Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5297785CF46011EF8819E4A6762E951A.roa
File: 5297785CF46011EF8819E4A6762E951A.roa (raw, json)
Hash identifier: Y0k17f0BhxfQGDQr5hP4G7iq11pJfGRdUm/Cp/CDvG0=
Subject key identifier: 23:43:27:32:CF:4F:94:81:36:0D:20:5D:C6:83:EE:3B:0C:07:70:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5297785CF46011EF8819E4A6762E951A.roa
Signing time: Wed 26 Feb 2025 16:40:01 +0000
ROA not before: Wed 26 Feb 2025 16:39:57 +0000
ROA not after: Thu 19 Feb 2026 16:39:57 +0000
asID: 984
IP address blocks: 156.231.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79082 (0x134ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:39:57 2025 GMT
Not After : Feb 19 16:39:57 2026 GMT
Subject: CN=67bf43e1-cf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:a1:f0:2d:dd:f6:a6:ad:a7:29:80:71:2a:
cb:09:05:fb:cc:47:a0:53:c6:83:bb:f1:36:4a:d2:
42:db:f2:f0:16:c7:da:59:b7:ec:4c:28:5b:54:8a:
7d:d5:24:4f:9e:ce:34:75:21:ff:02:b9:43:a3:07:
8a:6c:f9:77:3e:24:0e:07:96:76:bf:50:ec:c9:34:
85:a3:18:48:a2:88:04:73:92:9c:c9:15:0f:58:81:
00:4d:92:16:d0:35:10:43:8a:04:0b:d5:23:0e:a4:
e5:9f:67:b7:b3:f8:fd:27:66:68:7c:b4:65:a5:21:
d0:d7:12:93:e3:4e:5e:23:3b:1f:d5:e4:37:c0:c9:
ea:9f:7d:ea:aa:a5:25:11:96:3e:c3:dc:da:a5:44:
f0:ef:7a:b6:5e:80:5e:77:04:7c:42:26:3f:1a:35:
69:d5:60:e3:fa:0c:fe:fe:2e:9c:83:76:09:50:34:
5d:02:3e:92:08:19:0c:88:9b:e6:5b:ce:a9:f4:3d:
db:75:ba:16:4d:b4:88:f7:ea:88:53:2b:7f:2d:4c:
18:f9:96:f2:be:f5:e8:61:9e:44:3a:6d:27:24:a9:
08:32:f4:42:8c:60:7c:8e:b4:fe:3c:35:f2:5e:41:
8b:fd:09:3b:6b:03:e2:22:3b:ed:b5:1a:83:73:df:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:43:27:32:CF:4F:94:81:36:0D:20:5D:C6:83:EE:3B:0C:07:70:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5297785CF46011EF8819E4A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:33:6d:c6:a9:18:38:f6:45:15:5f:90:cc:cc:98:05:0b:45:
ef:a1:16:12:60:54:81:10:3c:5b:31:1b:09:37:54:83:fb:b9:
9d:62:2c:c1:f3:76:52:54:27:19:c9:a5:38:35:fc:b6:9a:33:
55:91:1f:d4:c5:7e:d2:fc:54:15:c7:52:7f:40:18:cc:59:30:
07:01:c2:e5:6b:9b:56:a1:77:b0:fc:b6:df:54:54:69:3f:d5:
6c:cc:b9:24:54:27:27:72:07:f6:81:b1:84:d5:85:a0:9c:c3:
9e:17:97:da:92:ff:a1:2a:9f:6d:05:d8:da:c3:0d:a0:e3:75:
11:34:b3:94:f3:d1:15:85:d8:91:3e:4e:ae:77:23:af:65:a1:
ca:ee:f2:85:3d:2a:58:e2:c4:4e:11:f0:5c:8b:d3:a0:08:7f:
2a:f0:aa:d0:19:50:51:7d:79:3d:e3:0f:81:90:d1:a2:d1:f3:
c2:f0:b5:cc:e6:49:69:f7:c2:ce:02:6b:ae:24:5b:8f:f7:15:
72:f3:a8:4d:5a:a9:26:86:3e:52:4c:a3:06:7a:7e:7e:2d:23:
00:df:f7:6e:5e:e8:8b:d9:d4:42:85:7c:82:fe:23:65:1b:e9:
cb:c5:b5:0f:20:09:cf:1e:17:11:5b:4e:3c:8a:21:db:d7:73:
e8:54:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:08 2025 by rpki-client