Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95B4A8E0F42811EF9817309F762E951A.roa
File: 95B4A8E0F42811EF9817309F762E951A.roa (raw, json)
Hash identifier: 0WUVouF4ITXS8f7JnyLg4UWqqFQE3L6rPIH5J3hMLBM=
Subject key identifier: B4:39:AB:24:EA:6E:A8:55:A6:4D:C2:19:1F:B5:93:C8:28:B2:0A:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95B4A8E0F42811EF9817309F762E951A.roa
Signing time: Wed 26 Feb 2025 10:01:02 +0000
ROA not before: Wed 26 Feb 2025 10:00:58 +0000
ROA not after: Thu 19 Feb 2026 10:00:58 +0000
asID: 984
IP address blocks: 156.252.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78016 (0x130c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:00:58 2025 GMT
Not After : Feb 19 10:00:58 2026 GMT
Subject: CN=67bee65e-2b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:ce:cd:e7:60:02:a5:95:98:16:97:f4:b4:
54:85:24:4c:4d:d8:37:65:d1:5e:4d:81:e3:db:7a:
8a:19:49:3f:56:e1:a5:9b:11:c2:c0:54:9b:35:06:
b9:d1:fd:bd:8e:cd:11:a6:d8:1f:ec:59:4e:1e:17:
3a:19:b6:77:0e:82:ac:a4:27:34:34:17:bf:95:74:
76:9a:d6:b3:35:cd:31:30:aa:d1:27:97:e7:c5:f3:
37:6b:42:aa:67:59:6b:24:f8:03:4b:1f:ec:79:a0:
ea:c7:d1:1a:2e:ee:05:88:ce:5f:cc:04:7c:f9:b1:
c8:e2:a6:dc:aa:26:4f:91:46:f5:2d:01:dd:7b:0b:
17:41:51:3a:5e:85:56:11:52:3b:b1:f7:7f:0b:d0:
3e:db:dd:98:07:08:f5:3f:4d:e7:18:c0:8d:38:bd:
8a:6c:2b:67:b2:eb:12:ef:c1:27:3a:6b:cd:94:f6:
22:15:19:5d:4b:90:6b:76:2b:cb:86:a0:18:4b:2b:
a2:ae:9a:40:94:02:de:73:e4:c9:89:a1:da:77:e9:
2a:f5:59:c0:8e:83:4b:20:65:bd:f1:01:3f:b9:de:
ba:86:69:ea:3d:4a:ee:2c:02:fc:62:0b:db:01:1c:
56:9e:b8:5e:57:b2:ef:0b:91:30:30:ee:bd:39:bf:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:39:AB:24:EA:6E:A8:55:A6:4D:C2:19:1F:B5:93:C8:28:B2:0A:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95B4A8E0F42811EF9817309F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b7:dc:82:70:b1:10:09:44:37:28:fc:f4:da:c8:4a:db:f7:
24:f7:ea:19:8f:39:ce:0c:a7:64:3f:b8:50:90:e7:62:cb:1b:
28:82:d5:96:bc:76:5f:cd:ab:fd:ba:fa:b5:23:60:1c:b9:73:
9a:0a:18:1c:d0:ec:fb:bd:16:73:48:21:63:d9:61:29:56:ba:
d2:56:51:47:fc:2b:d5:96:cb:65:94:84:d6:7a:fa:5b:41:6e:
a1:cc:85:2d:a2:4d:e1:a7:39:0d:84:d7:98:96:1e:5c:b2:94:
98:b6:03:ad:b3:b6:ce:23:d0:92:e4:e6:3c:88:ef:36:9f:21:
e3:ce:8e:09:af:e6:85:0b:ea:83:80:3c:28:5f:64:a4:f4:6e:
9f:23:c5:2d:27:4c:4b:be:14:5e:9d:01:b9:ca:74:6b:91:cc:
c6:91:70:0e:29:60:92:ed:e3:c2:b2:63:9a:4c:10:4e:d2:3e:
f3:7e:6d:17:ee:94:81:6a:2a:01:8d:ac:77:0a:55:7e:f7:a7:
b3:95:aa:5b:ba:a4:b6:df:52:4a:bf:b4:ff:f1:ad:f8:42:d1:
54:24:78:5a:e3:9f:bd:3f:0d:74:e6:e0:b1:ec:29:4c:42:2b:
db:bb:33:a1:de:5e:4a:e0:50:fd:00:56:02:28:46:09:da:ef:
b7:f0:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:36 2025 by rpki-client