Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD2E9F16F47311EFB31C5CAE762E951A.roa
File: BD2E9F16F47311EFB31C5CAE762E951A.roa (raw, json)
Hash identifier: IFTtuJVSSLiC+jsPmgm0oCtCeTtIa0cpg1z+W/j+YfM=
Subject key identifier: AF:4F:6D:FC:F8:ED:18:1D:F6:5D:A0:49:FF:CA:A0:9E:C8:A5:27:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD2E9F16F47311EFB31C5CAE762E951A.roa
Signing time: Wed 26 Feb 2025 18:59:01 +0000
ROA not before: Wed 26 Feb 2025 18:58:57 +0000
ROA not after: Thu 19 Feb 2026 18:58:57 +0000
asID: 984
IP address blocks: 156.245.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79557 (0x136c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:58:57 2025 GMT
Not After : Feb 19 18:58:57 2026 GMT
Subject: CN=67bf6474-003a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:7e:1f:6b:c4:77:83:8f:6b:9c:57:1d:18:
5c:98:d0:2d:83:ed:0d:c2:d2:c4:b0:4e:b5:f7:43:
b0:60:8f:63:a3:e4:2d:13:a4:d9:fb:55:76:d0:61:
5f:7e:e9:f6:a1:37:90:ad:65:fa:aa:bf:7c:5c:5a:
04:40:9c:ca:9f:70:4a:b1:76:6a:4d:ca:68:c2:c0:
1b:de:f0:3b:2a:58:3f:13:0b:03:b5:5b:fc:3a:0b:
b0:33:9b:4e:72:d7:01:1a:82:1a:ea:64:01:ba:ff:
cb:be:83:f9:d1:c4:a8:43:6c:82:06:ce:92:5c:5a:
a1:3b:91:d0:47:c7:d9:3c:ee:a0:9e:73:bd:f8:a1:
7b:08:1e:f6:ef:b6:5c:11:ec:fc:2a:7e:2c:32:17:
9e:2d:43:1d:d4:a2:55:92:71:d4:16:e4:89:cb:82:
70:cd:39:59:04:9b:0f:10:94:86:52:58:4d:d6:b7:
1a:fe:cb:74:c6:b4:b6:e3:ee:0d:2a:d3:fc:3a:4a:
41:f9:6d:10:43:fd:09:36:1e:b6:97:ec:b7:e6:ba:
21:b5:b4:99:ab:4b:36:8f:f8:66:65:e7:97:1a:2b:
e9:72:62:36:52:65:88:d6:f6:4f:0e:f9:b9:29:da:
9a:0d:90:ab:da:46:60:1f:e9:19:ed:1e:bb:28:17:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:6D:FC:F8:ED:18:1D:F6:5D:A0:49:FF:CA:A0:9E:C8:A5:27:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD2E9F16F47311EFB31C5CAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.125.0/24
Signature Algorithm: sha256WithRSAEncryption
27:05:39:88:c8:78:ae:70:f9:d5:dd:1b:23:0d:d8:b9:c8:6b:
62:1d:2f:79:cb:74:19:aa:5d:c7:52:5f:fb:71:e6:a7:64:c9:
1d:48:ba:37:f4:a7:e5:21:f4:ae:fe:58:4d:97:d8:54:3f:eb:
0f:a7:32:86:82:91:48:ef:e6:ee:a5:57:63:00:d6:82:0f:4e:
b4:97:2a:92:eb:ca:fc:4f:e4:00:da:1d:53:f8:2b:77:61:fb:
15:7a:9c:84:b1:8f:21:89:8f:f9:10:cd:62:db:40:ed:54:30:
a5:5d:60:e0:8e:57:2d:df:53:56:f0:47:41:31:82:98:e4:e8:
b0:27:52:73:61:5d:c6:95:49:88:56:ac:b7:ce:1b:a3:3a:46:
ad:9b:dd:32:42:d0:08:30:c9:22:db:a4:d0:8b:a2:b7:7c:1b:
17:a4:ba:bd:e8:03:eb:39:f4:3a:7c:6e:eb:07:a5:57:02:c4:
d6:5f:16:1b:24:a8:fc:7f:90:ad:4c:6e:29:2c:1c:55:cb:41:
36:0b:8e:a1:89:55:a8:30:14:84:4d:cf:f5:f7:c3:f5:0a:66:
b1:7c:8a:9f:92:02:82:35:ef:02:9e:7f:40:db:4c:a2:b2:da:
23:4a:8e:b4:81:73:7f:e2:ad:e7:d8:55:83:28:4a:60:17:92:
2c:b1:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:54 2025 by rpki-client