Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/935A9FAEF42E11EFBC9B714B762E951A.roa
File: 935A9FAEF42E11EFBC9B714B762E951A.roa (raw, json)
Hash identifier: VwNZ0KQ7wCKAu9xk74u1SIOQOCWqzMkKbDw0FkdT4d0=
Subject key identifier: CB:08:FA:70:4A:D1:1F:24:5F:D2:41:98:BA:52:46:B0:BF:F9:4C:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013154
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/935A9FAEF42E11EFBC9B714B762E951A.roa
Signing time: Wed 26 Feb 2025 10:43:55 +0000
ROA not before: Wed 26 Feb 2025 10:43:51 +0000
ROA not after: Thu 19 Feb 2026 10:43:51 +0000
asID: 984
IP address blocks: 156.252.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78164 (0x13154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:43:51 2025 GMT
Not After : Feb 19 10:43:51 2026 GMT
Subject: CN=67bef06b-85e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:bb:85:e8:e2:9c:e9:38:6e:0b:34:9f:e8:
df:ad:8e:99:f8:f7:52:0d:89:54:73:9a:8a:91:6d:
ab:ba:de:0b:2a:d0:e3:13:f7:6b:dd:ba:ab:1f:d3:
2d:76:5f:69:8c:12:29:03:08:60:d6:96:1c:09:d4:
45:20:ed:e5:58:03:b7:04:5b:8f:f1:99:cc:46:6e:
56:79:63:78:14:b8:62:3c:10:57:19:4a:65:29:05:
fb:67:04:4b:db:1d:86:13:3c:9b:0c:b7:db:07:89:
3e:f2:4f:f4:a1:d2:ca:df:18:5b:51:5d:69:32:51:
2e:1b:8f:8f:96:f0:ff:c7:5a:56:67:be:90:43:fd:
a6:30:7d:3f:35:49:4a:40:ec:cd:4a:bd:a8:18:ba:
ed:68:e3:01:a6:1a:93:f6:84:9f:8e:e7:28:8e:02:
52:fe:7e:d6:70:c9:08:6e:ce:91:50:17:2f:74:38:
69:07:de:0c:cd:79:16:77:39:57:e9:55:49:ca:57:
82:56:5f:21:fd:8e:3f:b9:f2:cf:ec:10:5b:9c:1d:
c8:9c:eb:2a:e8:60:71:31:f7:36:d5:1f:10:81:f9:
e7:d6:b7:d8:43:bc:13:d1:80:58:65:18:2d:80:02:
f3:11:d1:23:54:13:9d:c6:c2:44:f8:f5:8d:e2:7c:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:FA:70:4A:D1:1F:24:5F:D2:41:98:BA:52:46:B0:BF:F9:4C:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/935A9FAEF42E11EFBC9B714B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.97.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5e:7f:8d:2b:f5:44:43:27:1c:0c:3e:d7:c2:3d:57:ff:cf:
50:95:9d:df:8f:bc:7b:08:6e:79:09:13:f1:b1:a5:06:e5:06:
4d:26:10:8d:0d:74:fd:5a:42:55:2f:c5:b0:c0:c8:17:fd:3e:
ac:66:4a:38:f8:f9:d5:92:57:7e:a1:e8:50:42:c0:8d:b9:10:
23:d9:34:ab:42:7f:c4:b4:64:83:89:95:03:39:3a:6b:e0:f8:
88:ad:48:57:aa:f0:6e:10:36:f9:29:40:c0:44:87:8e:33:66:
7a:a8:2f:3b:50:f9:85:35:3c:e2:f9:6f:40:1c:f4:cc:05:8c:
47:6d:45:dd:72:61:d9:60:ee:d1:15:9f:1a:5b:2d:21:05:41:
36:b4:da:ba:9e:c4:fd:08:5e:72:11:8c:1c:e4:36:47:ad:0f:
e3:c7:12:87:d8:96:08:82:e9:a1:64:62:6d:e5:27:92:80:07:
e6:20:e0:fa:c5:cc:46:fd:db:12:3d:bf:b9:6e:e4:28:8f:2d:
0b:39:52:79:99:28:c8:f8:e5:2d:6c:f7:ec:02:71:ed:bd:3a:
64:f3:53:dd:e5:97:55:ea:18:79:25:1c:c7:97:61:07:1b:a5:
4e:6d:87:8b:26:e5:c6:d4:03:67:de:d8:a7:3d:4b:e7:da:56:
10:3e:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:35 2025 by rpki-client