Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDED0A92F44411EFB141A668762E951A.roa
File: CDED0A92F44411EFB141A668762E951A.roa (raw, json)
Hash identifier: DZhQ4RD6YEEyA8Cdk7gqbntBKRiDwC17WT98rotHi84=
Subject key identifier: 94:1B:79:32:17:DD:A9:24:39:BA:00:3F:6F:42:84:BF:62:6E:AF:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013317
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDED0A92F44411EFB141A668762E951A.roa
Signing time: Wed 26 Feb 2025 13:23:02 +0000
ROA not before: Wed 26 Feb 2025 13:22:58 +0000
ROA not after: Thu 19 Feb 2026 13:22:58 +0000
asID: 984
IP address blocks: 156.231.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78615 (0x13317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:22:58 2025 GMT
Not After : Feb 19 13:22:58 2026 GMT
Subject: CN=67bf15b6-994b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:34:62:d4:81:80:2c:81:46:82:12:8d:94:
9f:e6:48:2f:91:b9:69:f3:eb:f0:36:f9:c0:64:09:
4b:bb:7f:97:16:be:ca:0b:0a:dd:a8:70:c1:e5:94:
25:33:ec:c9:d1:57:bf:d2:36:b2:40:43:66:46:e7:
ce:ff:a7:d4:62:a3:68:1c:02:42:42:2c:7e:a6:72:
54:9c:92:c5:7e:2f:82:d9:08:48:29:3d:b7:35:5d:
6f:76:a0:0d:4f:54:9f:83:05:d3:3f:a2:03:8b:af:
87:b8:16:5b:cd:5b:94:7d:fe:6f:e9:24:94:9e:b6:
48:b6:37:27:b4:54:06:0d:58:9e:b6:ec:8e:4c:8b:
a2:c6:8b:f3:5e:fd:06:5a:4c:b2:dc:df:25:09:dc:
d1:64:15:c7:e0:1f:1a:50:80:24:c7:6e:10:d4:03:
0a:f6:6c:c7:a7:88:1e:be:6d:09:b2:c9:ac:99:02:
4e:71:8b:12:4f:d9:cc:ea:81:af:db:b5:f0:d9:2a:
11:e8:34:fb:6c:83:cb:72:d4:6b:12:4a:27:15:5c:
8b:c8:9e:10:c7:5a:36:a1:ca:6c:07:d7:4d:6f:20:
0a:3a:01:8b:e9:4c:17:17:a3:bd:32:c1:5d:f4:4d:
38:7c:0d:b5:bc:a8:73:dc:46:b2:fb:2a:b8:fd:f0:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1B:79:32:17:DD:A9:24:39:BA:00:3F:6F:42:84:BF:62:6E:AF:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDED0A92F44411EFB141A668762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:cf:32:28:c0:7b:da:84:2f:e9:00:61:67:dc:85:1c:94:d2:
06:58:57:db:7d:6d:c8:30:7c:8c:90:e9:7d:76:e9:c4:f6:e1:
93:d2:b2:89:aa:df:92:ad:7b:fc:cb:06:34:d3:c0:b3:33:47:
dd:43:a6:b3:bf:09:4c:df:db:b8:2c:c1:1c:02:1b:e7:d4:cd:
0c:6b:1f:37:85:a1:e5:57:ce:ec:bc:6a:41:a2:e7:f1:b6:9e:
b4:fd:ce:14:c2:e3:d4:0b:1f:33:1c:29:01:6f:ea:df:c8:c8:
bb:80:68:ca:f4:57:89:3c:be:14:3b:d4:56:83:2c:db:38:80:
58:c9:16:d1:01:8b:b1:5d:ea:d0:33:c9:f1:90:3e:52:07:16:
95:4a:ca:39:a5:22:f6:68:79:ef:e0:6c:ff:4a:fe:b6:33:0e:
c4:4a:d2:9e:3a:97:f1:a9:cd:95:8c:2b:65:ad:cf:6e:98:be:
26:6a:4a:e9:32:3a:31:de:0b:91:0a:8e:64:df:7b:76:6b:c5:
d6:0f:f0:55:4f:ac:32:12:55:a7:8f:8e:ec:34:58:99:a3:c8:
06:be:0f:4d:a6:f2:b8:59:f0:ed:94:c4:47:8a:a4:89:4f:23:
50:15:60:d1:c0:31:7b:21:16:d6:f3:b2:66:c6:7e:23:9f:81:
46:54:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:22 2025 by rpki-client