Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8AF9542F42A11EF8EF47EAD762E951A.roa
File: B8AF9542F42A11EF8EF47EAD762E951A.roa (raw, json)
Hash identifier: Cw8fqs+IQNB1JRKIUX+9jElZq71N9GZba7m6b+gtrIQ=
Subject key identifier: 6A:79:D5:5B:F9:B6:A0:ED:E0:4C:28:2F:2F:22:65:B0:D0:38:49:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8AF9542F42A11EF8EF47EAD762E951A.roa
Signing time: Wed 26 Feb 2025 10:16:20 +0000
ROA not before: Wed 26 Feb 2025 10:16:16 +0000
ROA not after: Thu 19 Feb 2026 10:16:16 +0000
asID: 984
IP address blocks: 156.230.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78050 (0x130e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:16:16 2025 GMT
Not After : Feb 19 10:16:16 2026 GMT
Subject: CN=67bee9f4-200a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:49:db:26:25:2c:2a:43:89:5c:a7:f2:8c:
15:9e:1f:b8:b2:59:c4:e2:c2:a6:94:2d:ad:41:c2:
34:10:51:93:69:7f:c9:91:eb:92:0e:b2:ea:7d:e9:
bb:6e:df:78:30:b8:52:e6:d8:7e:5e:eb:7d:81:41:
58:4b:80:5a:81:7f:2f:ed:f1:aa:57:e7:60:16:08:
90:31:9e:0b:89:9c:80:2b:f7:1f:04:0f:db:f7:70:
56:f3:3e:9b:09:0b:16:10:e6:84:19:ca:a0:82:f0:
17:2e:f4:94:d2:9e:ed:32:d0:9a:32:50:d1:61:b5:
e3:ad:e8:c7:06:59:cc:1f:8c:88:0e:10:42:43:03:
55:10:8e:b9:63:65:60:da:7a:48:7d:35:b1:24:ae:
da:e5:21:5f:84:d0:85:49:ee:93:57:5e:65:aa:70:
05:4f:f5:66:91:62:d1:11:07:66:37:32:19:77:bf:
ba:8c:43:12:81:35:b0:19:42:f2:b2:40:e2:a4:96:
7f:d6:38:f3:0f:a2:51:ce:74:ac:0a:63:49:f2:55:
d3:d0:e9:9a:e0:56:b3:ee:0d:ed:44:fc:d8:8f:3b:
02:2f:20:4e:91:89:88:79:1f:73:2f:92:1d:13:03:
e1:22:4b:3b:9a:9f:c6:3b:bf:31:3c:ac:e4:70:34:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:79:D5:5B:F9:B6:A0:ED:E0:4C:28:2F:2F:22:65:B0:D0:38:49:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8AF9542F42A11EF8EF47EAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:68:86:e5:44:54:fb:96:fe:86:86:33:55:f7:6c:1d:d7:98:
b5:6a:40:76:d3:d9:bd:bd:2c:1a:b5:62:e9:4a:52:e3:50:ff:
b2:a1:4d:b8:dc:dd:59:5d:c2:df:49:07:13:37:34:cb:ae:7e:
d3:94:6f:e4:51:fd:b2:89:c4:fb:8d:8c:02:63:01:da:e9:10:
9a:73:13:e8:20:1a:57:9a:22:b1:9e:a9:13:93:f2:be:df:be:
31:3e:1c:25:99:e6:5c:94:b8:45:47:38:f5:00:f5:87:c6:65:
a2:4b:47:83:a8:35:dc:c5:35:a1:b9:3b:25:f8:85:47:8c:2e:
6c:38:83:f9:ec:bb:57:e6:c9:3c:e3:dc:cd:fa:e5:39:c6:63:
5f:c9:bf:f2:23:a8:d7:ee:2f:1f:92:45:6f:b5:f6:61:5d:67:
81:f5:56:26:eb:dd:bd:cb:75:3d:8f:e8:7c:7c:c0:89:c1:a1:
97:50:ee:2c:6c:c9:80:92:82:98:bb:f8:02:a5:23:ca:7a:ca:
aa:92:f7:8e:22:14:4c:04:b0:ed:3a:84:01:90:56:69:19:f0:
71:ea:af:95:ed:f1:f2:7f:94:86:fe:1e:3f:96:19:d7:f6:bd:
1e:26:19:71:20:cc:e1:d2:f6:95:eb:80:59:a7:33:54:08:64:
61:de:af:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:59 2025 by rpki-client