Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B1CC5E6F47A11EFB4D4D95F762E951A.roa
File: 8B1CC5E6F47A11EFB4D4D95F762E951A.roa (raw, json)
Hash identifier: MHN6Msg8jYcQCpBZl1QB0UKtNKfVSn916Mdo+E5CIjA=
Subject key identifier: 19:6F:93:C6:5D:CC:04:9C:83:D7:6E:2E:4D:3C:BF:22:34:BA:6D:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013735
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B1CC5E6F47A11EFB4D4D95F762E951A.roa
Signing time: Wed 26 Feb 2025 19:47:43 +0000
ROA not before: Wed 26 Feb 2025 19:47:39 +0000
ROA not after: Thu 19 Feb 2026 19:47:39 +0000
asID: 984
IP address blocks: 156.247.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79669 (0x13735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:47:39 2025 GMT
Not After : Feb 19 19:47:39 2026 GMT
Subject: CN=67bf6fdf-975f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:07:7b:c5:66:18:7a:2b:eb:79:e4:4b:59:
9c:6f:8f:a9:7e:40:a1:cc:8f:0f:e2:0d:b3:99:a2:
45:c6:5b:ff:72:6d:97:aa:28:3e:5a:cf:97:3a:2f:
f0:3d:81:ca:fe:19:9a:02:de:0a:7f:ed:3c:95:30:
f0:05:55:f6:ca:30:dc:98:94:ed:1a:82:18:b2:4b:
d5:3e:7e:58:76:b2:5f:ed:92:b9:ff:f9:b0:29:a0:
5a:c8:9e:5a:26:2e:2a:e7:28:8a:26:f9:7d:e6:0f:
78:f0:6f:3f:96:60:07:6a:15:e8:ad:50:d2:1c:94:
de:ad:27:ca:e4:b2:8b:e4:34:35:87:6f:1e:32:93:
e5:f8:b5:0a:b3:e6:a2:48:9a:1a:04:2f:11:76:ee:
18:ec:94:4d:05:2e:6b:91:31:42:32:38:c3:12:02:
66:07:a0:ee:66:7f:11:f9:2e:14:16:18:91:d2:89:
79:fa:87:48:2b:88:18:5d:8c:d5:53:ab:df:3d:f2:
9d:46:10:66:ea:be:47:01:e1:b5:4d:6a:a5:48:6f:
ee:48:84:c8:4d:52:3d:93:c6:90:6e:1b:b1:12:77:
22:6a:8d:05:16:8e:36:11:f5:b3:bc:b3:a6:14:a1:
55:7b:21:59:c9:3c:03:4c:00:74:c5:c0:a9:c4:fa:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6F:93:C6:5D:CC:04:9C:83:D7:6E:2E:4D:3C:BF:22:34:BA:6D:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B1CC5E6F47A11EFB4D4D95F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.39.0/24
Signature Algorithm: sha256WithRSAEncryption
67:79:2d:ec:b1:96:84:f2:aa:fb:7f:63:0b:a5:ee:56:85:88:
03:36:2e:a1:b7:4a:cd:35:2f:2e:6f:cc:af:08:15:95:c6:c6:
c9:cf:b3:a9:f9:0d:dd:51:82:8d:c2:68:ca:84:7e:29:2c:25:
01:7d:69:29:ce:e9:58:13:43:13:bc:7a:c1:de:b0:36:da:c9:
b0:4c:da:1e:39:1c:ea:64:ad:ec:98:f3:62:dc:36:21:c6:dd:
f5:df:79:75:5f:f5:4b:d9:7d:32:7c:f3:71:95:89:67:66:02:
3a:e6:5f:e8:4a:2f:1e:00:28:81:88:42:74:d3:34:a0:c6:d9:
3c:35:13:04:cd:90:2e:ac:e6:77:2e:f8:02:72:dc:94:4d:74:
1e:bd:18:ad:9a:64:1a:c5:2c:1e:69:73:3d:22:8f:32:c9:7e:
89:ff:9a:20:c2:e6:ce:34:e1:a4:df:1b:5e:30:af:d5:66:0c:
e9:65:8e:dc:9b:cf:cc:82:6b:7b:7d:8a:15:12:60:e4:c3:23:
14:1e:25:1f:fd:fa:26:12:99:ef:98:50:05:fe:5d:30:1e:e5:
83:b9:f4:3c:22:b6:5c:f4:17:ea:fc:78:b8:5c:b0:3a:4a:f3:
61:c6:17:e6:3e:6b:0a:e8:e9:67:12:57:c7:75:10:06:4a:3e:
3f:87:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:15 2025 by rpki-client