Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D113B27CF44C11EFB72E639F762E951A.roa
File: D113B27CF44C11EFB72E639F762E951A.roa (raw, json)
Hash identifier: ZaAa93WAmyJ1c0cpEuKBiKNxtPW3dG+mVoWWOFj9XWw=
Subject key identifier: 39:45:7C:D3:65:0C:67:97:9E:A1:4E:ED:55:CB:DC:2A:30:48:DF:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0133AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D113B27CF44C11EFB72E639F762E951A.roa
Signing time: Wed 26 Feb 2025 14:20:23 +0000
ROA not before: Wed 26 Feb 2025 14:20:20 +0000
ROA not after: Thu 19 Feb 2026 14:20:20 +0000
asID: 984
IP address blocks: 156.252.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78767 (0x133af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:20:20 2025 GMT
Not After : Feb 19 14:20:20 2026 GMT
Subject: CN=67bf2327-2dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c4:af:51:f1:67:85:ab:e2:99:c1:89:bf:ec:
a4:26:1b:40:62:93:7c:2c:54:9e:05:a5:c0:d8:e4:
cf:e5:7f:eb:3b:44:d6:d7:79:c1:2b:db:e5:33:d6:
7d:22:28:1f:76:1c:a7:60:1d:c9:b2:09:10:ed:6d:
81:2f:57:18:f0:d4:38:fa:13:41:00:3b:ec:05:c3:
6c:ef:3b:8b:04:e9:d1:b2:71:24:e9:9b:7e:3c:66:
df:b5:13:ec:92:6e:90:c9:d1:a6:ea:42:e4:ed:e3:
65:e5:77:8a:96:17:71:5a:fd:1b:79:28:d8:9f:70:
47:36:1f:a6:99:66:16:ca:4f:e7:66:4d:34:b7:fd:
8c:95:39:13:bc:11:2d:38:0d:dc:68:bc:b9:a2:40:
81:50:21:43:ae:dd:8f:5e:47:0c:a4:54:ef:28:34:
3a:14:15:4f:6a:0b:be:d9:f9:76:55:ec:09:60:7e:
95:7c:2c:00:1c:f3:db:ea:9b:1e:47:0f:b8:d8:5b:
fa:78:d3:ce:d6:af:e4:a4:37:50:e2:a2:2d:53:5c:
4f:9a:8d:98:62:32:3f:82:a0:5a:10:a9:a5:6a:dc:
58:a4:b9:80:8f:6e:e1:46:86:dc:62:53:60:ad:bd:
a6:0a:4b:d3:78:2b:24:a6:61:7e:45:e4:7e:17:d4:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:45:7C:D3:65:0C:67:97:9E:A1:4E:ED:55:CB:DC:2A:30:48:DF:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D113B27CF44C11EFB72E639F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.189.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b8:f4:dc:ec:b0:0a:58:70:db:de:1b:bd:71:98:9e:ca:af:
92:2d:41:a4:b6:05:05:90:9e:bc:4a:f1:e9:79:2e:b7:90:55:
1f:bd:57:98:2a:ee:85:12:67:d7:62:d4:dc:c6:01:02:a9:3c:
6e:6c:c3:ba:99:d2:54:a4:70:31:6e:c7:3c:cd:02:29:2f:45:
69:fe:55:61:0d:8d:a5:f4:3f:0d:9d:4c:28:d1:66:5d:49:c6:
f5:06:b8:90:b0:c3:fd:6b:7c:5b:c0:6d:e5:c8:55:50:3b:65:
45:ce:92:b6:91:42:64:0e:39:09:7d:0c:e1:36:62:d5:ad:3e:
1a:e7:85:45:db:a4:ad:be:e4:fa:d7:c4:58:6a:d3:39:4b:c5:
24:d9:8b:26:49:0f:c3:dd:8f:84:65:39:e9:1f:d6:3a:49:3c:
3a:f2:9a:76:7d:11:92:14:91:55:df:8a:5e:35:71:a0:09:ac:
d3:71:34:d3:e5:f1:59:59:6d:fc:84:f3:3a:16:91:58:e8:01:
e4:a5:b5:87:73:9d:27:ec:1b:7e:aa:36:ab:cd:c7:27:96:45:
6b:09:51:08:5a:ea:06:c9:cf:0a:95:ae:21:c8:56:c8:9f:d0:
3f:08:55:e9:f7:69:76:ad:ad:1d:d9:cd:dc:2c:3b:55:3c:70:
22:7b:eb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:07 2025 by rpki-client