Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D11E8A4F4B011EF822DF855762E951A.roa
File: 4D11E8A4F4B011EF822DF855762E951A.roa (raw, json)
Hash identifier: u16ijlBo9o4W20B+RrQsVQtC51ZDDDWmf/UBEsaCdD4=
Subject key identifier: E6:14:95:33:38:AD:F4:C9:3C:F5:FE:4A:E2:DA:A7:81:55:26:88:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D11E8A4F4B011EF822DF855762E951A.roa
Signing time: Thu 27 Feb 2025 02:12:32 +0000
ROA not before: Thu 27 Feb 2025 02:12:28 +0000
ROA not after: Thu 19 Feb 2026 02:12:28 +0000
asID: 984
IP address blocks: 156.236.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80040 (0x138a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 02:12:28 2025 GMT
Not After : Feb 19 02:12:28 2026 GMT
Subject: CN=67bfca0f-78f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a5:16:10:a5:16:85:d1:ef:d8:6b:13:8b:a3:
17:f9:b0:6a:46:f9:85:f2:f7:1c:43:49:cb:b0:29:
37:79:21:9f:8f:fc:95:28:14:07:a2:9b:1e:1e:c6:
98:9a:d5:9c:cd:5a:ad:7b:fc:79:e7:c1:70:4a:2e:
a4:4b:9f:12:48:8c:84:ef:2a:e0:55:2c:9e:3d:84:
c7:a4:71:8c:b2:c7:a2:c6:5a:54:a2:ef:74:72:82:
55:17:a3:24:95:cb:2d:10:bc:d0:92:e0:8d:eb:ec:
72:d4:db:b0:58:e4:18:e8:29:34:c5:b5:dd:2d:7f:
54:ea:5d:ad:e3:9d:e0:cc:d3:af:42:9c:65:a5:46:
3d:4d:dd:52:25:09:11:c0:9b:74:85:18:aa:9f:17:
20:43:84:95:b8:b2:67:cb:47:58:c3:75:00:d3:b9:
eb:1c:3e:f8:80:1d:9c:13:d3:57:96:fc:08:ea:5f:
39:5d:73:08:e8:e7:90:ac:c2:76:f6:c8:43:9c:65:
61:d7:85:b7:96:6d:23:e2:87:e1:e0:c4:3f:b1:cd:
b5:d8:0e:a9:4e:a4:7e:c0:74:dc:c2:4a:82:7b:b5:
31:9f:f7:0b:95:b7:27:85:22:98:fb:80:67:13:7e:
d6:83:06:1f:71:f6:e5:65:58:9c:b3:cb:f8:dd:e1:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:14:95:33:38:AD:F4:C9:3C:F5:FE:4A:E2:DA:A7:81:55:26:88:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D11E8A4F4B011EF822DF855762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.9.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c1:1b:59:5d:67:4a:36:a0:f1:e2:8d:85:d4:8f:9c:4e:3e:
b2:97:df:71:ef:27:70:c1:03:38:1c:24:28:ab:db:20:8a:63:
0b:49:08:e9:35:a0:64:e0:bf:22:52:2a:9d:89:b3:28:73:e8:
9e:9e:2b:09:b5:f6:c6:67:0f:30:52:24:8e:34:eb:ab:99:78:
3f:f9:07:f2:5f:68:c4:6a:ca:b0:b3:03:4f:76:d4:cc:e9:8f:
bf:67:fe:c0:f5:8d:1c:a3:99:7e:1c:c4:cb:ec:3d:25:db:be:
26:c5:9f:21:1f:1c:95:a0:55:17:ae:a0:0c:35:59:a7:d3:f9:
8c:cd:6c:c1:63:5c:c1:e2:57:51:64:db:1c:7e:8c:1f:fb:1a:
4e:f1:09:64:c3:90:43:d6:e4:fa:ba:3a:5d:68:87:e4:89:a7:
18:86:7f:80:ec:c2:e7:8d:93:4d:11:6d:b8:2c:fc:69:1e:c2:
96:b3:7e:7d:c0:53:29:ab:44:10:6c:71:5a:60:36:67:ce:28:
a6:cf:29:31:86:2c:c7:3b:b1:e9:f9:2c:88:0e:04:89:cd:d5:
a4:8a:55:c9:b9:ce:b3:ab:67:a0:96:9e:a3:28:5d:30:5b:23:
54:2c:4c:f3:16:37:9d:75:9e:9a:f5:c9:f6:b4:50:1b:5d:c6:
49:83:f2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:48 2025 by rpki-client