Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E8F81CAF43111EFA094CA5E762E951A.roa
File: 4E8F81CAF43111EFA094CA5E762E951A.roa (raw, json)
Hash identifier: shqNV5ET8Y9m3f/Q7p6pcx8SqAYugRtww6pfbY7qq6Q=
Subject key identifier: DF:17:3A:B6:07:D1:CC:66:B7:08:EF:54:7A:A7:D8:0D:85:78:E7:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013192
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E8F81CAF43111EFA094CA5E762E951A.roa
Signing time: Wed 26 Feb 2025 11:03:28 +0000
ROA not before: Wed 26 Feb 2025 11:03:24 +0000
ROA not after: Thu 19 Feb 2026 11:03:24 +0000
asID: 984
IP address blocks: 156.252.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78226 (0x13192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:03:24 2025 GMT
Not After : Feb 19 11:03:24 2026 GMT
Subject: CN=67bef500-b80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:27:22:91:69:84:78:86:08:ed:c0:f5:cf:
7d:a1:81:fc:07:29:45:86:76:22:5d:e5:0a:80:25:
82:17:f4:ec:9c:74:12:c3:68:18:3f:cd:c6:ed:78:
ff:07:78:d1:f9:1c:fc:dc:40:db:ad:58:2b:3e:40:
92:18:60:b8:3b:a5:c7:13:83:84:db:e4:ee:47:da:
25:b0:f1:55:d5:f0:f3:e9:0e:a5:d2:a9:31:27:75:
f7:7e:c0:9a:15:f7:01:62:1f:92:6b:65:d1:7a:cf:
92:d6:d9:59:33:db:cf:58:d8:71:de:44:c2:86:be:
90:ea:30:c6:40:7e:52:76:be:43:8d:4a:95:f7:5a:
f7:cc:ae:c7:3f:60:a2:78:a9:06:9b:a5:d1:c1:28:
67:7d:16:04:ee:24:2d:c5:4f:f3:2a:64:43:71:81:
4b:12:80:e9:3b:ec:97:51:1a:96:ba:27:41:63:b3:
43:3b:1a:e4:fd:b1:d0:bc:55:aa:34:c9:2a:ce:34:
dc:6d:d9:50:4f:33:a7:5f:06:4e:75:84:4a:5e:a1:
ba:97:71:ce:5c:08:60:c5:19:e2:6f:03:b4:4e:ab:
be:3f:5c:4d:0f:a8:14:5f:9f:97:98:0e:e5:4c:03:
58:05:69:0a:5a:0c:0b:de:25:0a:18:32:b9:f0:70:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:17:3A:B6:07:D1:CC:66:B7:08:EF:54:7A:A7:D8:0D:85:78:E7:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E8F81CAF43111EFA094CA5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.106.0/24
Signature Algorithm: sha256WithRSAEncryption
85:48:bf:af:ba:52:c0:48:2d:62:44:09:f9:66:86:e3:a6:8a:
a9:53:bb:3e:82:1a:25:3e:bb:0e:2a:0d:94:62:75:64:97:62:
0c:78:b3:e2:2a:55:2e:1d:53:7c:76:8f:81:0d:89:92:3e:72:
26:62:c9:60:54:11:93:c4:27:78:e9:b8:a2:e0:ac:2e:50:fd:
16:37:a4:86:3c:33:e2:08:ee:b4:13:a9:51:ea:ba:85:ad:57:
94:6f:27:83:bd:52:1d:69:67:c7:11:0f:a2:80:29:8a:2f:95:
23:15:e6:ad:5f:64:44:38:a0:b3:32:c2:61:1b:f4:f5:9f:72:
1e:ce:76:0a:eb:d7:1b:5d:48:db:2e:c0:a1:04:c6:93:d7:c2:
c3:d8:3b:58:ae:9f:65:75:90:c4:85:15:b0:ba:75:56:5a:9c:
8f:ea:08:18:dd:96:fc:08:29:24:95:30:de:c3:61:f7:b3:54:
08:90:5b:2c:bd:36:2a:df:1a:3f:08:7c:db:c9:6b:41:26:f0:
45:aa:78:97:3e:ce:9c:72:0c:bd:7d:b4:39:b4:6c:12:ca:21:
18:7c:a7:48:ec:91:3f:50:4b:58:dc:9d:5e:cf:9a:81:37:e9:
9e:78:99:9e:77:31:9e:1c:1b:a0:cb:87:42:a6:e9:45:d1:d1:
cc:85:63:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:08 2025 by rpki-client