Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C86567CF44211EFA44F9555762E951A.roa
File: 4C86567CF44211EFA44F9555762E951A.roa (raw, json)
Hash identifier: OLVEaHLHhFtXfmmF6x1iW5FRipBAxHP2nL/hbceegW0=
Subject key identifier: E6:7C:46:08:E1:75:28:0A:A1:CF:6D:CC:C3:10:F6:92:4D:CB:04:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0132E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C86567CF44211EFA44F9555762E951A.roa
Signing time: Wed 26 Feb 2025 13:05:06 +0000
ROA not before: Wed 26 Feb 2025 13:04:56 +0000
ROA not after: Thu 19 Feb 2026 13:04:56 +0000
asID: 984
IP address blocks: 156.231.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78563 (0x132e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:04:56 2025 GMT
Not After : Feb 19 13:04:56 2026 GMT
Subject: CN=67bf1182-53f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:41:99:75:d4:3b:b5:67:2b:80:10:eb:3d:
47:a3:8e:b0:50:0e:b5:5d:0f:ba:5f:3a:e6:19:76:
67:87:e6:b8:29:a6:60:c6:7c:f8:28:f9:cd:d0:87:
13:1e:1a:da:30:25:66:eb:2e:99:fb:db:d8:6d:1e:
06:23:63:dd:e5:65:c3:a9:42:85:01:f0:c5:66:18:
ba:d2:38:98:28:7a:28:16:f5:e4:81:0c:4a:49:d4:
50:59:32:82:12:7b:c7:2a:ea:ff:06:b3:da:9c:14:
c0:a4:2e:c0:6f:f4:93:da:e0:b8:8c:58:47:5a:dd:
06:b0:b9:54:bb:96:fb:5c:0c:e6:e8:b9:48:1b:7b:
4f:74:30:d5:5f:d2:ea:b5:dd:3b:bf:07:28:f3:43:
02:07:14:3b:87:74:d5:3c:36:0d:24:2b:42:ae:06:
cc:9a:f1:a6:1e:58:ee:2a:19:e7:e0:6e:0e:3f:f0:
61:d6:a4:2e:34:9b:c9:1a:3d:19:6c:aa:13:ff:6f:
95:bd:9e:78:1a:fe:ab:f7:cd:65:fc:24:7d:38:9d:
bb:78:89:1d:cf:e2:c9:bf:44:79:48:67:42:19:51:
37:5b:27:09:b8:d2:90:99:a3:9c:8d:f3:5b:80:55:
07:01:56:17:15:f6:07:62:0d:15:6e:8b:6b:4e:31:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7C:46:08:E1:75:28:0A:A1:CF:6D:CC:C3:10:F6:92:4D:CB:04:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C86567CF44211EFA44F9555762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.10.0/24
Signature Algorithm: sha256WithRSAEncryption
00:53:1e:78:27:07:68:d1:a0:d1:29:8a:9d:33:1d:87:e9:92:
2a:7f:bd:ff:55:be:f7:b7:e9:74:51:bb:8e:ea:5f:8d:30:bb:
2d:49:82:00:ac:08:de:f8:7a:69:bc:d6:1e:41:9a:ec:94:95:
c3:e8:c7:71:90:04:20:a6:9e:35:74:41:2b:f6:5a:a4:ca:2d:
6b:a9:f6:67:51:24:7f:38:1b:c4:e3:14:ef:09:81:41:e4:2b:
aa:5a:2c:34:7c:b4:6f:10:76:8b:7f:73:31:8e:35:52:3c:3d:
24:cc:5a:67:e2:ff:f4:f9:35:6e:34:9a:17:8e:e5:90:26:92:
15:8c:8e:49:b8:30:bd:51:fb:b5:a2:3b:8a:ba:2a:50:c4:fb:
fd:a5:f9:b6:d6:81:4a:5f:fb:9f:85:99:22:01:4e:4e:54:c5:
58:09:df:d3:9a:11:cb:b5:9d:99:fa:56:00:b6:bb:40:38:1a:
83:ec:b0:5c:cf:8e:fc:15:39:d2:bb:10:25:28:cc:63:cd:01:
0f:f7:8f:e9:60:3e:2e:78:00:8c:36:ef:5a:fc:43:8a:c5:1e:
f9:ba:52:4d:02:b6:e0:dc:a6:95:02:56:d4:ff:b3:7f:ff:91:
c5:39:3c:e5:61:9c:33:44:70:c2:97:e5:be:eb:96:7e:e8:a9:
02:8b:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:36 2025 by rpki-client