Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2BE4D06F45F11EFBDCD98A2762E951A.roa
File: B2BE4D06F45F11EFBDCD98A2762E951A.roa (raw, json)
Hash identifier: WY1EAo8oSNfDSCqUS/D1x08KQjwGxnTskmimS5jnHoo=
Subject key identifier: C8:1A:54:90:1E:B9:9B:ED:3C:8A:85:1B:3F:EA:69:EE:4C:8A:EF:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2BE4D06F45F11EFBDCD98A2762E951A.roa
Signing time: Wed 26 Feb 2025 16:35:33 +0000
ROA not before: Wed 26 Feb 2025 16:35:29 +0000
ROA not after: Thu 19 Feb 2026 16:35:29 +0000
asID: 984
IP address blocks: 156.245.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79064 (0x134d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:35:29 2025 GMT
Not After : Feb 19 16:35:29 2026 GMT
Subject: CN=67bf42d5-19eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d8:e4:fd:cb:cf:dc:ee:dd:0d:ca:b7:80:19:
47:39:3c:54:21:75:20:e1:4b:d1:12:c8:64:06:9c:
86:2c:f1:be:28:bf:5e:5b:c1:8c:67:4f:a9:62:5b:
86:df:cd:e9:b3:62:e2:d2:22:bf:95:a6:fb:fe:36:
45:ae:b1:0e:08:b3:7c:a4:a7:f8:b8:8d:11:04:14:
61:4b:35:03:d7:1b:b9:df:84:b0:c8:e5:0f:8c:89:
a4:06:3e:8a:66:5b:cf:4a:22:ea:e0:09:14:64:2d:
22:82:fa:7c:32:e1:8f:80:80:6a:60:1b:7d:aa:e3:
85:31:d2:29:bf:40:63:60:35:5b:1d:de:92:cb:65:
71:6d:7b:7f:32:b3:12:52:93:be:40:5e:a4:03:b8:
f5:4c:d8:ba:f2:f3:28:1c:08:dc:bf:1a:0b:d8:59:
ae:c2:8f:4c:5b:30:fe:71:3b:6f:a4:f9:9d:ea:45:
0a:27:f1:2c:fa:91:80:eb:1f:01:4e:71:b9:f4:79:
cc:7d:62:3d:6e:d0:9f:ce:7b:10:5e:b1:a0:da:0c:
f3:86:3a:6d:e0:f8:2e:0b:39:10:6d:9c:88:95:c3:
b3:05:6b:fe:f6:2d:5b:e8:07:dc:6b:a8:5f:f1:48:
56:f5:54:63:ef:4b:fe:32:3b:2c:10:3a:e4:e9:f8:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1A:54:90:1E:B9:9B:ED:3C:8A:85:1B:3F:EA:69:EE:4C:8A:EF:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2BE4D06F45F11EFBDCD98A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:01:47:f4:a8:34:38:af:49:84:28:03:56:9d:e6:8e:e0:ff:
34:8a:cf:e3:ee:5d:7f:e4:c4:6e:c9:b5:27:c5:9c:13:ca:54:
e0:c9:c0:6f:db:6c:85:c9:14:a7:68:e2:4e:5e:10:d7:fe:29:
fe:44:bc:85:da:f2:db:0b:0c:5d:ae:f1:c0:40:d6:4c:7b:45:
30:ef:ef:c4:77:c7:2d:99:c3:98:f1:ad:54:bf:77:1e:99:07:
d1:f5:7e:5b:80:be:99:0c:16:63:0a:64:a5:59:95:f5:bc:0b:
a6:67:b7:a3:bb:ad:a9:df:32:b1:4a:f9:79:13:46:08:f1:88:
ff:c5:07:95:92:08:8d:35:15:94:d3:bc:b8:8f:66:c7:58:8e:
28:4b:52:29:2b:a3:7c:cf:dc:d5:14:3e:a6:58:cd:53:b2:f5:
e0:31:8f:76:82:c0:e0:be:44:90:b7:be:49:e9:ef:c2:78:a3:
00:fe:7e:ac:56:db:37:11:fe:66:27:bd:cb:3b:62:2f:fb:24:
ac:0d:ce:df:33:58:a1:44:33:4c:0d:0c:0a:32:a2:ef:0b:08:
ff:ed:1e:6f:18:20:3d:e2:7c:2b:b3:3a:34:bf:cf:ec:9f:f7:
94:ff:2f:5f:21:06:55:b2:00:73:99:15:ca:b9:4b:e4:a1:91:
32:6f:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:19 2025 by rpki-client