Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5900092F45011EFA94B77BB762E951A.roa
File: B5900092F45011EFA94B77BB762E951A.roa (raw, json)
Hash identifier: dhC1HA9maLt6E3mnkAtsGzG8I2vyjSyE5FTZY4S3NNg=
Subject key identifier: 29:06:1A:A7:68:5E:E8:E1:22:86:19:73:15:50:26:B5:F5:24:5A:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0133EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5900092F45011EFA94B77BB762E951A.roa
Signing time: Wed 26 Feb 2025 14:48:15 +0000
ROA not before: Wed 26 Feb 2025 14:48:11 +0000
ROA not after: Thu 19 Feb 2026 14:48:11 +0000
asID: 984
IP address blocks: 156.231.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78830 (0x133ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:48:11 2025 GMT
Not After : Feb 19 14:48:11 2026 GMT
Subject: CN=67bf29af-7674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:d8:93:72:9f:d7:2f:3e:4c:18:2f:3f:a6:
e5:ca:d5:6a:e7:02:69:c2:fe:1a:e2:01:57:bb:b1:
2d:c5:d1:be:4f:58:83:b4:67:2d:ea:f6:4e:17:a5:
c3:e9:95:69:19:48:c5:59:31:c2:86:c5:82:c1:dc:
4a:68:a3:60:66:ae:96:71:93:0c:91:81:0c:a7:1f:
83:3a:71:05:ce:fc:9d:d5:7a:a2:65:b1:d8:7e:3b:
35:03:95:0a:3f:6f:ad:74:f7:51:79:11:3d:39:0e:
72:ec:33:82:ae:5f:70:09:91:ef:1c:2a:e6:bf:af:
f8:1e:94:53:42:45:57:98:38:2c:24:ea:0b:fd:c0:
ec:0d:7c:33:02:91:2f:07:93:48:5c:6f:be:b3:ec:
f4:5a:03:56:99:c6:96:e9:6a:b7:32:47:1c:d1:35:
f1:ae:42:5c:27:2a:74:4e:fd:1f:52:11:0b:5c:99:
8a:ad:de:70:03:b2:a8:34:17:3c:e1:64:43:b8:ab:
f3:3d:d9:4a:35:52:69:12:c8:97:40:e4:ec:0e:46:
aa:82:c9:ec:52:2c:53:9d:bd:6b:63:c5:69:cd:a9:
9e:4b:b8:8a:63:d8:68:ef:fd:d3:13:f6:cc:59:4a:
6f:c9:37:1b:97:d8:2f:18:bb:94:82:d6:96:28:d9:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:06:1A:A7:68:5E:E8:E1:22:86:19:73:15:50:26:B5:F5:24:5A:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5900092F45011EFA94B77BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.195.0/24
Signature Algorithm: sha256WithRSAEncryption
68:5c:56:27:22:06:2d:3b:0d:49:83:b4:c5:6f:17:a4:76:af:
67:e6:d6:c4:e7:88:bd:e0:14:0a:15:67:e7:e1:c5:1c:d7:88:
66:cc:1b:83:97:0b:a9:65:60:0d:f9:64:26:b5:b0:4f:49:62:
93:1d:67:59:6d:e0:32:7b:0b:3b:4d:00:62:cd:d8:9b:28:fa:
d5:20:aa:e0:c1:64:e1:aa:a3:84:ce:2f:e6:ff:a6:fb:42:d7:
12:d6:30:23:58:72:f0:6e:be:59:c3:54:14:1d:8c:95:a9:86:
6d:79:21:94:2f:06:e4:8b:3d:8f:e4:be:59:af:d2:a6:47:bd:
b9:22:a6:b8:bf:54:fd:da:ff:55:8d:d1:0d:43:fa:5d:2c:c3:
cf:a7:13:dc:50:42:cf:d8:ac:5a:8e:e0:d7:14:a6:a5:51:46:
e5:26:b9:a6:da:37:c6:b1:2a:73:3b:fd:1d:7c:39:f1:99:fc:
96:70:a9:b3:a2:f8:4f:cf:40:58:0e:c7:87:eb:25:18:00:31:
44:21:a8:c9:1d:57:f2:40:98:46:63:b0:70:b8:a2:23:b0:15:
f0:7e:09:bc:b7:d6:be:46:f6:7a:07:2c:80:ef:43:2a:3d:aa:
be:71:ae:7d:e2:3b:e1:ec:48:ce:2c:de:f0:13:84:e5:3e:3b:
00:31:4e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:35 2025 by rpki-client