Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4A4CC44F45511EFB82C085F762E951A.roa
File: B4A4CC44F45511EFB82C085F762E951A.roa (raw, json)
Hash identifier: IhxHASjjF2HMqS0ONxCez/EOPD56+P6L6FhoLmJdTz4=
Subject key identifier: 9D:D1:32:9E:E9:CA:7C:0A:A4:99:3D:5B:74:3E:99:A3:B4:C7:09:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01343D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4A4CC44F45511EFB82C085F762E951A.roa
Signing time: Wed 26 Feb 2025 15:24:01 +0000
ROA not before: Wed 26 Feb 2025 15:23:58 +0000
ROA not after: Thu 19 Feb 2026 15:23:58 +0000
asID: 984
IP address blocks: 156.231.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78909 (0x1343d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:23:58 2025 GMT
Not After : Feb 19 15:23:58 2026 GMT
Subject: CN=67bf3211-21c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:0c:99:20:ec:a9:b5:b2:e1:e5:7b:d2:8a:
2d:66:91:27:89:b8:6f:d3:3d:f0:86:bc:3c:97:07:
dc:63:44:f1:ae:26:c4:c3:1f:be:c7:61:98:21:78:
98:a3:1a:d6:0a:fc:d9:23:dc:e5:7c:32:5b:76:9a:
69:2d:5f:ab:7e:76:8b:6a:57:4e:ec:6f:4c:51:cd:
d6:df:a7:b9:45:2c:3f:28:0f:de:b8:83:af:21:6a:
5a:26:bf:04:97:89:77:40:10:a4:2e:46:a6:21:18:
2e:0e:2d:c9:85:a6:82:46:c7:dd:36:cb:fb:da:11:
d5:6b:b1:32:68:b0:3d:84:83:e5:1f:fb:b5:e2:da:
21:09:5e:53:c3:dd:4e:4a:89:cc:8a:ff:1c:ea:0e:
96:21:6f:1f:55:31:8f:e3:4e:5a:b3:78:01:69:29:
6c:4f:95:8b:97:54:8a:19:56:f8:47:c9:c1:a3:aa:
02:db:d2:82:18:7b:3f:9b:a8:ae:b4:ae:ed:b3:96:
e7:58:aa:ff:46:ac:af:02:97:b0:5e:17:12:97:ea:
39:2a:da:b0:d0:21:4b:ac:5c:fa:14:63:ea:59:82:
cd:10:81:69:39:c7:03:a8:0e:b6:77:4c:a0:24:d5:
53:da:b7:8a:aa:fa:bf:77:24:b4:3d:e7:70:8a:84:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:32:9E:E9:CA:7C:0A:A4:99:3D:5B:74:3E:99:A3:B4:C7:09:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4A4CC44F45511EFB82C085F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.209.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0c:72:02:04:34:bc:50:ec:c9:6b:11:0d:12:ae:e7:ac:b8:
75:a1:b1:d4:ab:a1:37:18:51:a7:7b:6a:c3:cb:9f:55:7b:4e:
85:ba:1e:71:b8:c4:b9:0e:bb:69:9c:bd:47:31:79:18:36:04:
58:f3:29:a3:62:6b:4d:d6:7d:f7:34:05:e7:29:a9:54:f8:75:
e0:ac:e7:34:df:ef:ae:59:18:d6:72:c1:fb:81:a1:f8:17:51:
0c:fa:cb:16:c7:5f:53:dc:72:de:b9:5d:77:91:0f:cb:81:95:
58:4b:03:21:f9:0e:dc:50:00:ca:ff:e6:48:e6:f0:c9:fd:f5:
b3:9d:84:e9:20:e8:7b:a7:9b:60:e3:ea:58:e5:ac:e5:62:a0:
a3:43:6f:c5:80:b6:e7:9c:2c:c8:8b:e4:31:17:04:ac:50:d8:
d0:52:6d:49:a9:d7:1a:48:2a:25:78:77:e8:d7:1f:16:d7:2f:
92:2a:35:92:e9:63:d9:66:18:4f:2a:20:dd:b8:05:73:9e:74:
34:6f:20:01:3c:1e:4a:38:5e:da:6d:4c:46:ba:cc:61:09:de:
18:a2:ea:62:ca:05:80:cd:d9:94:a7:e6:5d:5d:d4:66:ee:01:
ae:27:36:8a:24:75:30:96:14:e5:90:65:1c:fa:fb:e0:25:01:
b7:69:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:56 2025 by rpki-client