Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABE0E3ECF47B11EFA6866565762E951A.roa
File: ABE0E3ECF47B11EFA6866565762E951A.roa (raw, json)
Hash identifier: GYsg9GR7TFEApt59jZ/OTInuurzim9hnyM4sW3t/sww=
Subject key identifier: 94:AE:74:93:8A:20:6D:CA:D8:9B:8A:1C:86:CA:70:BC:3E:D6:D9:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013747
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABE0E3ECF47B11EFA6866565762E951A.roa
Signing time: Wed 26 Feb 2025 19:55:47 +0000
ROA not before: Wed 26 Feb 2025 19:55:44 +0000
ROA not after: Thu 19 Feb 2026 19:55:44 +0000
asID: 984
IP address blocks: 156.247.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79687 (0x13747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:55:44 2025 GMT
Not After : Feb 19 19:55:44 2026 GMT
Subject: CN=67bf71c3-fcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:a5:71:48:ba:14:b2:97:34:3f:35:ce:f8:
7c:d6:1b:e7:26:61:55:3f:3e:26:7f:08:2e:ea:1f:
fe:05:23:59:5e:ef:ff:71:0a:76:ab:13:04:ba:3b:
8f:1e:19:97:13:72:9b:26:02:45:78:08:61:27:29:
36:6e:be:e9:20:bd:7b:99:8f:08:39:20:9e:e9:a1:
de:68:cc:8c:c9:f4:ee:3f:78:c9:4f:ec:46:3c:21:
e5:a1:d2:86:ae:e2:b2:83:6c:bf:3c:7e:98:41:92:
2b:dc:fc:79:b6:cd:3b:1b:eb:60:02:a8:aa:c3:aa:
80:4a:e6:be:16:4f:9f:f9:28:9e:51:c5:67:c6:47:
a0:d4:11:2a:f7:4b:d6:28:7d:2d:ae:62:05:ac:9e:
7d:14:f5:e8:c3:8f:5a:1b:96:54:ef:27:2d:0d:8c:
b1:25:b3:a5:c9:8c:af:1f:e2:63:be:35:69:6e:6c:
e1:a0:06:9d:c8:2e:08:cc:58:3e:dd:85:df:92:01:
0f:63:e7:4f:3c:8d:46:bc:68:42:bd:30:4e:70:62:
c5:0c:6f:25:a9:06:1a:01:b3:8f:cb:b0:43:5a:52:
85:ab:d9:cc:70:c2:b8:d7:99:fc:7a:a4:0a:be:c2:
ea:8e:d1:d5:73:b5:af:e9:e8:56:07:49:69:01:d7:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:74:93:8A:20:6D:CA:D8:9B:8A:1C:86:CA:70:BC:3E:D6:D9:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABE0E3ECF47B11EFA6866565762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.42.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1e:11:6c:8a:3e:0d:6a:87:db:77:c1:53:b0:26:de:1d:ff:
17:e2:00:8d:10:a8:70:87:d4:e2:4d:47:81:cf:43:6d:66:c7:
eb:5a:06:95:b6:ed:65:4a:b2:82:1a:5d:9b:6d:f7:5a:34:1b:
2d:d1:76:b6:ec:42:e9:00:34:42:61:ae:0e:ca:a9:36:ca:e6:
c5:c3:8b:90:c0:65:08:65:06:06:1f:f4:8d:95:98:ef:8e:cc:
e9:8a:72:1a:7d:b8:8b:87:bd:20:53:72:71:51:2c:1c:b3:cf:
b2:0e:21:25:8f:6e:67:db:b9:6e:9f:3c:91:c8:66:1b:0d:ec:
bc:84:06:36:cf:90:0a:f8:9f:e1:de:28:f0:b3:e9:ed:fd:69:
93:7c:a6:e1:9c:b0:bf:79:67:01:5b:c7:25:23:02:1c:95:00:
5d:05:b1:15:54:4f:92:fe:48:52:48:42:a4:2e:8a:a1:71:41:
5d:3b:33:dc:db:bf:48:ec:7a:e1:01:ed:f0:37:4b:e1:bb:84:
d0:d9:da:97:dc:31:3b:0f:de:ea:35:36:c7:af:0d:40:c3:54:
fc:42:2b:33:64:f0:c4:7e:12:cf:67:f1:bb:aa:97:a1:ae:ca:
2b:d6:02:3d:04:5a:b4:0a:27:e3:4b:ed:c6:79:31:4b:63:8c:
d1:01:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:35 2025 by rpki-client