Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69C4440EF48F11EFBE49456D762E951A.roa
File: 69C4440EF48F11EFBE49456D762E951A.roa (raw, json)
Hash identifier: PbYBEKAsq0CesgBJbJHyUVvMBc7O2GxJ/R5CEmZ/AY4=
Subject key identifier: CC:ED:0E:1F:22:8D:68:51:D1:6E:34:C1:06:22:8D:CF:8D:04:46:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01381D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69C4440EF48F11EFBE49456D762E951A.roa
Signing time: Wed 26 Feb 2025 22:17:06 +0000
ROA not before: Wed 26 Feb 2025 22:17:02 +0000
ROA not after: Thu 19 Feb 2026 22:17:02 +0000
asID: 984
IP address blocks: 156.232.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79901 (0x1381d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 22:17:02 2025 GMT
Not After : Feb 19 22:17:02 2026 GMT
Subject: CN=67bf92e2-7bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:ed:dc:cf:15:6f:e6:49:3b:41:ba:9e:ab:
de:78:3c:60:64:ee:40:5a:c8:27:18:24:fc:0f:94:
06:0f:a3:7c:35:e2:2e:51:c7:1b:7d:0f:db:5f:a0:
19:38:73:29:e4:96:14:16:dc:6e:e6:6d:69:9a:56:
bf:33:8a:34:9d:cd:47:2e:cc:9b:a2:4a:1f:95:d3:
b5:fd:cf:b2:a1:49:17:ad:8a:c5:f3:66:a8:7c:ea:
50:46:7b:e1:ba:c2:e7:ec:6b:a1:88:61:de:07:99:
90:f7:41:c5:aa:df:8e:a4:f5:0f:1f:8d:ca:8a:27:
11:b7:1d:34:65:a7:e4:9b:62:8b:ae:80:9d:35:9a:
07:2e:df:f6:20:b2:5b:16:0d:db:d5:f9:14:db:7f:
93:18:22:71:46:55:b8:c5:7e:4b:5d:f3:0e:a6:bf:
92:43:84:b9:4e:5b:f9:da:07:be:2a:f1:6f:b6:84:
8d:e3:53:2a:63:da:c2:9e:81:0e:9d:f4:44:b2:79:
a0:a1:75:37:5d:32:09:af:5d:63:b4:47:d7:f5:8a:
36:61:78:01:2f:f7:b3:36:a3:ef:59:1a:ca:e7:18:
90:fe:4b:20:6e:b9:e7:8c:04:a1:cb:95:6b:3f:bc:
b3:db:41:64:ec:2c:b5:41:42:55:d1:19:df:a0:f5:
0d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:0E:1F:22:8D:68:51:D1:6E:34:C1:06:22:8D:CF:8D:04:46:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69C4440EF48F11EFBE49456D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.45.0/24
Signature Algorithm: sha256WithRSAEncryption
35:8e:a0:71:74:5d:4e:ca:4e:0b:d2:f1:b1:96:ac:7d:61:4c:
bf:cc:ed:6d:cb:a0:97:58:6d:6f:dc:ea:34:eb:93:a1:29:c7:
10:0a:f8:e2:50:76:6a:0c:0d:9c:0a:0d:1c:ad:aa:50:95:2d:
d9:40:f5:ae:b7:f3:bf:28:2c:15:4d:cf:4d:aa:f9:b7:07:33:
99:c8:3a:c8:80:06:a7:27:d8:a9:df:85:72:42:c1:e7:8d:a2:
e3:e9:4c:fd:a8:7c:75:82:13:f1:87:a3:e6:f1:8a:68:4a:a1:
7e:71:9b:07:78:91:fc:3b:90:81:38:1a:ee:84:3c:55:3f:41:
91:81:02:b1:a3:0a:e2:cf:31:b0:61:77:d0:ff:2b:59:05:93:
4a:9c:e2:f3:53:cb:97:56:b8:df:81:e8:d4:cc:fa:15:1a:16:
f3:8d:7b:5d:36:aa:b9:dd:de:fd:b2:53:f4:72:48:23:42:06:
13:ac:91:01:28:e5:19:66:71:e0:e6:8d:b0:78:39:0f:e9:6f:
c1:e5:85:86:b6:e9:a4:90:dc:d0:e2:4b:c2:58:31:d1:0a:8e:
1c:b8:da:9a:7d:11:88:39:e0:50:89:00:4a:60:76:b1:f9:7a:
33:ac:2d:06:65:4f:74:d0:b4:48:68:56:a5:62:25:d3:75:d4:
1e:e2:a1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:21 2025 by rpki-client