Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3035E86F42911EFB7E418A8762E951A.roa
File: B3035E86F42911EFB7E418A8762E951A.roa (raw, json)
Hash identifier: uq4rcO/crBUwXc6xXLryv+cKIRAiiqMbgusSZRQHSyc=
Subject key identifier: FC:16:16:17:8A:39:4C:E1:AD:6F:79:AE:DB:7B:DE:D2:CB:0D:B6:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3035E86F42911EFB7E418A8762E951A.roa
Signing time: Wed 26 Feb 2025 10:09:01 +0000
ROA not before: Wed 26 Feb 2025 10:08:57 +0000
ROA not after: Thu 19 Feb 2026 10:08:57 +0000
asID: 984
IP address blocks: 156.252.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78032 (0x130d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:08:57 2025 GMT
Not After : Feb 19 10:08:57 2026 GMT
Subject: CN=67bee83d-0281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:10:14:c7:1d:36:a4:90:37:fb:72:38:dc:
0e:c3:47:eb:cf:4b:fd:c7:9b:9a:4f:0e:08:5a:41:
65:97:23:a5:36:8e:b6:ae:4e:ed:71:a7:f6:52:28:
ca:9d:74:77:41:b6:09:89:99:ca:cc:94:00:f7:46:
13:9b:3b:4d:f6:b4:23:1b:ab:f1:a4:ab:6e:03:0c:
54:d4:9d:65:7b:21:19:32:27:19:40:22:8b:ff:20:
19:10:0b:77:82:93:40:a6:b7:08:85:77:92:ed:b3:
1a:e7:8a:fc:d8:81:17:6c:71:5e:5d:e7:63:d5:30:
e0:e8:41:f0:b6:36:d9:37:a3:93:a2:fb:25:fe:bc:
1d:54:aa:3c:76:68:1a:a8:35:d9:96:bc:38:21:28:
40:84:e6:f6:45:38:11:f7:97:1b:03:fb:ae:1a:76:
49:f7:87:53:24:35:86:a2:42:be:e0:12:c5:2f:c2:
0a:e3:7b:c4:ed:82:7b:15:46:42:fd:97:e7:fe:52:
f0:ce:61:04:bf:d4:c5:d8:e6:51:d2:b4:b3:fa:33:
30:c8:a0:55:a8:8f:fa:fa:c1:a1:08:3d:59:29:93:
7b:b9:a0:c5:b6:50:ce:02:eb:42:3c:d6:ec:dd:3a:
ef:de:f2:6b:39:a8:4a:8d:79:c3:e9:5e:bc:2a:2a:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:16:16:17:8A:39:4C:E1:AD:6F:79:AE:DB:7B:DE:D2:CB:0D:B6:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3035E86F42911EFB7E418A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:6b:c6:ce:8f:f8:30:c3:c2:2f:0e:cc:bd:76:fe:2c:51:af:
65:c7:df:ff:85:32:3a:00:8f:fb:10:cc:02:d0:d0:d2:3f:8d:
99:6e:5f:f1:82:23:9a:5f:4d:d9:e4:75:f5:a1:31:eb:74:e9:
24:59:20:05:80:1c:dc:2c:d5:86:3e:cb:ec:d5:33:38:b7:c3:
70:25:1c:ea:b5:f0:75:d0:43:f3:b5:14:b4:a2:5a:9f:65:b3:
de:44:d3:2b:c6:01:67:24:b6:43:a5:1e:b0:46:8f:0d:ad:96:
3e:e9:59:8c:67:f1:52:07:0f:1f:1a:e2:ef:6a:44:06:89:ac:
2d:43:be:fe:43:6b:94:a6:48:e2:6f:c5:97:4d:56:9c:6c:1b:
df:b6:c3:ec:6f:e9:aa:53:0b:13:2c:42:06:08:85:62:46:bf:
9c:35:72:98:5e:b4:c8:ad:34:d2:4a:5e:b5:d1:df:34:f5:6e:
01:c1:a3:02:27:fe:4c:97:b2:c6:90:0a:ae:62:4c:1f:1c:ab:
ec:9b:cd:c5:b4:a6:01:b4:29:2f:e9:50:5a:75:77:55:28:5f:
9a:7b:73:cf:1e:95:0e:24:43:79:29:32:cd:e9:f1:03:32:f2:
f1:9f:c1:7b:1d:6b:03:91:51:78:f6:d0:62:2e:e5:2e:67:d2:
ac:0a:dc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:09 2025 by rpki-client