Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B653936AE53511EF88363861762E951A.roa
File: B653936AE53511EF88363861762E951A.roa (raw, json)
Hash identifier: WUb2eKy2G1JYXmTVGBlDta5FYkIDJhuRLiKN6Ek5yVQ=
Subject key identifier: 4D:49:24:CC:AA:3E:7C:73:02:C1:65:11:52:E4:E6:0D:6E:0B:1D:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B653936AE53511EF88363861762E951A.roa
Signing time: Fri 07 Feb 2025 09:27:13 +0000
ROA not before: Fri 07 Feb 2025 09:27:09 +0000
ROA not after: Sat 13 Dec 2025 09:27:09 +0000
asID: 984
IP address blocks: 156.230.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72875 (0x11cab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 09:27:09 2025 GMT
Not After : Dec 13 09:27:09 2025 GMT
Subject: CN=67a5d1f1-6c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:68:aa:97:f3:26:c3:ce:96:f3:84:1e:ad:
df:0c:98:75:65:74:a8:1d:fb:94:26:46:09:72:ff:
2a:4f:e2:c5:40:30:e9:9f:8b:bc:f4:4b:f2:d5:d2:
5c:70:49:11:4a:04:f0:72:ae:32:af:ed:b8:fd:d9:
92:b0:32:7b:bf:a3:ca:b3:54:b2:f1:02:44:92:25:
d0:30:da:e0:0f:b8:3a:e4:ed:e7:88:05:99:84:af:
9b:90:35:b8:d3:42:ff:bc:ac:4f:59:4f:ec:92:4f:
c3:9d:bd:ce:3c:2e:2e:25:1f:c0:6c:ad:17:dd:76:
e5:b1:55:46:24:4f:67:5c:96:7f:da:90:b3:58:5b:
ca:36:2f:3d:9f:a4:0e:90:52:31:be:7a:d4:29:2a:
f0:28:e5:df:b0:1b:e5:55:a9:78:90:b2:95:cc:29:
54:21:21:10:84:c7:a7:1d:f4:bc:ea:4a:dc:f0:84:
af:ec:4c:34:77:96:22:5c:94:07:b2:8b:66:57:32:
0e:e3:d1:6f:5d:42:5c:e4:f2:05:2e:5d:74:22:0a:
46:4a:dd:5a:28:72:ee:3e:a2:4b:99:6c:96:64:18:
ab:0c:22:df:f9:35:5a:11:7c:a7:12:38:e8:22:c6:
39:23:99:51:85:2f:f5:50:3e:ea:e7:e2:0c:17:1d:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:49:24:CC:AA:3E:7C:73:02:C1:65:11:52:E4:E6:0D:6E:0B:1D:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B653936AE53511EF88363861762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:77:a1:54:ca:1a:81:7f:34:1e:66:07:1c:e9:2b:af:90:68:
47:91:1e:24:bc:f4:df:f2:f8:29:ba:b1:7f:59:e5:3b:26:49:
a6:a7:d1:87:d2:1e:a2:11:7a:19:b4:ac:21:1f:bd:dd:80:f4:
af:90:e1:39:ff:5f:fd:0c:51:de:78:c3:6d:5a:08:35:de:60:
88:80:b1:aa:59:f4:29:cd:ac:70:d0:fb:d7:a0:85:a1:9d:d9:
4c:16:fc:54:46:98:e9:87:24:46:3a:15:c7:8f:37:26:c8:56:
6b:61:94:75:d7:08:4d:42:91:77:a2:d8:fb:74:45:af:fe:bf:
85:16:2e:ef:03:6f:3d:3b:42:8f:5f:1b:85:1f:e3:bd:3c:f3:
8e:0d:00:97:3b:13:5c:7e:c6:64:eb:38:b3:a0:ac:bf:c6:d9:
67:fe:88:f8:2b:d5:ce:61:5e:2e:76:5e:88:34:09:dc:47:3c:
e6:82:a5:ee:24:7d:cc:0a:05:75:f9:20:5e:24:6a:bd:0c:ef:
01:c2:23:a2:ce:c2:73:20:2a:40:ec:3c:db:e0:6f:f6:56:11:
b9:03:80:53:0b:b8:ae:99:f2:ea:39:4f:48:4f:7c:cf:04:d1:
0f:40:7d:f4:1a:fe:c5:b5:c5:53:2f:de:d1:7f:53:60:f4:b8:
e3:05:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:59 2025 by rpki-client