Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3E89378F41C11EFAF2B384D762E951A.roa
File: B3E89378F41C11EFAF2B384D762E951A.roa (raw, json)
Hash identifier: dnBsJhOBwzHWgu/oHXd0KKfuUFBOLLOWbYXPLg+TOQw=
Subject key identifier: 92:16:DA:5F:06:25:28:2F:4B:3A:86:82:E7:7E:C3:4F:BA:82:11:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013000
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3E89378F41C11EFAF2B384D762E951A.roa
Signing time: Wed 26 Feb 2025 08:35:59 +0000
ROA not before: Wed 26 Feb 2025 08:35:55 +0000
ROA not after: Thu 19 Feb 2026 08:35:55 +0000
asID: 984
IP address blocks: 156.252.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77824 (0x13000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 08:35:55 2025 GMT
Not After : Feb 19 08:35:55 2026 GMT
Subject: CN=67bed26f-49b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:68:70:f8:39:da:5a:45:7b:7a:7e:8e:43:97:
29:51:8c:af:76:db:36:94:34:0f:e0:46:a9:73:37:
62:c0:ca:d2:2b:86:19:d3:8a:ec:16:eb:46:e6:95:
d8:47:da:8f:48:cd:a9:c7:67:a3:8b:fa:a6:49:61:
c3:59:1a:a1:d1:39:7d:6f:f7:bf:5e:dc:a9:43:27:
ba:a6:59:22:bb:5f:50:a1:2d:b2:62:11:20:85:02:
6e:27:89:6d:d3:2d:2e:67:60:88:ad:ef:81:99:ff:
e2:6f:76:6f:1f:5d:74:5c:35:ee:02:4d:3e:75:0a:
c8:5f:41:43:f2:00:0e:59:e4:91:ab:9c:33:56:f2:
f3:0b:8d:4a:d3:68:c9:66:cb:42:37:f6:6b:bf:5b:
e1:8f:d3:b0:a5:2d:da:64:44:b6:fb:2f:2c:d8:76:
4e:af:3e:a6:6f:1a:3d:7d:59:fc:5d:0c:de:31:73:
73:4a:e5:08:24:5d:45:30:c9:b2:c8:c0:51:a5:4b:
a8:aa:cd:ff:9e:f7:22:68:65:cf:99:52:5f:18:94:
13:06:88:f0:49:03:29:7b:26:a0:c4:96:1a:98:1d:
28:71:6a:91:4a:5d:de:6e:70:e1:07:8e:63:b8:2b:
3e:5e:5a:b8:75:b2:19:50:89:fd:14:92:fb:8d:ff:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:16:DA:5F:06:25:28:2F:4B:3A:86:82:E7:7E:C3:4F:BA:82:11:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3E89378F41C11EFAF2B384D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.20.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:13:d9:82:10:0c:0b:12:c4:63:fa:eb:d7:cf:01:62:42:72:
3f:3c:92:15:53:40:39:2c:6f:bc:ce:84:a9:51:2e:6c:54:22:
2f:a6:61:26:96:86:0d:7c:09:0c:87:ce:0c:23:90:76:42:b4:
2f:7f:5b:78:d2:9c:00:6c:9b:95:bd:bc:0e:3b:a6:1a:20:ba:
38:7c:cc:9d:3f:84:2f:0a:92:d2:eb:40:af:f4:90:73:6b:ae:
98:7b:da:b6:11:bc:44:c9:7b:ee:90:d5:1e:c2:93:61:ed:57:
67:3a:d3:40:40:9b:a4:fb:3d:a8:65:4f:20:18:29:06:f7:27:
04:a9:1d:62:4a:96:09:ec:52:13:5b:e0:fd:ee:b5:17:f3:5a:
82:db:58:46:42:23:97:d6:8d:6f:43:ff:9b:6e:92:c4:8d:6f:
90:96:94:c7:26:e5:f4:0d:05:e3:74:aa:f6:2b:7c:eb:47:fc:
9d:9e:54:26:41:16:71:62:e8:0c:e8:93:07:71:42:8d:d2:15:
e7:77:11:1f:8d:0c:75:17:5e:c5:af:5b:82:f5:0c:18:7b:d1:
64:01:af:04:7f:8e:71:47:78:47:b6:80:59:24:70:7d:ec:68:
99:a9:1e:d4:b6:4b:99:8b:dd:ec:96:13:0c:64:45:3a:d9:0f:
15:4b:b0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:58 2025 by rpki-client