Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C47C90EF42A11EFA67FD6AC762E951A.roa
File: 6C47C90EF42A11EFA67FD6AC762E951A.roa (raw, json)
Hash identifier: SnU+4HKJ4w5+PrRMI3rLGbGz0L7ZWL0BcUE0wAo4wek=
Subject key identifier: FE:CA:A9:A3:06:B6:B8:F3:63:9B:2C:3C:FE:55:2A:B6:5D:26:12:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C47C90EF42A11EFA67FD6AC762E951A.roa
Signing time: Wed 26 Feb 2025 10:14:11 +0000
ROA not before: Wed 26 Feb 2025 10:14:08 +0000
ROA not after: Thu 19 Feb 2026 10:14:08 +0000
asID: 984
IP address blocks: 156.252.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78044 (0x130dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:14:08 2025 GMT
Not After : Feb 19 10:14:08 2026 GMT
Subject: CN=67bee973-8804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:ce:73:3a:f6:9c:ac:65:6e:f6:66:86:e5:
98:06:01:e0:98:0d:a2:ca:42:00:f6:61:8e:98:68:
30:9a:1c:58:50:43:ac:76:ba:c7:7e:8a:7c:c5:81:
1f:09:3a:bd:b0:dd:b3:87:7d:b4:66:9a:d4:00:f5:
96:5a:a3:6f:80:9a:37:34:a3:67:b9:00:13:91:b5:
2f:9b:f0:1d:91:2d:6e:27:bf:12:1e:fc:d6:77:06:
26:88:5c:c3:c7:59:21:13:ff:5b:82:0f:5c:cf:48:
7a:b1:9b:36:ed:d4:bb:ab:05:91:f6:16:cd:1f:03:
8d:16:63:62:c3:ec:81:3c:12:d9:f5:61:0d:6f:5d:
3e:cc:db:c8:af:ca:2d:ee:28:36:88:e0:62:25:87:
2f:d7:32:ca:b1:dd:ed:9f:d1:61:99:85:bd:62:00:
45:8a:39:cc:ca:2c:90:8c:00:35:f3:ec:80:62:38:
b4:ac:3e:0e:8d:2d:fa:58:9f:a9:25:2d:3a:05:9b:
82:15:de:cf:80:b7:50:96:67:61:c5:c0:70:60:ae:
e8:a1:a6:69:60:8f:e2:c3:ba:10:a0:c3:b1:4b:09:
c3:fa:d2:b5:c8:16:a6:c7:3f:3b:7d:a2:9e:20:bc:
f7:ae:ff:1a:3f:1f:d8:ad:ed:25:64:4b:45:aa:5b:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CA:A9:A3:06:B6:B8:F3:63:9B:2C:3C:FE:55:2A:B6:5D:26:12:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C47C90EF42A11EFA67FD6AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.80.0/24
Signature Algorithm: sha256WithRSAEncryption
96:bf:0e:e6:5f:14:fc:b8:ca:bf:bf:7a:98:98:fa:cb:46:07:
81:a5:a1:e3:e7:b1:c2:e5:80:dd:5c:83:5e:f6:3b:ae:d5:6f:
94:3a:f9:a0:89:25:2f:66:74:51:41:51:63:96:34:54:49:e8:
f4:5a:b1:12:c4:87:b5:fe:78:53:79:93:d5:60:c7:f6:ee:8c:
81:57:ee:ff:79:ab:9f:27:43:13:04:06:8a:9a:58:b4:af:35:
fd:63:e7:85:76:26:cb:eb:2f:f1:8b:48:94:92:b7:34:d4:51:
20:29:0e:2d:9d:af:57:6c:31:e5:fa:7c:f5:11:c5:9e:90:43:
dc:cd:fe:65:f6:e0:40:28:68:5a:77:2a:a2:6c:67:4a:75:37:
15:30:82:02:80:cb:e8:af:98:8f:f5:a6:71:97:a0:7d:8c:1b:
ff:5b:0a:7c:dc:42:1b:5a:35:2c:4f:7a:66:68:6d:bd:5c:3a:
ae:65:53:ce:f5:ba:4e:92:6d:3f:5f:5e:e8:3a:8a:65:10:5a:
21:12:27:81:a8:fb:f3:f0:11:69:c3:a4:d5:51:b5:c7:49:ea:
87:b2:07:72:2e:18:f5:d8:16:e6:92:fb:c8:7e:da:3d:94:39:
ba:d6:1e:dc:be:e6:d2:c6:c1:05:a7:dd:84:54:d9:b5:e0:05:
c4:ef:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:58 2025 by rpki-client