Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDB8F304F47911EFB4209F5A762E951A.roa
File: BDB8F304F47911EFB4209F5A762E951A.roa (raw, json)
Hash identifier: X+KnHlTcdvcYDW6AsIcUuC2geXEPGijHKzPuQ7/zDRY=
Subject key identifier: 17:F3:CD:38:B0:29:C6:86:50:87:C3:67:92:18:51:A4:0F:C4:82:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013729
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDB8F304F47911EFB4209F5A762E951A.roa
Signing time: Wed 26 Feb 2025 19:41:58 +0000
ROA not before: Wed 26 Feb 2025 19:41:55 +0000
ROA not after: Thu 19 Feb 2026 19:41:55 +0000
asID: 984
IP address blocks: 156.247.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79657 (0x13729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:41:55 2025 GMT
Not After : Feb 19 19:41:55 2026 GMT
Subject: CN=67bf6e86-1541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:fb:b9:76:81:ff:1c:8d:7b:95:12:c9:41:
8b:56:d4:ef:f6:66:ec:2b:2b:6c:71:ee:be:a3:fc:
68:ac:0d:9f:0d:15:e3:9f:82:54:44:6b:ed:03:38:
78:e9:4f:ef:d2:8e:08:0c:55:59:b2:18:c8:8c:f7:
14:a9:83:ba:b2:b5:1a:89:ed:1c:2b:d8:7d:0f:15:
ee:51:3d:7e:c8:90:de:a0:76:5a:67:db:a4:81:31:
d8:5d:b0:a7:c6:8a:57:a1:4e:f5:5f:55:4d:78:ae:
e7:8d:3e:81:0d:5d:3c:99:09:ff:60:63:10:11:de:
66:c2:32:67:d4:e6:09:21:39:d2:75:96:02:a6:90:
c1:f4:76:82:fe:84:f9:b7:d4:ea:e9:e0:70:81:ee:
a7:ff:11:74:7c:e9:06:8e:78:75:9b:2f:f7:3c:4f:
2b:cf:d3:cf:dc:44:4c:27:b9:f0:e9:28:57:19:37:
b4:33:3e:ac:35:cb:77:ca:c5:1d:99:e2:0b:b5:39:
fa:6d:43:0a:5c:c3:7b:8e:cd:cc:83:eb:e8:fc:0f:
ef:c0:ff:9e:eb:cb:63:e5:7d:0e:ca:cc:85:77:e8:
71:8b:5c:17:60:a0:41:c2:2e:24:b0:fa:63:69:1d:
fd:ca:32:63:55:48:0d:a8:2e:9e:8a:a8:3e:fb:39:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:CD:38:B0:29:C6:86:50:87:C3:67:92:18:51:A4:0F:C4:82:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDB8F304F47911EFB4209F5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1f:8c:62:b0:d4:01:0d:a4:fb:c3:01:88:bc:bb:39:37:1a:
85:51:4f:03:77:20:8a:67:64:ea:ef:5a:30:1f:29:6a:24:17:
71:8f:18:da:a4:e3:57:f2:71:bf:7d:01:f5:ff:e1:01:4b:49:
e4:6e:d0:3e:75:31:af:d0:23:e4:2e:88:d2:fd:c8:29:bc:19:
74:09:4d:ac:aa:97:79:d8:dc:d0:73:5c:c6:b9:02:20:26:21:
1f:69:fb:bb:fa:aa:e1:ad:32:ad:58:54:de:bc:a8:4e:a6:7e:
ce:b6:9c:f0:be:14:20:8a:3a:8a:2c:ed:cb:37:43:f3:13:2b:
1c:92:40:b9:5b:34:43:89:e0:74:93:52:2c:db:0f:0a:a8:b9:
97:da:38:c3:3e:d1:55:a3:4f:a3:cd:e6:4d:f8:e9:9f:f1:98:
d7:f7:a9:45:33:cf:d0:df:51:f0:5c:2b:ba:6a:01:ae:cf:ba:
d8:f9:38:f7:14:c5:8a:15:d7:32:f0:b7:3c:c5:2a:c7:ed:5f:
d3:b6:50:2d:4c:6d:d5:1f:43:01:5f:72:ae:78:96:2f:96:b3:
13:3a:aa:9e:ad:9e:20:40:45:f2:0d:9b:d3:90:93:d3:a4:30:
ea:56:31:44:3f:7e:9c:9e:ef:f1:a0:60:ad:c8:7e:35:90:c5:
ac:14:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:03 2025 by rpki-client