Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71F4288AF45611EFBE15D163762E951A.roa
File: 71F4288AF45611EFBE15D163762E951A.roa (raw, json)
Hash identifier: fSPwFVQFD7nEIyII6I0OIq2oDcGJ3wLuLcIj4CkdFek=
Subject key identifier: E7:1C:57:3F:FC:E6:D4:2F:02:6D:A0:66:76:28:55:AF:C5:65:A3:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013449
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71F4288AF45611EFBE15D163762E951A.roa
Signing time: Wed 26 Feb 2025 15:29:19 +0000
ROA not before: Wed 26 Feb 2025 15:29:15 +0000
ROA not after: Thu 19 Feb 2026 15:29:15 +0000
asID: 984
IP address blocks: 156.231.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78921 (0x13449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:29:15 2025 GMT
Not After : Feb 19 15:29:15 2026 GMT
Subject: CN=67bf334f-df89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:07:83:43:03:59:59:2c:42:f8:f9:a7:04:
8f:b8:c7:e8:ec:7f:21:1b:3c:a6:1a:ab:7a:32:81:
98:18:9d:0f:85:9b:5a:91:86:5d:89:93:ba:62:46:
33:7f:37:e9:c7:6c:55:d8:c8:90:db:35:d1:d9:63:
5c:bc:a0:40:55:ac:2c:1c:56:01:f9:95:00:1c:73:
8b:40:07:bd:9a:4d:85:06:dc:5f:fe:09:ed:21:7b:
40:b4:cc:be:41:30:03:68:1e:8d:59:75:d3:81:63:
14:e5:0d:e1:59:6a:81:57:78:1e:0f:7e:47:18:07:
fe:97:2f:c3:62:d1:06:02:98:2d:f2:3e:25:a5:e8:
7e:53:f4:74:ae:62:e5:55:c3:b0:68:fd:d0:c9:09:
58:59:bf:e8:df:3c:40:68:fd:74:17:9c:63:1e:65:
6f:74:02:49:6f:70:9e:c0:a9:8a:90:0f:73:97:ae:
26:09:8a:47:8b:f9:22:7b:8d:9c:ba:60:cf:23:b0:
76:e3:cd:97:4d:c7:a4:54:e8:2e:5f:d6:20:29:b4:
4d:1d:bc:9f:62:ee:38:5a:c8:a9:e2:a9:19:d8:47:
9e:99:8c:8e:a5:3f:d3:af:db:4a:14:f0:e2:0d:8f:
59:c0:66:f3:ee:df:86:72:64:ab:de:73:54:89:c1:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1C:57:3F:FC:E6:D4:2F:02:6D:A0:66:76:28:55:AF:C5:65:A3:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71F4288AF45611EFBE15D163762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.211.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0f:ee:12:cc:54:76:68:1b:98:b2:7d:23:c2:1a:a3:c1:fc:
68:2b:ff:8e:3d:2a:c1:fc:dc:a9:c7:6c:4e:b2:a4:fb:56:60:
8b:83:5b:c0:c1:04:1a:d0:3b:8a:f9:35:2c:74:c4:d9:70:5c:
0c:a3:ff:4a:b3:a3:4d:17:2a:48:48:5f:f1:9a:b9:e1:a9:d4:
7d:01:69:df:95:aa:53:c1:ba:da:97:93:dd:bf:50:6f:7e:53:
5d:4b:89:4d:da:67:42:90:85:92:12:21:85:a8:6c:38:a9:69:
fe:80:6d:ad:71:db:93:2d:3b:fb:5a:a0:e0:fa:37:e6:11:71:
df:e3:ec:cb:d3:9d:ef:e3:bc:4d:83:dd:74:93:b7:40:ce:1f:
82:3f:5f:3a:63:9d:c9:bb:2e:fe:51:cb:4e:74:08:e5:fe:32:
3d:c0:51:a6:67:a9:07:bf:63:93:0f:63:fa:5f:83:29:76:16:
5a:be:5b:98:16:92:7b:e6:24:01:65:98:1f:0a:0c:f8:aa:43:
bd:f9:77:5f:3b:b5:ef:2d:de:51:1f:6a:dc:a0:2e:19:08:a6:
4c:dc:d0:74:5c:ec:3d:6c:45:37:1c:37:8f:13:08:64:df:d1:
97:98:2e:90:ae:26:0f:7d:59:c1:14:a8:40:01:86:ad:53:ae:
9d:e5:39:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:17 2025 by rpki-client