Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B87B1E56F46711EF9919A85C762E951A.roa
File: B87B1E56F46711EF9919A85C762E951A.roa (raw, json)
Hash identifier: G58clpWP1BSliktehIk0BTrn6fhuzBvLK1LpOcQdAVQ=
Subject key identifier: 96:5C:29:14:0B:B4:97:1F:F0:38:02:6D:0C:41:AA:7B:94:59:9A:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B87B1E56F46711EF9919A85C762E951A.roa
Signing time: Wed 26 Feb 2025 17:32:58 +0000
ROA not before: Wed 26 Feb 2025 17:32:55 +0000
ROA not after: Thu 19 Feb 2026 17:32:55 +0000
asID: 984
IP address blocks: 156.245.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79270 (0x135a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:32:55 2025 GMT
Not After : Feb 19 17:32:55 2026 GMT
Subject: CN=67bf504a-4a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:1f:bc:b4:d9:02:b9:17:dc:5e:68:c0:ee:
ce:b9:21:6e:dd:5c:93:b6:e8:c4:6a:08:e9:51:13:
34:05:32:97:5b:50:b0:7e:9a:95:8c:63:e7:e4:ff:
e5:af:a8:73:da:7a:a7:db:f6:5c:1d:41:8f:fe:7e:
19:23:62:20:75:6c:ac:b2:8c:37:cc:f6:39:26:d7:
e0:a7:71:88:71:51:c3:3c:6e:f5:dd:14:d7:b6:d4:
1e:9e:f9:8f:e6:47:86:22:5b:50:f2:c3:46:67:b6:
58:ae:0b:ed:38:50:19:2d:44:2d:72:4e:45:a6:d3:
dd:9b:d5:b4:16:56:d0:e1:f5:86:7c:47:e9:51:ea:
86:95:dc:72:5c:26:50:cc:91:8d:19:03:9e:3f:e2:
14:ee:15:bd:ef:a9:f5:6e:95:de:c0:aa:e4:3b:a6:
5b:a8:a6:36:79:f4:46:d6:37:87:74:58:9b:5d:ce:
17:74:78:0e:49:cf:46:11:54:76:f6:01:37:ba:93:
d6:34:3c:70:f5:e0:2e:4b:b0:06:c8:40:1c:23:e3:
05:f2:1f:cd:6c:cd:99:07:72:1c:66:2f:89:cc:f2:
45:cb:8b:94:e7:37:18:6f:a7:8e:2e:57:35:4b:2c:
26:72:b4:8d:03:a0:3d:7a:b6:4f:4c:82:e4:d8:3d:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5C:29:14:0B:B4:97:1F:F0:38:02:6D:0C:41:AA:7B:94:59:9A:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B87B1E56F46711EF9919A85C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.87.0/24
Signature Algorithm: sha256WithRSAEncryption
33:96:27:41:ce:1f:55:d1:4f:06:a8:75:ae:4b:e5:ba:f2:1d:
e2:28:a9:c9:a3:df:00:6a:3d:1f:25:37:f6:a6:83:95:ea:5c:
ee:d6:36:55:81:13:e1:fb:e1:bc:94:bd:75:d4:ec:df:02:ae:
80:f1:f2:e5:cc:a2:97:c3:9e:06:82:49:52:fd:b0:a7:2c:e2:
d7:db:eb:83:82:d3:17:aa:ac:19:7c:23:f8:d0:15:c4:cb:fd:
45:43:95:13:2b:c4:f5:e6:04:4a:11:63:a6:1c:41:b0:69:1c:
e6:e9:35:13:8b:ee:b5:ee:87:54:1a:cd:a3:06:e2:fd:bf:73:
17:d8:a4:3b:75:aa:fd:5a:ca:18:d5:5e:01:73:bd:82:9d:8f:
a3:3b:89:17:57:3f:ec:8a:a7:22:bb:fe:f1:e1:2c:0f:53:4d:
cb:d6:1f:60:9d:09:ca:ba:18:96:c1:90:35:68:75:48:7f:17:
a3:51:a7:51:2b:c4:de:25:ff:bc:ad:9f:fe:f4:d4:39:d2:91:
60:ca:bc:4f:7e:32:00:92:5f:80:c2:cb:47:64:23:7a:6b:ab:
19:93:90:9d:87:17:3d:40:b9:70:2c:95:c5:77:ba:5f:d3:cd:
99:66:8c:05:53:a4:3d:c9:4a:53:62:44:e3:09:52:ca:6f:16:
fb:f4:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:40 2025 by rpki-client