Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAD599F6F45311EF97B7C850762E951A.roa
File: BAD599F6F45311EF97B7C850762E951A.roa (raw, json)
Hash identifier: LM5KkPn5+5x+ppUoMgnVggGnjJ/jEMbP6bMCOkalINY=
Subject key identifier: 4F:D7:EC:3A:B0:23:A6:AA:3F:70:5A:72:D3:F2:F0:B8:96:3D:E9:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01341E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAD599F6F45311EF97B7C850762E951A.roa
Signing time: Wed 26 Feb 2025 15:09:53 +0000
ROA not before: Wed 26 Feb 2025 15:09:49 +0000
ROA not after: Thu 19 Feb 2026 15:09:49 +0000
asID: 984
IP address blocks: 156.231.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78878 (0x1341e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:09:49 2025 GMT
Not After : Feb 19 15:09:49 2026 GMT
Subject: CN=67bf2ec0-64c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:73:92:42:ef:01:90:c1:e4:b9:0e:97:b6:
4f:96:9c:97:f7:f6:6c:74:11:16:a7:ee:a2:d3:de:
75:9b:5a:b2:28:b3:8e:e4:83:43:23:31:aa:4d:3a:
a9:f4:06:b7:a3:92:02:fe:79:ce:a7:a1:28:b7:7a:
4e:72:8b:0a:c8:ea:1c:55:8c:2d:80:b6:d4:1a:9a:
d2:d3:87:43:2d:7e:1b:0c:b3:c8:89:a2:e0:72:8d:
e1:96:c8:44:f6:13:47:1e:e4:79:da:ba:46:b3:53:
33:0c:8d:59:2b:56:5a:e5:5a:5b:cc:70:f8:d9:44:
36:c1:85:3a:0c:52:90:65:86:11:6f:96:e6:01:61:
8c:1e:48:7c:89:c5:84:b9:8b:24:f4:f4:3f:bc:a4:
0f:ba:5b:31:91:f6:0e:d7:14:57:ed:94:dd:43:8f:
c2:17:44:6b:bf:7e:06:74:5e:a5:3d:50:9f:34:de:
ab:62:fd:dd:9d:48:88:90:41:01:5c:cf:ef:ed:d5:
b9:e9:53:e0:db:b6:a6:1c:da:e8:12:0f:9b:64:81:
8f:27:4c:48:8e:8b:33:53:8b:ed:3e:ef:7d:af:f3:
83:b2:2f:75:0a:80:a9:d8:71:55:09:96:e9:b6:46:
49:0d:1d:5f:df:71:49:a1:cf:94:6d:6a:d2:23:7e:
c8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D7:EC:3A:B0:23:A6:AA:3F:70:5A:72:D3:F2:F0:B8:96:3D:E9:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAD599F6F45311EF97B7C850762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.203.0/24
Signature Algorithm: sha256WithRSAEncryption
33:32:24:aa:4b:ab:65:12:c6:d1:ea:23:50:6d:c9:82:c2:cf:
1e:fa:de:7f:70:e5:0c:85:08:70:3b:15:b9:bf:02:44:f8:fc:
4e:4d:f0:c0:83:c2:9d:76:d4:7f:26:22:59:c6:1a:49:68:7c:
97:ee:2c:7a:e1:24:b8:66:75:b8:a4:92:ef:ef:fb:e7:a9:df:
28:7d:7e:bc:2c:df:0d:64:32:61:e0:56:cf:6a:29:27:b8:f2:
fa:cb:f1:93:d7:6d:d2:91:9d:fa:fd:9a:50:cd:04:da:91:43:
77:6f:81:75:2a:8e:da:d3:9e:4e:ec:60:68:a1:48:b5:18:7e:
9c:4a:67:cc:93:98:d6:03:8c:3a:e6:7e:6a:5a:65:b3:6c:fb:
cc:6c:55:fd:10:c3:1f:08:e6:95:8a:c4:8a:fd:de:f1:e4:54:
c6:53:9e:c4:d2:29:af:72:58:a5:48:2e:34:f3:99:69:22:d4:
7c:e7:cb:7b:5e:5c:eb:42:d2:d8:02:6c:c4:38:66:1a:16:4b:
70:f2:d8:05:37:44:ee:d8:8c:76:c5:f0:fd:e9:fe:b6:db:e2:
0a:9e:cf:12:16:65:ee:1a:a1:13:11:a4:8c:bf:e9:65:c7:2c:
23:c0:8f:d5:78:ac:1b:b9:aa:d6:ee:86:78:22:34:b5:c4:f2:
da:0a:69:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:16 2025 by rpki-client