Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F264284F88B11EFB12A869C762E951A.roa
File: 7F264284F88B11EFB12A869C762E951A.roa (raw, json)
Hash identifier: AX3LF3SJekY4ZlLka1jFcTFpJHT/BpRjaWTC8MMsTGo=
Subject key identifier: AC:62:7A:8E:7F:2B:1B:86:EC:A1:9B:52:7B:5C:57:14:67:EF:71:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014289
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F264284F88B11EFB12A869C762E951A.roa
Signing time: Mon 03 Mar 2025 23:59:09 +0000
ROA not before: Mon 03 Mar 2025 23:59:05 +0000
ROA not after: Thu 12 Feb 2026 23:59:05 +0000
asID: 135600
IP address blocks: 156.246.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82569 (0x14289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 23:59:05 2025 GMT
Not After : Feb 12 23:59:05 2026 GMT
Subject: CN=67c6424d-62fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:51:ec:1f:9f:86:c7:93:46:97:86:52:fe:
3c:50:be:ce:c3:47:1d:08:59:35:79:42:15:b2:7c:
08:b6:1a:bb:70:05:54:68:fa:65:a1:af:f9:19:b6:
e6:7e:ec:9a:21:8c:11:19:53:11:d6:ce:0b:49:c0:
ae:fd:d6:0d:bc:39:20:d9:ae:4d:9a:ee:70:82:f6:
47:04:b7:84:9d:1e:6a:86:6d:af:4c:9c:a5:11:f0:
b9:f9:9f:8b:ab:2f:3f:c0:ae:8d:70:11:39:0c:60:
94:5c:b4:5d:62:dc:86:31:5d:31:ec:7b:75:68:85:
05:a3:0a:ef:2c:6a:6c:e6:5c:fd:f5:c2:38:b8:43:
1f:b5:98:27:94:1f:10:2a:33:f2:30:85:e7:37:f3:
49:15:d7:8a:72:ce:29:4c:ed:89:f1:7e:48:57:ac:
34:ac:55:00:7d:a8:b3:78:cb:c7:6c:24:3f:a5:2c:
82:bd:9b:df:29:ce:10:d9:11:89:72:15:7a:04:95:
6b:b3:7c:ee:d1:08:19:2f:de:ba:aa:0f:56:e0:8e:
58:1c:47:bb:c2:94:ee:3e:db:f4:d5:ce:46:af:f4:
34:8a:7a:e1:f5:5b:3d:0f:77:45:f6:25:81:a1:a5:
3f:5a:aa:da:d1:d5:a0:a8:a0:31:fe:53:9c:bc:a8:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:7A:8E:7F:2B:1B:86:EC:A1:9B:52:7B:5C:57:14:67:EF:71:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F264284F88B11EFB12A869C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.72.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:da:0f:6b:19:a5:07:be:ee:a8:8c:11:07:b6:ff:b8:52:02:
8b:f4:16:2a:14:2c:50:6b:cd:56:a2:c4:ec:51:c7:a7:d0:4e:
06:77:b9:ad:20:0b:1e:52:ec:34:36:62:e7:60:71:65:44:9d:
d1:a0:cb:45:1c:fb:93:8c:1f:49:13:bd:a5:73:54:76:64:e8:
dc:2a:47:ae:a1:5f:c9:39:10:2f:36:ec:bf:59:17:60:94:19:
50:e1:68:80:dc:b9:dd:cd:6f:e3:fe:e2:d6:ed:1c:98:82:80:
3f:92:d3:ad:dd:70:d8:9a:0e:c6:25:d9:09:30:9f:32:61:99:
1f:bb:cf:2c:e4:b4:4d:e6:16:fe:d3:de:5f:ea:d2:04:85:69:
05:ed:51:e0:65:94:5c:d2:2f:2b:97:13:ef:39:ea:41:d8:5b:
57:a8:69:dc:80:f3:e2:d5:d3:d5:60:22:a5:f1:c5:5b:e8:d8:
e9:64:69:fb:5d:f4:97:e1:8e:ae:c8:88:96:9d:54:7c:e1:a4:
2f:79:a6:ff:15:ab:e4:b7:d3:ee:0a:fe:49:e3:52:e3:9c:d8:
fb:ba:b1:d4:e7:00:d5:71:31:e9:7f:d3:93:fa:17:31:d1:82:
90:e6:7d:f2:25:64:53:1e:46:ba:43:17:1f:eb:de:54:a3:53:
ab:f1:02:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:11 2025 by rpki-client