Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98F41304F45211EF83C69749762E951A.roa
File: 98F41304F45211EF83C69749762E951A.roa (raw, json)
Hash identifier: 1RRfIK8bP7sJwGJZsGkmQMHP73uDGrtrJtAGMyVD3XM=
Subject key identifier: 80:FA:43:5C:94:36:2E:C2:86:F6:3E:DF:AF:DA:12:67:1F:C2:E0:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01340C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98F41304F45211EF83C69749762E951A.roa
Signing time: Wed 26 Feb 2025 15:01:46 +0000
ROA not before: Wed 26 Feb 2025 15:01:43 +0000
ROA not after: Thu 19 Feb 2026 15:01:43 +0000
asID: 984
IP address blocks: 156.231.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78860 (0x1340c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:01:43 2025 GMT
Not After : Feb 19 15:01:43 2026 GMT
Subject: CN=67bf2cda-0fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:bc:66:be:5d:be:d3:c5:76:0e:07:d1:33:
85:ed:65:62:2d:a4:7b:d7:ef:5e:23:fd:9a:f6:9b:
ba:c8:1a:36:71:13:e4:6f:39:09:b2:56:c7:15:29:
bd:4c:a7:87:1c:56:b0:e3:75:b5:a6:96:bc:02:a5:
e4:f6:33:f6:cb:d0:12:71:d2:d1:b7:6a:b4:c1:f4:
3e:8d:31:91:50:3e:9a:8a:fb:19:b1:29:03:d5:ca:
1c:a6:cd:fc:68:37:43:66:72:06:6e:34:7e:8e:7b:
50:7c:d6:77:6a:a4:23:dd:a7:57:92:79:54:65:31:
fb:82:4f:47:ad:1b:de:52:b1:e2:9b:cd:ea:bc:9a:
8c:4d:7e:86:e2:10:9a:62:6e:76:6c:1b:ec:9b:ec:
e4:73:62:d5:46:df:82:77:44:d4:24:5c:9e:41:b4:
8e:ed:07:c8:73:c0:7e:2d:fe:ae:f0:35:e5:74:3a:
3d:37:43:33:b7:b6:84:6f:a8:ce:56:10:8a:a8:ed:
4b:87:6c:2e:dc:29:4d:7d:6a:d1:0f:96:7e:48:91:
d3:41:a8:0f:1d:45:d0:ce:84:13:ea:b9:c5:31:42:
54:41:7e:d7:12:37:7d:12:d9:3e:96:86:c3:ee:71:
59:9a:fe:db:91:0b:bd:ca:f8:46:86:6a:30:bd:c6:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FA:43:5C:94:36:2E:C2:86:F6:3E:DF:AF:DA:12:67:1F:C2:E0:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98F41304F45211EF83C69749762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.200.0/24
Signature Algorithm: sha256WithRSAEncryption
34:28:9e:e5:79:de:bd:16:35:68:05:cb:d2:52:ac:46:da:da:
88:02:99:d8:32:ab:aa:28:b1:2c:d5:5e:5d:45:65:65:ed:4d:
45:aa:96:0b:91:f5:ef:73:63:90:e7:f0:7c:38:93:d5:55:ad:
ca:eb:8a:ff:e2:b4:4b:e4:06:c8:4d:b5:41:48:e6:fb:45:13:
c1:d1:d9:0e:89:0b:90:73:fc:ea:c3:76:fa:24:e7:10:70:83:
74:96:75:74:a7:a9:9f:05:17:e7:9d:c2:1d:fa:3d:2a:b1:1a:
aa:f5:f9:33:de:63:95:2d:ea:3a:60:c6:d5:07:27:a7:48:fa:
fb:d4:6b:ea:a6:1a:36:e4:7e:9e:82:66:d3:03:64:22:fa:18:
4a:b1:4b:10:aa:3f:8b:0b:61:ad:b3:0f:2b:1b:8f:26:70:c7:
87:32:2b:95:84:ef:9b:2c:01:d3:0e:ca:a3:3a:2f:bb:61:55:
77:ea:16:fa:c5:32:a7:d2:7e:1b:ac:93:c4:1c:c8:4e:7f:50:
53:09:fc:8e:4a:36:89:aa:ce:a5:ac:e3:93:b2:a2:21:37:39:
77:91:4c:1e:b1:1c:9a:bc:d6:ce:e9:8e:04:2b:41:57:eb:d7:
7b:d2:38:4c:aa:f4:58:2f:43:3c:39:56:37:72:dd:dd:86:06:
2e:42:f5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:45 2025 by rpki-client