Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC95FED4F44411EF87D76968762E951A.roa
File: BC95FED4F44411EF87D76968762E951A.roa (raw, json)
Hash identifier: XD2N62zrDy8mECgNr+l1bC86Rm0mGQ2apLDku6y1te8=
Subject key identifier: 1A:6A:C4:56:5D:29:14:C7:FB:65:AE:82:01:48:94:DF:14:3F:16:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013315
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC95FED4F44411EF87D76968762E951A.roa
Signing time: Wed 26 Feb 2025 13:22:33 +0000
ROA not before: Wed 26 Feb 2025 13:22:29 +0000
ROA not after: Thu 19 Feb 2026 13:22:29 +0000
asID: 984
IP address blocks: 156.245.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78613 (0x13315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:22:29 2025 GMT
Not After : Feb 19 13:22:29 2026 GMT
Subject: CN=67bf1599-6dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:df:9e:5b:b6:ff:c6:6c:2e:06:98:55:dc:
07:fc:be:03:28:a7:17:36:2b:f2:00:99:0d:7b:0a:
98:26:90:c8:c5:0d:cd:11:89:2d:ad:c2:b4:02:32:
d2:23:39:a7:c4:ee:b5:1f:bc:07:53:3e:f4:d9:07:
83:db:0b:fa:be:c8:cc:8d:00:b7:77:d3:b1:7c:5d:
5a:cd:32:c6:bc:8e:ce:01:2b:ad:57:5a:e9:28:49:
f4:1c:8c:9e:f3:76:be:01:fc:40:42:57:3e:d2:fa:
65:65:94:19:47:18:9d:8f:44:45:5b:a6:a9:68:24:
06:b2:77:ef:04:94:06:57:ea:dc:9a:18:1f:8f:f3:
23:e8:e3:a7:bb:dd:15:74:08:01:5e:e1:5c:92:28:
7f:d5:3c:3d:a5:30:a4:3c:54:88:49:63:2d:2f:05:
05:a8:6d:ac:d2:9b:b9:0c:2b:7f:df:ef:a2:9a:07:
6d:1c:98:d3:bd:dd:d4:ee:bf:ca:58:d7:b6:c5:58:
0c:fc:db:3e:4a:27:cd:fe:85:c2:7d:d1:3f:cd:1d:
2e:8b:0b:7b:7d:35:6b:31:85:db:71:48:05:7d:3e:
90:9a:c5:91:22:1e:94:b5:21:0f:f1:3b:b1:b7:92:
8d:99:a8:28:80:34:15:aa:e4:eb:6b:c5:4d:91:28:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6A:C4:56:5D:29:14:C7:FB:65:AE:82:01:48:94:DF:14:3F:16:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC95FED4F44411EF87D76968762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:bc:fe:7f:3c:f6:f3:5b:ae:f4:fe:9c:db:05:9c:03:7c:dd:
15:dc:1f:d5:fd:e4:06:53:57:b1:5b:cf:2d:65:dd:2c:9c:70:
7d:de:89:33:9b:e8:e4:30:b4:1a:36:fc:b6:41:6a:0f:5a:18:
64:9a:3b:2f:48:f8:ca:f5:e4:a2:73:67:ab:d3:fe:ce:9c:c0:
48:b4:97:26:9a:68:2c:7d:3c:62:6e:38:e5:07:18:57:31:10:
3a:ab:c4:a1:b6:4f:a5:ef:d2:4a:1b:9e:97:b0:ae:bb:41:b1:
aa:6a:46:39:f1:50:e4:da:89:3d:ef:99:f8:81:54:02:d7:32:
51:11:56:07:f0:8a:0d:bb:e4:57:be:14:12:59:13:49:88:7f:
4f:bf:9e:f7:72:0f:bc:1b:b8:cb:1e:47:b4:eb:70:9c:58:a1:
d3:b7:1c:42:90:5c:e1:f5:6d:ff:e4:a6:40:da:09:d0:5b:ba:
a5:ad:a7:ec:83:30:c1:7d:3b:b5:0e:f0:86:2a:06:80:7c:23:
74:11:ce:06:38:87:b5:55:b3:d5:f6:92:b2:21:70:70:56:df:
50:6e:f0:2b:8c:f3:0f:48:d2:7f:5c:99:64:99:a4:dd:9d:07:
0d:15:62:76:d6:6f:65:1a:a2:81:b2:79:e9:d8:ec:38:df:58:
91:7b:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:50 2025 by rpki-client