Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5474446F43111EF939F0863762E951A.roa
File: D5474446F43111EF939F0863762E951A.roa (raw, json)
Hash identifier: Ws7Y3maibGGF1Sl/PRkF0/7CnEFtFJ6TKU6mSPgzMPQ=
Subject key identifier: E1:7C:BA:1A:20:32:4F:C5:C1:B4:A3:3B:27:29:AD:7A:1B:D3:FC:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01319C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5474446F43111EF939F0863762E951A.roa
Signing time: Wed 26 Feb 2025 11:07:14 +0000
ROA not before: Wed 26 Feb 2025 11:07:11 +0000
ROA not after: Thu 19 Feb 2026 11:07:11 +0000
asID: 984
IP address blocks: 156.230.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78236 (0x1319c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:07:11 2025 GMT
Not After : Feb 19 11:07:11 2026 GMT
Subject: CN=67bef5e2-8367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:65:6d:41:ab:17:d4:bb:c7:84:23:0f:ea:
d9:ff:84:6f:df:d6:95:aa:dd:f3:99:6f:4d:10:13:
e1:93:f9:e6:04:bb:32:ee:f6:fe:4b:d2:7f:d8:b3:
50:90:e2:2e:7a:65:56:d9:05:c4:ad:e8:55:0e:4f:
55:16:c3:b9:a3:65:56:14:7f:7d:f3:91:b8:e0:33:
16:48:b2:c4:cc:d8:1f:7f:40:d8:9a:06:30:c5:a3:
f7:98:c9:ef:b7:d7:fc:15:4e:1f:dc:0b:96:6d:e1:
bd:c7:c5:2b:77:6b:b8:0c:a6:93:34:e5:75:0e:0e:
7d:b1:32:27:66:cc:4c:cc:8e:d2:3f:9f:0f:5b:e3:
15:92:c7:92:c6:75:37:af:81:5d:c4:24:0f:a9:c7:
16:2b:a6:f3:a7:73:ed:a1:5b:1f:38:17:81:e8:a3:
e3:27:d5:1c:c8:28:24:f6:68:1e:c0:0c:ca:9e:ab:
5c:0a:b1:97:ff:ff:38:8c:9b:73:2f:29:01:d3:06:
f1:94:2a:61:b8:b8:7b:ff:c9:e4:6c:f6:14:e7:26:
24:22:61:b6:a3:5b:7f:e4:00:34:40:b0:69:23:b1:
fe:36:71:cf:7a:64:58:e0:f9:de:7f:b8:67:9c:8e:
02:1d:b8:18:62:a9:9f:a7:e1:e1:2f:4b:6b:cf:ba:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7C:BA:1A:20:32:4F:C5:C1:B4:A3:3B:27:29:AD:7A:1B:D3:FC:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5474446F43111EF939F0863762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:6e:b8:74:f6:ed:8e:e9:48:b7:6d:e6:9e:09:1f:b3:7c:e1:
ff:49:fe:fe:83:ae:4d:fb:27:69:57:68:30:54:8f:27:d0:70:
b3:6b:2b:8a:bc:71:d2:61:8b:dd:b9:36:c8:87:62:a9:1f:cf:
c6:6c:c2:26:08:0e:b8:43:65:0b:14:8f:65:44:78:d7:4d:a6:
3d:e0:bd:88:18:cb:49:b9:82:c2:ad:41:0d:09:3c:eb:d7:ef:
b7:c6:09:10:05:a4:8c:a4:5c:4d:27:e5:30:c4:75:bb:8e:9c:
3b:af:5e:b6:7b:34:9e:9c:7d:da:f8:b0:ca:c9:73:08:78:cf:
a2:ca:d7:5f:e1:68:86:7c:a7:53:9e:4f:c7:bc:91:6c:76:a3:
6d:ce:47:fb:b3:48:07:1d:94:0f:f5:1e:ca:73:74:52:c2:9a:
6e:e0:04:47:06:50:36:e2:1d:11:6d:46:a2:b8:e9:b1:fc:6d:
76:fd:95:fc:04:ad:43:9c:ff:8c:2b:e1:c6:67:3f:85:c8:1b:
21:90:b7:5f:8e:f6:9d:e9:1e:9f:6b:5b:fd:92:cd:23:cd:2a:
61:9a:88:2a:ad:4b:b1:6a:79:04:aa:f9:6e:e0:07:50:44:5b:
bc:01:ac:5d:c3:a8:72:b0:0f:11:ce:db:04:e3:27:29:9e:32:
66:15:67:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:59 2025 by rpki-client