Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B8FEB02F43911EFA53EC194762E951A.roa
File: 3B8FEB02F43911EFA53EC194762E951A.roa (raw, json)
Hash identifier: cYYqaZRLFbA5nKdngrlcsc8iCgxBydLe2Rs0g/ZIzFA=
Subject key identifier: A7:30:2A:FC:9C:23:01:D8:DE:0A:D2:99:64:3E:A5:46:9D:D6:5B:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013211
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B8FEB02F43911EFA53EC194762E951A.roa
Signing time: Wed 26 Feb 2025 12:00:12 +0000
ROA not before: Wed 26 Feb 2025 12:00:08 +0000
ROA not after: Thu 19 Feb 2026 12:00:08 +0000
asID: 984
IP address blocks: 156.252.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78353 (0x13211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:00:08 2025 GMT
Not After : Feb 19 12:00:08 2026 GMT
Subject: CN=67bf024c-9ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:c4:eb:e9:21:19:9c:f7:22:97:98:8b:94:
17:e8:4a:0c:5c:1e:fc:35:5f:38:01:8a:de:1e:ec:
78:0e:27:e0:ed:57:5c:78:a4:da:6d:9c:8d:02:38:
d2:b6:9a:56:a1:d9:3b:19:63:7c:0d:63:df:22:d9:
ff:aa:6f:20:01:fe:b3:af:a6:4c:e1:61:62:26:d6:
60:dc:a8:46:1d:f0:7c:f3:ce:bb:43:f1:24:dd:1e:
9e:7d:3b:6f:0a:4b:c4:2e:ee:44:c2:37:b5:2c:78:
9e:92:fe:0d:2f:e1:5b:d8:0c:74:79:2f:c8:c4:08:
76:5a:38:2b:35:8f:8f:32:52:eb:f4:07:d1:6b:0b:
db:6d:00:3f:52:f5:05:fb:86:0a:14:01:16:db:90:
2b:43:ab:82:fd:2e:5f:69:19:6e:cb:9d:ab:e8:55:
6a:f0:21:f4:0c:e0:cb:56:36:cf:55:fa:80:e0:f0:
67:70:d7:88:c5:d8:be:6e:55:71:f7:86:01:b9:b6:
7c:16:64:3c:95:9e:89:6c:2d:31:24:ed:5d:e8:11:
3a:0a:a4:70:ec:c5:ec:af:fe:8e:aa:aa:23:d3:33:
f1:d6:51:32:85:cd:88:95:87:bf:a4:a9:18:ef:9b:
0d:a9:b2:96:5a:63:e3:5e:63:2d:36:a8:53:4e:f1:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:30:2A:FC:9C:23:01:D8:DE:0A:D2:99:64:3E:A5:46:9D:D6:5B:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B8FEB02F43911EFA53EC194762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a0:01:a7:ea:52:56:9d:db:ac:d6:e8:ac:d8:9a:39:46:70:
91:5a:d5:59:b6:62:fa:45:1e:96:00:eb:77:11:7a:58:9c:c9:
28:cd:3d:eb:52:b9:0e:84:19:a4:90:02:a8:55:17:e8:16:97:
c0:22:b4:a1:41:c3:ed:9e:da:75:cf:ae:b8:09:f7:24:a4:69:
41:42:4d:7d:3d:35:24:c9:bb:cb:b1:53:96:bf:04:b4:b2:92:
a4:00:dd:26:f1:16:91:cf:76:75:03:d0:50:00:72:9b:bc:55:
ef:20:09:33:cb:91:45:50:ac:75:c9:04:01:ff:0b:8d:41:8b:
49:9d:90:b2:fe:ee:7c:92:ee:bc:f9:84:bf:13:6d:e7:5f:08:
9d:47:14:d7:39:12:52:8b:66:32:b4:58:42:77:9f:9a:dd:ad:
dd:12:80:64:4f:9c:c7:cc:a8:c4:06:d8:75:63:7e:39:51:6f:
62:5a:1a:54:cc:e4:a8:59:f6:e1:45:ce:be:2a:81:ac:8b:5c:
c2:83:77:72:68:4e:45:5f:07:c9:de:fc:c3:fa:8e:cd:38:f3:
d3:35:85:98:47:a5:e5:2c:a0:48:e0:d3:52:87:51:98:3a:65:
94:ab:61:4b:f7:60:a4:91:ac:ad:a9:fd:ec:d1:cd:bd:06:04:
ff:6b:45:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:40 2025 by rpki-client