Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/993C2BD4F45D11EFA9067994762E951A.roa
File: 993C2BD4F45D11EFA9067994762E951A.roa (raw, json)
Hash identifier: 3U3Li5olfsfFAWmCEPv+3qf3Br6V8dRa+HP2CpM1KcY=
Subject key identifier: 69:55:53:10:59:18:D4:0B:9B:C3:30:7C:B1:AC:0D:39:9F:11:9C:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/993C2BD4F45D11EFA9067994762E951A.roa
Signing time: Wed 26 Feb 2025 16:20:31 +0000
ROA not before: Wed 26 Feb 2025 16:20:27 +0000
ROA not after: Thu 19 Feb 2026 16:20:27 +0000
asID: 984
IP address blocks: 156.252.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79024 (0x134b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:20:27 2025 GMT
Not After : Feb 19 16:20:27 2026 GMT
Subject: CN=67bf3f4f-0429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:09:e6:08:1d:54:f1:95:6d:18:06:33:c2:
85:d5:9b:bb:6e:7f:e2:57:61:87:02:06:50:26:70:
28:70:1a:0f:2a:ca:b0:81:28:9d:eb:b4:a9:51:1a:
2c:d5:cc:d8:01:0d:80:8e:4b:49:5f:34:51:62:43:
58:23:95:d6:7d:ae:2c:5b:8d:5a:df:69:d7:77:08:
82:83:73:25:c6:1d:a2:17:28:d8:68:e6:99:60:41:
b0:a0:ed:99:4a:26:77:4f:10:79:05:0e:f5:8b:57:
2d:a2:7c:03:36:f9:b6:33:d5:76:e1:0c:63:8e:2a:
a5:11:ee:2b:5b:eb:8b:23:a8:73:94:1a:25:10:73:
dd:39:0e:af:51:4e:7c:f1:ec:1d:7c:cf:8d:d9:03:
8f:59:8c:28:04:f1:bd:82:4b:dd:cc:7a:47:65:3a:
0a:2f:57:12:9b:57:96:d5:72:f6:64:8f:fb:63:84:
28:df:85:ee:f6:45:bc:d4:a4:dc:c7:0e:93:c9:8d:
4f:6a:28:c7:39:9e:e9:f1:8d:c7:cc:5b:41:eb:22:
af:ca:d3:01:91:3b:3a:ac:cd:5b:9d:d0:b6:3b:bf:
3b:4b:d0:72:34:ee:5b:64:0e:61:52:07:3b:36:ed:
56:be:ab:7c:f6:ac:4d:fe:dc:a6:be:f7:65:57:d4:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:55:53:10:59:18:D4:0B:9B:C3:30:7C:B1:AC:0D:39:9F:11:9C:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/993C2BD4F45D11EFA9067994762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.235.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8c:3f:ef:59:8f:f3:20:f0:9d:17:d5:89:a2:33:3c:a2:0d:
e0:d2:cb:9e:6a:88:5f:99:28:5a:ce:26:b3:d4:ad:48:48:d4:
46:e2:24:26:4d:ba:c1:c6:6c:b2:f5:65:13:52:99:c7:c1:05:
6d:67:25:ae:b7:7d:6d:48:a6:af:25:f2:2e:1f:e3:43:0e:a9:
47:21:e6:53:c0:0c:18:99:60:a3:a2:de:94:66:d1:79:75:89:
02:2a:08:1f:da:a2:51:f4:55:1b:7c:d4:bd:f3:29:b3:f8:88:
b5:48:12:3a:e4:2a:79:b2:8a:79:17:94:83:7e:ff:f0:12:79:
6d:3e:fe:30:1d:1e:dd:f3:f2:d3:65:7a:cf:4a:65:16:06:c4:
af:65:48:4e:e8:bf:da:86:7b:10:8e:f0:8c:38:c4:8f:2d:84:
87:c6:14:c7:41:3a:b9:77:01:4b:e6:13:9e:8c:0e:07:6a:76:
dd:4f:e5:a2:76:35:75:44:7a:72:10:9b:3f:8f:23:b0:5f:db:
39:b2:f0:1a:fe:46:0f:59:91:d4:a4:19:bd:19:99:c6:9e:2d:
2b:72:d1:16:0e:e6:40:de:22:31:da:c7:25:83:62:cd:1e:cd:
99:5c:72:d3:86:bc:b1:9a:48:07:87:aa:70:20:09:88:ed:7b:
91:ff:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:52 2025 by rpki-client