:6c:14:4b:94:46:2c:c4:7f:08:80:
ce:b4:b7:b1:0d:ec:1b:b5:1d:3e:ae:ae:35:c7:9e:
76:c1:95:c6:2f:16:c6:18:09:00:ec:10:50:39:f7:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:54:97:EC:C6:9D:71:8B:AA:68:DD:F5:0B:EA:09:FA:A5:B7:68:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35FAEFA0F49011EFB8264472762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.47.0/24
Signature Algorithm: sha256WithRSAEncryption
62:30:0b:db:48:50:f4:0a:e0:3e:9c:90:f9:76:44:2e:29:7a:
0b:1f:17:16:43:b6:35:9f:d1:cf:9a:bb:30:31:dc:e2:77:63:
ab:ba:24:3c:0d:38:4f:74:92:b7:70:22:7c:a5:b9:d5:33:65:
f8:53:ae:e3:4f:98:2e:a2:cb:55:c7:5d:51:6b:73:0e:71:07:
f0:cf:1a:ce:07:81:ba:6d:3c:c4:4d:e4:15:b8:08:51:30:6f:
17:91:be:f7:3e:6f:84:d9:ad:d6:91:30:c6:99:1f:52:ba:6e:
c2:df:b9:71:a8:f3:f9:af:47:19:c8:c5:94:d7:cb:55:ad:41:
52:d0:7f:4c:ee:eb:51:89:30:42:5a:60:01:7e:23:c3:18:f6:
43:c8:bf:35:f9:96:42:2a:a2:f7:18:33:02:b2:1f:13:26:01:
b8:92:7b:b1:a2:54:f0:9c:22:4c:39:04:f8:16:19:a3:97:48:
7c:8b:41:53:95:cf:a8:eb:45:ef:3e:50:4d:d4:0c:fa:9e:2f:
e5:93:b4:0a:2f:52:98:15:1d:1f:43:7a:da:a1:d7:08:eb:19:
34:65:73:10:01:ba:5e:98:92:3f:3c:8a:79:71:74:bf:9a:17:
74:00:03:17:d5:23:f7:23:bf:2d:23:66:11:57:b5:5a:6c:76:
06:df:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:46 2025 by rpki-client