Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97039D80F48E11EF99FC2165762E951A.roa
File: 97039D80F48E11EF99FC2165762E951A.roa (raw, json)
Hash identifier: Vfr+8O0F0/VWi0VxdmfAhU0Vs73T91egpK4BuNVDeiM=
Subject key identifier: 81:B7:0F:5A:4A:C9:A4:6D:5C:34:15:07:7C:D8:DE:67:3F:06:28:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013815
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97039D80F48E11EF99FC2165762E951A.roa
Signing time: Wed 26 Feb 2025 22:11:13 +0000
ROA not before: Wed 26 Feb 2025 22:11:09 +0000
ROA not after: Thu 19 Feb 2026 22:11:09 +0000
asID: 984
IP address blocks: 156.232.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79893 (0x13815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 22:11:09 2025 GMT
Not After : Feb 19 22:11:09 2026 GMT
Subject: CN=67bf9181-d843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:8a:ca:6a:ae:42:f9:ad:18:d5:2e:6b:be:
2e:41:ed:41:81:ac:30:9f:ed:0d:5a:4a:1b:4c:59:
20:4c:a5:95:bb:67:1d:1d:b2:d4:f6:77:d7:b2:52:
7a:a2:28:39:1c:e4:7c:03:d0:76:f9:c3:9c:64:6a:
95:e3:d3:79:5c:4c:a9:ee:6a:96:dc:03:67:c9:ba:
ae:68:ec:0b:5f:9f:64:2c:4c:c2:31:93:ce:f7:2c:
c5:e4:49:43:02:1e:b8:1a:b0:08:b9:46:53:b0:1f:
66:c8:57:4d:f2:9e:07:16:95:9a:b4:f1:85:34:0c:
4d:73:d2:53:8d:66:8f:58:2a:af:1f:12:ad:cb:f8:
11:82:b7:b7:32:a2:a5:63:a5:28:db:1b:9a:94:99:
a6:2a:a9:cb:29:3f:30:45:55:bb:ec:c1:0a:bc:a6:
f7:4d:1a:38:3c:a1:86:99:ae:ba:5e:bd:d3:a0:d6:
1a:b6:87:0d:ff:0e:3a:b1:ac:c7:e2:3f:79:5f:6e:
ba:17:f6:8f:da:75:a1:e6:46:19:e1:90:c4:6f:be:
1e:25:79:cb:51:9b:b9:44:4e:b3:db:3f:10:a1:5a:
8e:46:4b:58:cb:db:32:af:36:9f:87:b9:2b:eb:cf:
2e:bb:e4:18:42:68:3d:6d:d3:b5:da:8d:9f:34:63:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B7:0F:5A:4A:C9:A4:6D:5C:34:15:07:7C:D8:DE:67:3F:06:28:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97039D80F48E11EF99FC2165762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.43.0/24
Signature Algorithm: sha256WithRSAEncryption
94:fd:0e:df:22:7f:71:fa:e2:be:6d:20:69:e5:8e:32:3c:6d:
8e:a9:82:b4:09:7f:0a:17:3c:24:be:14:a0:f7:b7:83:c9:7b:
f4:26:ce:28:34:7b:0f:b1:84:89:3b:e5:ef:a0:30:52:12:78:
2d:b1:fd:82:11:68:55:23:11:da:ea:88:2b:a4:33:d5:8c:31:
13:04:ca:ae:4d:16:9d:e6:04:fb:10:28:ab:d3:63:1d:8b:93:
82:e7:6f:46:4d:5a:bf:56:49:72:dd:bf:31:1e:85:db:4c:58:
07:21:6e:fb:95:90:1e:31:20:74:6c:f6:60:f8:9f:a8:a5:07:
8e:85:de:14:9d:94:09:f8:68:d2:8d:65:3c:cc:11:19:0b:06:
de:c7:c1:0f:87:e5:d7:b7:8d:f2:51:aa:de:36:6b:63:35:8b:
ee:79:03:78:df:02:fa:87:ea:7b:9c:a9:ba:11:3f:10:7a:e7:
1a:a7:40:04:ec:2b:60:48:3d:e7:26:25:7f:36:a5:4d:a9:c5:
bc:a7:47:66:49:b9:13:6f:14:2d:f8:39:f3:15:2f:33:c5:cb:
5c:e7:45:13:30:b1:55:f2:e2:fc:e6:78:36:7e:4c:09:1e:86:
05:d5:7c:ae:29:2e:9d:21:5f:91:44:e7:28:af:c1:ff:e4:00:
aa:dc:ad:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:01 2025 by rpki-client