Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83A67EA6E54311EF917DC6B8762E951A.roa
File: 83A67EA6E54311EF917DC6B8762E951A.roa (raw, json)
Hash identifier: FWH4quBOMuKXrQUeRXJErrJPzhTiySPmbqOSL+724OM=
Subject key identifier: 2F:CE:B5:77:2E:6C:96:1B:57:6E:02:12:72:56:4F:D4:46:AF:20:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83A67EA6E54311EF917DC6B8762E951A.roa
Signing time: Fri 07 Feb 2025 11:06:01 +0000
ROA not before: Fri 07 Feb 2025 11:05:50 +0000
ROA not after: Sat 13 Dec 2025 11:05:50 +0000
asID: 984
IP address blocks: 156.230.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73003 (0x11d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 11:05:50 2025 GMT
Not After : Dec 13 11:05:50 2025 GMT
Subject: CN=67a5e919-2ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:4b:45:15:af:0c:7f:8a:2d:bf:33:15:f1:
02:c4:ae:83:e3:d3:9b:cb:fc:77:70:d5:f4:04:e2:
57:d7:0e:bf:fc:39:ee:7b:e8:f3:ca:36:29:b9:d8:
3a:f4:bd:ae:44:b8:2e:2b:3c:83:7a:09:88:54:dd:
fc:cb:33:72:ca:72:c2:ec:6a:1b:d0:70:6a:34:64:
80:c4:1c:69:e6:b4:ea:e2:74:84:29:3f:b1:4e:06:
b3:a2:77:79:17:c7:52:f0:15:3d:4d:60:b8:9b:5f:
f2:3c:1e:f7:43:0b:b8:03:1b:c2:46:d7:c8:42:30:
db:e1:92:ba:d5:3c:e5:a2:25:03:83:7e:9a:03:f7:
41:3f:54:e3:19:41:90:27:33:86:65:a1:5e:50:55:
56:c4:2f:6b:dc:81:01:a2:74:83:cf:51:23:6e:36:
2e:2f:a8:d4:46:6e:dc:89:0a:ab:93:f9:32:62:b2:
d1:43:dd:d9:a8:ae:ae:e7:80:9d:21:0a:31:8d:63:
6d:77:e1:6f:f4:a9:11:97:ad:6b:cd:ca:a7:7f:4d:
90:5b:3c:e3:ee:71:92:49:64:e2:3b:51:a6:f2:5b:
da:1c:70:95:b7:7e:00:47:70:a6:80:92:c6:c7:43:
03:63:78:0c:65:a7:14:b0:61:a0:03:16:15:b9:de:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CE:B5:77:2E:6C:96:1B:57:6E:02:12:72:56:4F:D4:46:AF:20:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83A67EA6E54311EF917DC6B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.173.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:36:00:80:ef:98:69:79:00:f8:d2:ff:d3:f1:5e:c7:61:20:
44:da:51:76:e1:b9:30:bc:ff:0d:08:98:71:72:c0:f4:ca:54:
28:25:70:b5:ca:c5:b7:3f:bc:68:32:df:0c:de:60:ee:80:83:
b8:32:cf:99:22:ae:60:b3:19:d5:48:be:dd:96:0c:49:ee:33:
a3:18:fb:f0:12:22:ce:7a:d9:f3:7c:2a:b3:c9:85:92:62:c8:
94:ec:16:a2:48:06:3a:a8:8a:fd:4b:8c:e0:97:5b:ed:02:0b:
d3:65:1e:cd:59:13:76:2d:1f:09:86:02:a6:d9:ff:81:ac:ef:
06:7d:c6:e3:62:b5:b8:b8:76:23:1b:cb:66:76:3e:b0:3c:f3:
60:23:fa:c2:59:ff:de:74:83:89:f5:10:fe:d3:60:51:e9:8b:
e5:59:c4:62:8b:6f:9c:3a:e4:17:e8:f4:e1:32:15:87:a7:43:
fa:4c:a9:1f:a7:68:a7:c8:f2:b1:cd:1e:08:9d:cb:3c:0d:6a:
8e:88:8d:e8:4e:f4:6e:d4:3d:70:91:dd:51:f8:d9:b4:1a:df:
c2:4d:89:82:7b:c0:49:36:42:67:1c:6d:8c:5b:54:12:3c:6d:
7c:68:46:e5:08:1a:c4:ef:4b:69:d2:f1:31:1d:58:0d:ba:0a:
15:8f:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:43 2025 by rpki-client