Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BACD0B2AF43E11EFBF9BECBA762E951A.roa
File: BACD0B2AF43E11EFBF9BECBA762E951A.roa (raw, json)
Hash identifier: EmtH9ZuCMdCjjgvqeaJCIb9c/zNXoTbGAeld4C5jn6Y=
Subject key identifier: 07:FE:A5:C5:40:B8:40:E1:9F:21:DF:C0:4D:6A:1B:74:61:CB:36:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013299
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BACD0B2AF43E11EFBF9BECBA762E951A.roa
Signing time: Wed 26 Feb 2025 12:39:33 +0000
ROA not before: Wed 26 Feb 2025 12:39:29 +0000
ROA not after: Thu 19 Feb 2026 12:39:29 +0000
asID: 984
IP address blocks: 156.252.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78489 (0x13299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:39:29 2025 GMT
Not After : Feb 19 12:39:29 2026 GMT
Subject: CN=67bf0b85-7c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:96:8a:a0:37:dd:85:42:f0:31:c6:45:ec:
86:0a:71:c1:54:8d:9d:44:05:66:e2:b6:a9:d5:09:
e6:b0:0f:9e:55:a6:f6:8f:c6:c4:3b:8b:e0:e7:4b:
52:77:af:e7:71:8e:0e:96:bf:9b:6f:75:ae:b2:0b:
c7:67:6c:cb:41:86:ca:a8:16:e2:23:d5:f2:cc:49:
b8:a8:7b:1f:b5:2c:c1:14:58:50:62:3a:04:00:54:
83:30:ff:4e:93:76:cd:8c:80:80:a5:a7:9a:e1:16:
27:00:81:cc:d1:78:7e:de:ec:4a:ab:bf:5f:ae:59:
02:6b:01:ce:48:0a:72:c0:dc:26:4d:46:8a:bf:de:
5e:38:27:25:3f:35:87:37:e7:24:ae:10:7d:e9:bc:
25:26:33:43:15:69:1a:7e:ce:d4:33:52:e1:a9:e9:
fa:92:49:9f:eb:a3:ca:ef:f2:c2:64:0a:a9:93:86:
12:2f:eb:7b:00:c8:5c:5a:ad:b4:0b:62:49:12:3c:
29:7e:0a:bf:82:ff:05:ed:1c:fa:29:2a:3b:3e:d6:
ef:66:22:b6:7e:ec:27:7d:aa:63:d7:7e:06:82:fc:
95:40:46:a2:5c:65:f7:c1:41:af:a0:f9:76:11:07:
19:a7:b9:1f:df:c4:67:17:f6:49:9d:69:97:e9:f9:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FE:A5:C5:40:B8:40:E1:9F:21:DF:C0:4D:6A:1B:74:61:CB:36:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BACD0B2AF43E11EFBF9BECBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.147.0/24
Signature Algorithm: sha256WithRSAEncryption
71:85:6d:06:84:e4:df:ec:00:c1:51:82:5b:72:59:e0:08:f9:
72:61:e6:d6:db:29:00:28:78:11:be:d5:34:c0:5f:57:95:8a:
fd:41:a7:8c:4f:f2:a9:f9:7b:10:bd:93:fe:76:41:a3:62:e8:
eb:9e:8a:8e:67:6b:64:43:a2:8d:eb:ab:2d:42:36:5c:03:61:
65:a4:96:0a:2b:b3:51:b0:b9:2b:a9:31:a0:e4:0a:fd:b3:5f:
7b:3e:d6:f6:66:3e:8b:46:e4:87:fa:cd:91:ad:35:61:73:22:
bc:a4:32:3a:b6:39:b6:44:a8:cc:98:5a:20:ca:e6:98:fc:fa:
7f:1b:95:49:ad:d0:6c:54:57:00:77:b6:ed:a3:4b:5c:db:09:
c5:ed:e4:44:e7:2e:e7:07:d3:0e:38:64:7f:57:6d:b0:cd:92:
db:5e:8d:cf:e7:10:a0:9b:4f:c7:ff:ba:69:80:e2:43:fb:12:
22:b0:4b:ec:b2:0d:8f:1d:a5:49:f0:cb:33:44:ae:b5:7a:b3:
00:06:36:09:b0:6c:97:b1:36:47:15:17:dc:58:b8:34:a3:50:
4f:71:9e:d0:af:32:fb:24:f7:e5:79:9b:03:91:36:aa:0e:13:
86:27:91:31:6e:c0:93:74:83:0d:de:f8:47:75:00:b6:de:88:
aa:a7:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:10:56 2025 by rpki-client