Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7B97FE6F44011EF934C5E4B762E951A.roa
File: D7B97FE6F44011EF934C5E4B762E951A.roa (raw, json)
Hash identifier: KFi/P/1DpINVEj9UH6/GrJC10AqaFeldyybnfOUdwN8=
Subject key identifier: 82:F4:7A:7A:E1:7D:2F:29:8D:FB:69:B0:67:B1:71:E5:3C:FD:1D:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0132C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7B97FE6F44011EF934C5E4B762E951A.roa
Signing time: Wed 26 Feb 2025 12:54:41 +0000
ROA not before: Wed 26 Feb 2025 12:54:37 +0000
ROA not after: Thu 19 Feb 2026 12:54:37 +0000
asID: 984
IP address blocks: 156.245.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78537 (0x132c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:54:37 2025 GMT
Not After : Feb 19 12:54:37 2026 GMT
Subject: CN=67bf0f10-8424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:ee:2c:74:06:d6:2f:3c:32:08:41:93:c8:
ba:18:c1:20:87:e9:9b:a5:5f:f3:5f:ef:73:3d:a2:
18:e4:7a:14:f8:e2:3a:f9:0a:19:f3:fd:67:83:81:
0a:b0:7e:97:68:a4:e2:7c:89:66:88:a9:81:51:8e:
be:f7:a7:47:cc:97:25:08:5a:37:65:fe:96:9e:71:
09:79:48:48:e5:63:2e:f4:c5:4e:74:de:8a:4b:ea:
25:00:cb:7a:65:fc:01:69:47:ec:b7:59:b6:da:c8:
cd:93:54:f8:d4:97:83:bc:c0:89:f3:8a:c0:4d:75:
33:12:4e:a1:d9:9a:e6:ee:69:da:ec:93:48:d4:56:
b2:29:0f:a9:c7:f6:05:86:c2:a7:80:11:92:8a:f4:
df:a2:47:0f:6c:45:aa:56:79:de:0f:b1:88:43:35:
36:a7:7e:67:32:1c:46:ff:a9:cb:de:3e:2b:0f:b0:
f3:2a:cb:48:8a:75:93:82:8d:83:4f:f6:59:b5:dc:
2b:28:e2:9e:9a:f8:b6:8e:66:c5:ff:a2:cf:a1:72:
17:88:82:4f:e7:cc:80:64:45:90:8c:87:1e:4b:33:
a0:3b:d9:dc:57:6f:db:74:eb:30:ff:fe:c7:ad:18:
04:8f:36:e5:bc:bc:96:c8:54:35:1d:60:c7:ba:8f:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F4:7A:7A:E1:7D:2F:29:8D:FB:69:B0:67:B1:71:E5:3C:FD:1D:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7B97FE6F44011EF934C5E4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.231.0/24
Signature Algorithm: sha256WithRSAEncryption
70:2c:82:e0:b4:92:d8:73:02:07:7c:47:9c:ae:cb:0f:01:57:
be:c9:e4:2f:49:f8:1d:e6:13:3b:da:d9:49:bf:ca:ed:6b:58:
88:31:bd:4c:f3:97:9b:9e:37:91:4f:a4:75:3e:73:8b:20:b6:
70:a7:5c:04:3b:b4:9b:99:ae:b7:b4:37:df:97:d1:94:e7:cf:
15:85:31:3f:7b:c6:fc:2c:3f:48:38:29:ed:a9:22:e1:52:72:
e8:3b:39:bd:94:53:aa:16:6d:c1:7b:1e:8a:f2:31:09:7f:70:
62:e7:d5:9b:d1:28:79:c6:9a:db:64:47:5f:71:8f:54:95:8e:
ea:3e:12:b4:02:5c:18:de:5b:39:15:8c:2c:c0:25:cc:e8:6a:
a5:f4:04:ba:86:2a:37:bc:df:ff:7c:e8:b8:7d:58:d6:b1:e8:
60:6c:78:02:e7:c1:a5:3c:f0:29:37:84:0d:bc:fa:dc:e2:2b:
30:b2:66:2f:48:f7:2f:27:61:0b:ed:59:6f:25:35:2a:be:2c:
95:f6:3f:5b:18:99:0a:c0:6a:0f:d8:88:53:4b:2d:18:2b:25:
82:d8:4e:51:1b:fd:bb:e5:c8:0a:18:9e:9c:4f:f3:ef:23:fc:
20:02:59:c4:69:90:4d:dd:da:f0:d5:5e:b0:98:3e:3a:eb:9d:
c8:4e:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:11 2025 by rpki-client