Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C4F1504F42511EFA7A06F8B762E951A.roa
File: 8C4F1504F42511EFA7A06F8B762E951A.roa (raw, json)
Hash identifier: IfG+Ib31BETwH5B7Kd/roaBdqSTyYlZMAliRNSgHapo=
Subject key identifier: B9:72:4A:D6:B1:77:A3:CD:29:8E:A3:48:22:58:EF:76:40:11:D4:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01308C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C4F1504F42511EFA7A06F8B762E951A.roa
Signing time: Wed 26 Feb 2025 09:39:18 +0000
ROA not before: Wed 26 Feb 2025 09:39:14 +0000
ROA not after: Thu 19 Feb 2026 09:39:14 +0000
asID: 984
IP address blocks: 156.230.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77964 (0x1308c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:39:14 2025 GMT
Not After : Feb 19 09:39:14 2026 GMT
Subject: CN=67bee146-85c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:71:00:c6:d2:f5:6f:3c:da:09:eb:39:80:
ce:61:a8:1c:fb:eb:fc:cc:d2:4e:29:01:0f:e4:bc:
4c:67:8f:29:77:10:57:1c:11:84:49:d8:8e:bc:83:
01:b2:61:2f:c3:be:d7:9e:74:2d:3b:52:11:e0:ba:
62:1b:8c:20:53:cc:39:23:ad:f1:b8:10:7f:91:40:
94:54:49:2a:0e:c4:b4:56:71:7c:b4:57:da:31:c8:
22:af:fe:a6:b5:58:9b:bf:aa:3a:2b:07:41:a9:66:
3b:29:3e:6d:07:69:77:65:b8:ff:27:c3:f1:c7:50:
30:f6:35:3b:6e:41:ac:5d:69:07:97:35:0b:ab:22:
8c:01:74:73:b0:91:30:98:ae:75:5f:84:9b:a1:ea:
ce:f7:7e:65:c8:af:50:9c:ec:4f:fa:2a:0a:cc:e4:
e7:f6:90:8a:ab:a3:3a:d3:66:b3:c9:66:1c:a3:2b:
c4:26:c0:3b:26:66:19:48:eb:24:5f:07:a6:16:c3:
a5:64:af:74:f7:bc:28:b7:a9:aa:51:e0:85:3b:cc:
7b:eb:93:2e:21:8b:a6:03:ce:42:93:cf:a7:a1:88:
91:c3:67:ae:4d:87:40:b7:75:11:65:5c:ea:36:7e:
29:b7:0c:bf:96:9e:a6:80:27:c8:bb:b8:10:78:ef:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:72:4A:D6:B1:77:A3:CD:29:8E:A3:48:22:58:EF:76:40:11:D4:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C4F1504F42511EFA7A06F8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.51.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:cb:a3:5e:f0:dd:3a:39:15:bb:6a:53:c0:25:3f:ed:55:6b:
d8:0e:62:1a:0b:45:ab:26:c7:7e:21:da:e9:39:28:ac:f2:3e:
a4:6e:b6:15:c1:63:73:99:00:56:1f:74:d4:66:a4:a5:e7:8e:
f8:f7:58:21:4f:e9:4f:16:c3:8e:16:62:3e:22:b7:99:89:36:
f0:04:4d:e8:46:10:61:20:e8:22:fe:9f:99:2b:2e:d3:73:8d:
c6:08:0c:44:c6:aa:15:1f:a4:47:60:45:30:27:e3:52:6d:78:
d4:2b:c3:1c:13:63:6b:ad:59:7d:9e:f1:32:95:9c:8a:1b:23:
d4:ce:ec:44:45:f3:9f:f8:c0:2c:22:eb:bc:b6:3d:a9:b4:25:
7a:80:b0:2f:dc:66:78:01:e3:e1:4d:5f:84:26:58:3b:4c:6f:
f0:12:ac:a0:27:3c:6b:a6:8f:5f:42:15:18:ce:f4:d4:2a:eb:
e4:d5:76:3e:f0:dc:00:42:56:9e:57:4a:3b:ac:77:75:61:2a:
fd:95:e5:d8:92:30:77:14:c9:b0:59:25:e5:77:9d:22:b2:9f:
f8:bd:85:82:bc:7b:7a:0f:cd:6a:d3:13:05:69:e1:8b:54:f1:
c1:6b:b6:a8:23:18:a1:51:7d:43:5d:5e:05:c2:55:1e:79:c8:
38:29:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:38 2025 by rpki-client