Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94D29EB6F42111EF959C556E762E951A.roa
File: 94D29EB6F42111EF959C556E762E951A.roa (raw, json)
Hash identifier: lsZLY8BIra5pe6QjdlUuQnVHyTqlv1IjsIOWNERUH4s=
Subject key identifier: 06:8A:35:D0:74:E4:E8:5D:26:82:A2:80:22:9E:74:8E:A5:C0:3D:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01304F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94D29EB6F42111EF959C556E762E951A.roa
Signing time: Wed 26 Feb 2025 09:10:54 +0000
ROA not before: Wed 26 Feb 2025 09:10:50 +0000
ROA not after: Thu 19 Feb 2026 09:10:50 +0000
asID: 984
IP address blocks: 156.230.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77903 (0x1304f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:10:50 2025 GMT
Not After : Feb 19 09:10:50 2026 GMT
Subject: CN=67beda9e-379e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:61:68:c7:2f:4d:0a:bf:c8:72:3a:ee:fe:
79:5e:97:e2:81:36:f6:5c:1d:51:13:81:9a:d0:61:
c8:6d:6d:e3:b7:2c:1d:71:50:eb:5c:c4:0f:52:6e:
42:58:56:32:96:f5:b0:95:91:f5:04:d4:8f:4f:76:
54:97:76:9d:95:9c:31:61:ac:4e:05:bf:e1:d1:e9:
68:07:2a:f4:18:d4:9e:fc:c0:7d:78:36:39:60:46:
62:66:29:4e:4d:6f:50:12:5e:ee:6a:10:8d:11:95:
02:1f:3d:ad:f9:93:9d:d5:ce:1b:da:48:7a:ab:ec:
dd:07:22:33:30:1d:82:f6:42:c1:66:82:8c:00:d5:
b9:76:29:b3:9d:41:39:99:e8:0d:1f:e1:55:35:8d:
40:e8:c0:1d:a0:44:23:21:bf:d6:ad:85:a0:e7:1b:
f5:e5:59:57:73:a6:f3:77:4a:56:ee:c9:3c:6a:4a:
55:98:d8:87:be:91:d2:57:fb:44:8d:22:b0:76:18:
67:84:ae:46:f9:e3:11:3e:5a:b1:79:e8:59:22:48:
41:e4:c5:f7:b6:73:5d:f5:6d:cd:25:35:32:25:8f:
5e:77:41:80:8b:e8:a3:ff:41:61:f4:19:d4:0e:b7:
5e:22:3d:72:c2:a0:6e:e5:9f:d3:dc:67:28:c8:ee:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:35:D0:74:E4:E8:5D:26:82:A2:80:22:9E:74:8E:A5:C0:3D:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94D29EB6F42111EF959C556E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.18.0/24
Signature Algorithm: sha256WithRSAEncryption
25:87:5f:53:d4:f5:6c:9a:3f:fa:ec:a3:62:e5:76:de:33:49:
43:95:cc:b8:54:e3:7b:99:00:5f:43:2c:34:f1:f5:61:d5:a6:
ab:43:92:e2:c0:68:48:4d:6c:a8:44:e7:79:d0:42:83:3c:0a:
4e:50:1f:77:e9:2e:e5:43:18:06:18:4f:13:32:3b:a2:48:cf:
c2:56:f0:1f:15:7b:ec:be:0d:5e:d9:ed:0c:81:74:cd:d5:c0:
ab:92:f5:1d:e6:f9:d6:98:2e:45:fe:14:f0:d7:59:ac:f6:85:
92:f4:e7:e4:b9:b3:a0:c7:71:aa:48:00:9b:68:b5:46:de:e6:
97:68:7a:04:91:5b:b6:74:1e:d8:32:14:65:85:ac:c2:ab:9c:
cd:4c:02:b2:7b:d6:79:b9:c1:b6:dd:39:2e:be:e5:39:e9:06:
a8:d2:b0:4c:35:ff:e4:e6:cc:db:a3:1b:86:41:f7:82:ba:04:
7b:9d:3d:48:ce:fa:e0:be:39:ff:b7:7b:24:75:50:87:84:f2:
7c:79:eb:8d:a7:08:9b:1d:f3:a1:97:3c:cd:b7:6c:97:20:9c:
e8:62:bf:c3:b2:dd:62:4d:7f:0c:5d:1c:16:4c:7e:2c:24:6b:
9a:05:ae:d4:34:7d:d8:58:6f:e0:62:34:71:38:a0:da:07:73:
28:75:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:14 2025 by rpki-client