Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CB8BE2AF46A11EFAF5D7A6F762E951A.roa
File: 7CB8BE2AF46A11EFAF5D7A6F762E951A.roa (raw, json)
Hash identifier: 2vF8nusDyKvYvRl32fTkx6qnUmeqAdytsBpWT/7mcWw=
Subject key identifier: B9:27:AC:0F:DC:9C:E6:1C:4D:C3:D4:F0:4B:BC:AC:9A:62:90:E9:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CB8BE2AF46A11EFAF5D7A6F762E951A.roa
Signing time: Wed 26 Feb 2025 17:52:47 +0000
ROA not before: Wed 26 Feb 2025 17:52:43 +0000
ROA not after: Thu 19 Feb 2026 17:52:43 +0000
asID: 984
IP address blocks: 156.245.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79342 (0x135ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:52:43 2025 GMT
Not After : Feb 19 17:52:43 2026 GMT
Subject: CN=67bf54ef-c2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:05:a1:ba:e1:2b:b1:6a:11:e5:af:ea:8c:
2e:a9:49:23:a0:2a:ea:8f:32:a3:7d:7a:9e:a7:03:
0d:cb:c6:ce:66:a4:a0:cd:6e:a3:0e:c4:cf:2e:dc:
23:19:d0:c1:94:98:bc:fc:b4:ef:d3:cd:6b:63:bd:
b2:77:eb:44:05:6a:28:98:71:f6:41:2e:73:73:51:
11:33:e2:87:17:14:3f:0e:c6:5c:ab:a2:4d:a4:8b:
7c:11:b1:2d:32:e7:e4:6d:02:66:b3:06:73:41:ba:
d6:45:ca:ad:3b:e5:1d:b9:84:63:d4:48:72:52:89:
45:87:52:40:2f:1d:90:46:10:e2:04:9d:c4:ff:9c:
5b:d8:d4:9d:b9:be:0a:7b:ad:9d:96:61:93:86:01:
97:6c:5f:a9:91:65:88:a4:f5:fe:e7:2f:9a:f4:ea:
87:e7:9e:80:70:58:52:4e:a5:dd:51:7e:86:a0:c3:
a3:c1:f1:14:a6:82:b9:7a:f9:41:5d:85:c1:3b:9b:
dc:32:b8:83:8b:0f:da:31:63:17:ed:a9:17:b1:94:
5e:ac:28:8a:c3:40:6a:2d:5e:2f:3a:12:5c:2b:18:
bb:fd:65:c5:7a:54:cb:6a:e9:27:5e:de:ed:6e:2a:
69:02:8e:50:b0:27:80:61:3a:03:66:7b:60:39:0c:
18:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:27:AC:0F:DC:9C:E6:1C:4D:C3:D4:F0:4B:BC:AC:9A:62:90:E9:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CB8BE2AF46A11EFAF5D7A6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7a:29:c4:15:39:68:b3:6e:e6:05:69:87:c3:41:e9:b3:69:
94:00:75:8e:4d:84:7d:a0:4f:aa:e7:16:73:4a:1e:18:17:e8:
47:04:26:94:82:fa:de:0a:17:e2:10:1b:aa:0a:32:43:2e:9c:
cc:d3:ae:21:b5:17:b1:c5:5f:ec:5d:27:62:6c:7a:a9:88:78:
9e:fe:98:23:ee:12:6d:f2:c3:de:d8:6e:11:4b:d9:32:75:75:
5f:c5:1a:6c:21:99:53:ae:84:b8:ea:97:bb:ab:4a:63:a5:48:
51:60:af:17:6b:6f:1b:79:3b:39:45:e1:8e:9c:4a:5a:8f:c1:
7b:dc:f4:3d:36:a9:b3:8e:1f:fc:bd:af:a9:96:23:9a:ce:fe:
eb:38:a4:f7:55:20:80:00:ed:4a:e2:73:bb:fb:fe:4b:24:56:
e9:74:4a:00:e1:26:7b:c1:3e:aa:f1:fb:1f:3b:05:e2:2e:1e:
8c:ff:19:67:3b:8c:5b:f4:1c:d2:09:95:af:ed:98:11:4f:4d:
f1:13:c2:e7:f9:f3:80:e2:4e:0b:88:a8:80:e6:bd:8c:e5:01:
6e:6b:dd:0b:0d:08:98:5e:97:dd:e5:a7:5f:2c:eb:c7:03:df:
fd:ce:10:80:a6:0e:48:c1:85:dc:5a:3c:b4:5c:d0:af:33:a4:
f3:e0:61:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:07 2025 by rpki-client