Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3918D298F42111EFA1FEB86D762E951A.roa
File: 3918D298F42111EFA1FEB86D762E951A.roa (raw, json)
Hash identifier: Iiv3ncIIoZyvSmXlET4MFfKtnZ14oMLyCunOcp6brYA=
Subject key identifier: 8D:6C:00:62:F0:15:CA:39:01:03:66:03:6D:49:8A:1E:4B:4C:12:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01304A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3918D298F42111EFA1FEB86D762E951A.roa
Signing time: Wed 26 Feb 2025 09:08:20 +0000
ROA not before: Wed 26 Feb 2025 09:08:16 +0000
ROA not after: Thu 19 Feb 2026 09:08:16 +0000
asID: 984
IP address blocks: 156.230.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77898 (0x1304a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:08:16 2025 GMT
Not After : Feb 19 09:08:16 2026 GMT
Subject: CN=67beda04-460a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:7f:6f:97:b0:12:1d:b6:00:5b:58:e1:08:
dc:8d:8d:c3:a8:b0:2d:38:d8:51:77:cb:47:4a:4e:
2a:be:10:28:8b:67:0d:28:f7:fa:d6:51:67:df:24:
94:f3:96:7d:9d:ff:91:df:08:52:2d:d5:96:7c:c4:
df:be:5c:16:39:0a:32:f8:be:ea:a3:60:a8:9d:f6:
92:cb:5a:54:01:3c:c4:24:2d:bc:88:9a:0c:a3:68:
9b:ea:b9:99:13:41:db:05:30:0e:e7:93:73:7c:9b:
d0:af:bf:5a:d1:d5:88:b9:07:6f:0b:d1:8d:f7:f1:
8f:48:5c:3f:0e:f7:51:fc:82:23:4d:1f:5e:48:45:
a9:77:ea:16:75:f0:8f:23:a2:3d:60:62:ad:57:cb:
b6:a8:be:17:39:b6:56:a1:77:28:cd:54:85:39:42:
5b:6d:4a:31:02:c2:77:54:e2:fa:89:e5:28:67:70:
84:29:4b:cf:8c:ec:2b:1b:82:19:1c:b2:d6:8e:ad:
db:11:36:71:2c:2c:a1:d4:8c:81:47:5a:7e:bf:89:
eb:d5:16:1c:95:35:b7:1f:d3:85:3e:e2:75:22:ec:
8f:3b:c2:96:d0:0f:d9:6a:a2:ca:64:61:8c:cf:5e:
10:07:7f:0c:c3:ef:8c:45:53:dc:9a:3a:93:0c:24:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6C:00:62:F0:15:CA:39:01:03:66:03:6D:49:8A:1E:4B:4C:12:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3918D298F42111EFA1FEB86D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.17.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:cc:91:64:46:a6:da:4f:a0:18:8e:0e:5d:04:f1:d9:04:4f:
b6:c7:73:02:67:62:73:1a:e5:ee:e0:80:10:eb:ca:42:e0:c2:
16:51:65:f1:c8:b2:d2:bd:99:b0:fa:85:8c:39:42:81:b6:7c:
89:9e:2a:b7:66:ed:84:7a:3f:c6:97:2e:85:c9:73:a1:a2:06:
f1:ca:ca:2f:c6:46:24:cf:d1:fc:3b:2d:b7:26:b5:fc:b4:76:
9c:11:34:cb:ae:2c:22:7f:43:e5:28:7b:33:33:84:03:4b:de:
fa:87:e8:10:d0:8b:43:e2:47:9a:3d:17:ca:68:d8:52:7a:d3:
8f:03:50:69:d1:d2:d5:0d:14:64:7e:b4:60:6b:b6:27:cf:dd:
71:b5:aa:85:ed:64:81:a5:1a:c7:98:9b:9d:32:52:a6:63:94:
ee:bc:d7:1f:c1:2c:27:69:e0:d9:40:21:05:9a:54:58:d5:b8:
6c:25:60:03:dc:89:37:45:aa:9d:5d:d9:b8:fd:44:32:97:1b:
8a:68:b6:02:04:dc:e3:7b:ab:c8:a2:3a:31:1c:08:22:66:6e:
9d:d2:bb:15:76:10:62:59:2a:96:2b:41:60:29:b6:1d:3c:7a:
a6:37:a1:95:8f:d8:8d:ea:8a:e9:0d:69:b1:bd:16:df:6e:79:
c8:a1:6a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:09 2025 by rpki-client