Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918BE518F45411EF8A2F0B56762E951A.roa
File: 918BE518F45411EF8A2F0B56762E951A.roa (raw, json)
Hash identifier: 32t1i2319hGucexaF1GcPOTyX155cDh6FeZzlhcEFvw=
Subject key identifier: DE:CF:69:59:37:D0:D5:50:79:6B:D3:7F:2D:F5:5D:8C:4B:91:CE:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01342B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918BE518F45411EF8A2F0B56762E951A.roa
Signing time: Wed 26 Feb 2025 15:15:53 +0000
ROA not before: Wed 26 Feb 2025 15:15:49 +0000
ROA not after: Thu 19 Feb 2026 15:15:49 +0000
asID: 984
IP address blocks: 156.231.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78891 (0x1342b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:15:49 2025 GMT
Not After : Feb 19 15:15:49 2026 GMT
Subject: CN=67bf3029-b098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:f5:18:ec:17:d7:01:03:8d:0b:6c:2d:03:
70:ce:9f:b1:8a:ef:d9:a3:5d:26:bb:ba:4c:38:3e:
c5:6b:aa:d8:5e:4d:49:24:7b:53:6c:b7:49:bf:bc:
3a:ce:88:f4:43:1c:75:d0:e9:8e:8e:19:b3:7e:c4:
ab:c2:12:38:89:0f:dd:ff:9d:46:c4:42:d2:74:ef:
86:19:59:b0:28:53:37:4a:6c:bb:9b:34:a6:95:f0:
74:c3:fc:6f:97:ad:ea:55:77:1e:99:63:30:e6:7d:
80:53:f4:e1:12:c4:09:5f:2c:ee:99:d0:a6:b5:56:
77:98:dc:0b:6a:5b:ff:42:c7:c6:4f:a8:9b:ea:21:
24:fb:de:47:81:24:41:6d:77:b8:c5:52:07:b0:70:
f0:ee:1c:6f:25:32:a2:e6:3a:73:c2:5f:f0:99:22:
da:f5:31:db:c9:0f:65:76:ee:33:08:26:85:74:94:
e5:b2:16:ff:df:cd:77:b0:01:c6:46:39:65:02:65:
1a:8e:fa:9c:96:58:04:5d:b6:cd:db:21:b5:b2:f5:
f9:6c:b6:14:19:64:d3:e3:79:ab:71:5b:60:1b:23:
01:e6:94:18:b9:8a:ad:a6:03:9f:90:fd:51:ba:2c:
6c:4d:92:5b:1c:2e:d4:8b:a4:d9:c7:4d:5c:3e:40:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CF:69:59:37:D0:D5:50:79:6B:D3:7F:2D:F5:5D:8C:4B:91:CE:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918BE518F45411EF8A2F0B56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.206.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e5:69:c7:5c:0e:b3:19:3f:91:0d:c2:ce:d0:57:a2:0b:79:
8b:10:1d:86:5d:6f:83:96:a3:a5:c1:ed:fb:1f:8d:01:74:66:
f5:e4:9d:cd:84:7f:79:66:21:61:ac:43:41:77:46:eb:0f:9a:
58:7d:12:11:0f:17:38:38:92:67:c4:96:44:95:57:b8:c3:d2:
dc:c1:ad:8b:da:91:86:a5:98:58:37:b3:94:09:5f:c9:4e:7b:
09:46:f1:e8:29:66:64:28:d7:f5:91:b9:81:08:0e:4d:a6:12:
74:ba:c8:e3:6c:21:e8:76:85:fc:6d:03:5a:ac:c7:03:7b:f3:
48:bb:ca:5d:c0:99:c2:2c:89:66:c8:3f:75:bc:5a:75:c0:ec:
f4:6f:61:1b:a5:21:ee:a8:ab:1e:98:76:fb:e4:41:99:f8:3e:
ad:f2:58:5f:d2:99:ba:26:a9:e3:c7:6f:65:a7:0e:cc:dd:54:
5f:cc:20:84:3c:e1:a3:45:db:eb:0b:0f:69:3c:fa:ba:d5:53:
3b:53:d6:5d:1c:36:bc:70:57:6f:e1:95:7c:e3:2f:62:46:71:
5d:1c:13:b9:42:43:69:b5:af:6b:4a:0c:e1:81:f8:08:0b:ea:
dc:f7:f8:21:03:61:a2:33:7e:27:b1:21:7e:b0:28:72:d2:b1:
51:01:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:10:55 2025 by rpki-client