Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D77E835EF45F11EFA1C26AA4762E951A.roa
File: D77E835EF45F11EFA1C26AA4762E951A.roa (raw, json)
Hash identifier: Lqn9lj+xCmkdzlFg2GsA2RKGOTgPYFwDfg3kbC0RzeY=
Subject key identifier: C5:AB:F5:9B:FC:22:8F:5D:86:44:88:A7:79:A7:00:0C:8D:52:BF:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D77E835EF45F11EFA1C26AA4762E951A.roa
Signing time: Wed 26 Feb 2025 16:36:35 +0000
ROA not before: Wed 26 Feb 2025 16:36:31 +0000
ROA not after: Thu 19 Feb 2026 16:36:31 +0000
asID: 984
IP address blocks: 156.252.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79069 (0x134dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:36:31 2025 GMT
Not After : Feb 19 16:36:31 2026 GMT
Subject: CN=67bf4313-d86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:92:92:bb:13:56:35:19:5e:c9:3b:f7:db:
46:fb:73:83:f3:9c:ba:f3:15:26:3d:7b:56:54:e7:
04:9d:7f:50:fb:63:f6:4d:66:18:00:7d:5a:a6:83:
82:1b:a0:58:5c:6d:ea:9e:63:66:d7:69:e6:ae:c7:
f9:fd:84:d3:a7:49:09:68:1c:57:1d:04:86:18:b5:
be:5f:4d:2f:e0:d5:a6:49:35:ad:95:65:02:a3:2d:
02:dd:2d:13:f1:ec:0b:26:12:1e:f2:b3:23:06:80:
9f:ec:9d:50:fa:fd:15:17:0e:7a:4d:e2:2f:78:80:
a4:46:62:4e:59:a5:e8:76:22:33:31:c4:08:8e:b1:
29:e2:82:da:bc:c5:41:84:e2:1b:3b:29:32:d4:97:
be:72:03:fd:e1:7f:ef:03:33:50:86:be:8d:a0:32:
87:60:f7:f5:10:17:91:04:9c:d9:90:5c:b1:d1:c2:
5c:a4:1a:d8:0b:d9:a5:15:8a:e7:5d:f0:2f:0c:92:
bf:85:82:13:4d:91:f5:c7:5a:9d:85:8b:21:ab:92:
93:75:c5:d0:41:84:ee:5c:c0:16:cf:38:c9:0f:06:
b1:6a:eb:7e:a8:7e:cf:6f:06:b8:90:3c:e9:0a:54:
8d:44:0a:a6:98:05:c8:8a:1c:6b:ae:f9:6a:39:fa:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AB:F5:9B:FC:22:8F:5D:86:44:88:A7:79:A7:00:0C:8D:52:BF:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D77E835EF45F11EFA1C26AA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6d:cd:61:61:06:b6:0c:9d:c7:1b:2c:17:9a:05:45:7e:30:
af:21:5b:a6:65:de:43:63:26:cc:be:d0:c9:f5:45:b1:cf:3f:
1a:40:d9:05:da:b0:13:26:77:21:32:ce:85:a7:4e:25:3e:0a:
cb:9c:c5:46:61:bd:56:60:e8:b3:bc:11:dc:64:75:ee:81:a3:
57:b1:bc:d6:1d:69:e9:d1:14:b1:28:02:8d:df:9b:66:16:e8:
a8:ba:cb:1a:d1:08:c0:fa:ed:01:77:23:97:b0:53:a7:01:d2:
9f:67:1a:bf:57:31:4b:9a:99:95:5a:29:03:60:31:06:33:fb:
77:bd:fc:8f:ea:e5:0a:b9:91:37:dd:b0:81:3a:b8:51:4f:3a:
93:e9:af:d2:d8:d0:25:1b:26:0f:f0:ad:47:9f:9b:7c:a4:11:
85:69:97:ca:b3:15:09:7f:b9:ac:76:76:47:fe:ba:09:a8:10:
cd:96:81:eb:5b:ed:27:4f:b4:32:54:00:94:c1:61:1b:39:45:
2f:51:8c:07:e2:d5:29:d8:23:92:d8:bc:ae:e7:06:34:9a:d5:
36:0d:52:70:d3:37:32:ee:dc:56:1c:c8:9d:6e:54:94:2c:06:
3b:94:1f:c6:6b:a4:3e:08:1a:3a:44:2c:b2:5a:1d:79:f2:e2:
fc:b7:72:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:06 2025 by rpki-client