Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9C2D042E53611EF8F003C66762E951A.roa
File: A9C2D042E53611EF8F003C66762E951A.roa (raw, json)
Hash identifier: XEnxPrr/Y3DFwSRqyXQrGVKKogIempfF6q6d3nLG24Q=
Subject key identifier: 42:2A:3E:A3:0A:66:60:D0:B0:A6:E9:07:8B:4A:65:0A:55:97:4A:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9C2D042E53611EF8F003C66762E951A.roa
Signing time: Fri 07 Feb 2025 09:34:01 +0000
ROA not before: Fri 07 Feb 2025 09:33:57 +0000
ROA not after: Sat 13 Dec 2025 09:33:57 +0000
asID: 984
IP address blocks: 156.230.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72887 (0x11cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 09:33:57 2025 GMT
Not After : Dec 13 09:33:57 2025 GMT
Subject: CN=67a5d389-8821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:96:3a:c3:f6:b4:e5:3c:d9:2d:95:ab:a4:
4a:d3:66:c7:4b:88:b5:7c:40:80:0f:dc:c2:4c:57:
0b:4a:4a:70:8f:8c:12:14:44:7b:29:2b:ce:5d:06:
62:06:30:38:7a:ea:cb:fc:79:3b:e1:8b:af:30:d0:
5f:47:db:a4:1f:dc:b8:74:94:d7:77:6b:60:e0:67:
03:4f:c1:f9:a3:c1:12:1f:28:54:14:d1:02:fb:5a:
ef:5d:bf:c9:87:3d:3c:e4:67:4b:c8:34:e3:00:31:
ee:c4:ee:5e:ea:1b:1e:19:40:b0:06:80:ac:fe:3d:
41:d3:4a:8d:0c:21:18:f8:5a:70:f6:a4:24:93:90:
61:72:37:c8:77:c8:bf:a0:52:6d:47:cd:f6:aa:ad:
bc:0b:22:1a:9f:46:84:ca:f0:fd:e5:29:49:5c:5c:
24:db:d8:0b:ee:c1:c0:75:f0:42:63:1b:db:33:f3:
15:6b:9d:08:14:e5:e4:ec:83:d4:48:43:64:44:1b:
9e:24:05:f9:70:0b:05:8a:ad:bd:c8:f5:d2:d5:55:
08:9a:77:26:09:f6:56:0a:f4:9d:0f:56:3f:18:eb:
29:f0:de:66:aa:f3:ec:11:6a:8a:eb:d4:7e:91:0b:
7b:84:2d:37:64:38:89:ae:93:70:72:53:81:d2:88:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2A:3E:A3:0A:66:60:D0:B0:A6:E9:07:8B:4A:65:0A:55:97:4A:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9C2D042E53611EF8F003C66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.132.0/24
Signature Algorithm: sha256WithRSAEncryption
26:0b:4d:89:14:d5:a3:17:96:ec:48:4e:77:97:f2:7b:40:1d:
01:ce:37:4f:f8:20:4c:d3:b0:0e:da:f3:c2:3e:06:dd:55:d8:
b9:04:bc:b8:12:42:a7:b6:30:a2:75:c8:54:a5:68:81:53:fd:
77:e1:e2:02:b6:19:19:49:92:04:6a:ab:40:a1:92:66:a1:64:
7d:f0:49:e2:58:6e:e9:40:97:06:7f:57:50:30:55:1a:8f:03:
59:18:cd:a3:1c:80:00:74:16:6f:84:aa:36:19:2d:a7:50:d7:
62:8b:96:13:5d:a7:8f:70:42:a3:25:61:f7:a4:78:99:97:de:
b0:d0:6f:47:81:0d:e4:61:fc:2f:ac:08:d4:b3:b0:2d:29:b9:
61:87:a7:07:66:1b:cc:41:ba:b1:a3:ad:bb:8c:43:65:b3:42:
9b:19:21:58:90:b7:20:a7:a8:a1:61:29:cd:71:9e:9f:c5:b0:
3a:ab:4a:5b:af:23:4c:e0:af:25:df:ea:dc:0e:b1:44:c1:82:
31:cc:cb:35:75:67:8f:5e:d5:12:bf:18:2d:f9:2e:a1:44:cd:
25:2a:e0:55:a7:64:02:11:15:84:24:cd:05:de:6f:7c:b0:1d:
e3:7e:27:9c:95:8f:ca:61:cc:1e:66:d1:c6:cf:bd:83:87:87:
de:57:57:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:04 2025 by rpki-client