Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B15BF2EF45E11EF8696B698762E951A.roa
File: 3B15BF2EF45E11EF8696B698762E951A.roa (raw, json)
Hash identifier: p/brHjI8M/D1uWfFdx52qUlr+p45VF0YMwsnRESU184=
Subject key identifier: 12:2C:7E:74:BC:CC:65:32:D7:C8:BF:8C:7B:42:49:04:B8:37:BC:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B15BF2EF45E11EF8696B698762E951A.roa
Signing time: Wed 26 Feb 2025 16:25:06 +0000
ROA not before: Wed 26 Feb 2025 16:24:56 +0000
ROA not after: Thu 19 Feb 2026 16:24:56 +0000
asID: 984
IP address blocks: 156.231.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79034 (0x134ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:24:56 2025 GMT
Not After : Feb 19 16:24:56 2026 GMT
Subject: CN=67bf4062-d785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:8e:f7:0b:13:78:19:1c:9f:ea:7f:c8:d2:
d3:72:f0:47:83:34:a9:5d:a8:db:e3:4e:70:75:99:
34:98:ee:2c:ae:e1:2b:56:02:6c:fb:21:65:1b:3e:
3d:fa:5f:c1:f7:a8:d8:46:55:ac:4f:6d:84:96:95:
87:e0:c9:dc:e9:3a:8f:12:e8:29:d2:45:44:03:c2:
93:24:26:f5:48:d2:fc:b5:d9:74:92:bf:d3:ec:1a:
8b:ae:5f:97:24:e7:10:f4:10:57:93:e0:6a:3a:b0:
8e:3e:aa:66:da:f7:73:79:0f:04:f4:68:b4:e2:9c:
6f:0a:97:ce:57:be:07:b9:67:c5:b6:ae:43:8c:e7:
10:cc:b2:00:e9:5a:e4:d3:1d:93:1e:de:0d:f3:b2:
3a:a3:ee:db:51:4d:99:7a:7d:f7:09:69:52:8c:4c:
04:74:ec:54:fa:1a:13:16:81:59:b0:ba:35:7d:34:
5b:dd:03:77:66:7f:c6:57:42:79:63:b2:07:62:58:
49:3e:79:aa:0a:02:da:b7:03:3e:2d:10:ff:b6:c3:
f1:4f:27:1f:08:b7:80:93:1d:2f:c1:97:4f:b5:28:
45:6c:ef:61:3b:1b:92:be:25:35:88:fc:13:58:7e:
b9:98:02:db:40:bc:d8:d5:80:1e:2c:c2:27:07:f1:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2C:7E:74:BC:CC:65:32:D7:C8:BF:8C:7B:42:49:04:B8:37:BC:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B15BF2EF45E11EF8696B698762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.233.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:34:8f:90:12:f1:03:57:d6:4e:7b:b4:de:be:10:ac:b8:78:
2e:76:61:43:6e:11:bd:04:20:ff:80:aa:bb:c5:6e:b7:79:b0:
82:94:91:f5:15:ed:f7:33:4b:b2:6c:81:c2:c8:09:43:b4:c9:
27:85:27:ef:33:ec:9c:7f:c2:01:89:e5:52:6d:ec:1c:20:ef:
89:54:82:a4:5d:79:fc:a1:a9:2f:8e:9e:a8:53:05:2a:e2:c6:
01:6d:0f:de:48:97:fd:ec:3c:82:e7:d2:64:51:28:5f:b3:56:
65:21:92:9b:67:c5:88:62:6d:3e:5f:3e:d0:c6:43:8a:db:b0:
e6:3f:51:cd:d0:30:ea:f5:92:e8:12:b1:54:55:40:44:0d:a8:
d9:08:98:b8:39:05:2f:87:4e:78:53:30:dd:d9:17:98:30:ab:
a2:72:ab:71:e5:37:d9:04:5d:27:0d:0b:63:af:1a:b1:14:fb:
8a:82:50:05:0a:f2:a8:63:f4:2f:27:23:7b:a7:89:80:ac:bc:
f9:8f:e3:ae:7b:10:54:53:60:0e:3f:39:a7:32:06:42:88:1c:
91:6d:7d:cc:1b:da:be:20:1d:45:28:f1:3c:98:4a:32:9d:ce:
80:06:08:bc:20:1e:a8:d0:6a:a7:fd:95:e9:1f:07:cc:66:8f:
f5:3c:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:24 2025 by rpki-client