Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7D2C25AF45C11EFA463A78F762E951A.roa
File: D7D2C25AF45C11EFA463A78F762E951A.roa (raw, json)
Hash identifier: +rz8AvmGbvwkSHPVrxvcLHLQ6q2lmI5MZKF2KkbCg/g=
Subject key identifier: 90:83:93:2E:E6:3A:E2:FC:3B:41:0F:D7:4D:71:36:E0:9E:3B:B4:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7D2C25AF45C11EFA463A78F762E951A.roa
Signing time: Wed 26 Feb 2025 16:15:07 +0000
ROA not before: Wed 26 Feb 2025 16:15:02 +0000
ROA not after: Thu 19 Feb 2026 16:15:02 +0000
asID: 984
IP address blocks: 156.252.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79009 (0x134a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:15:02 2025 GMT
Not After : Feb 19 16:15:02 2026 GMT
Subject: CN=67bf3e0b-0213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:15:57:02:79:b4:49:e2:88:03:4f:4b:d8:
fe:e7:35:69:d4:94:00:af:c2:96:1c:f9:67:2c:35:
a9:ed:fd:65:8f:94:64:4c:52:05:72:32:8d:e4:1f:
6d:2e:47:84:d3:89:d1:80:bc:9e:2b:2c:4d:07:4c:
52:84:72:9a:f9:40:fb:ef:5f:91:41:c2:e8:2f:9e:
f3:72:cf:f0:35:fb:13:05:42:9b:bb:9b:af:e7:e7:
4e:04:19:3a:34:64:27:65:b7:c6:9a:b8:50:84:2a:
9f:98:91:61:71:5a:de:3f:a6:fd:be:66:d2:d9:c2:
cc:1f:08:7a:e4:d5:7b:e9:4e:9e:0e:3c:d3:d3:08:
f7:56:24:54:24:16:ee:ea:2c:3b:41:69:ec:48:a1:
5e:71:af:4d:a0:0b:e6:1e:1f:a6:66:ba:0a:86:d6:
57:e2:6e:4a:e8:7b:fc:d2:df:05:42:19:e0:9f:07:
78:85:15:9a:87:e7:b2:86:41:8e:84:52:1e:0d:a7:
93:5b:85:83:92:03:de:12:89:fb:47:eb:3b:78:64:
95:db:a9:bb:a6:98:2f:e8:74:38:f1:1b:20:93:51:
de:f2:01:7d:a3:79:c1:f2:bd:8b:54:39:7f:87:2a:
ee:cc:eb:58:a4:f6:3e:c9:79:39:42:9a:f7:b1:c6:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:83:93:2E:E6:3A:E2:FC:3B:41:0F:D7:4D:71:36:E0:9E:3B:B4:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7D2C25AF45C11EFA463A78F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.233.0/24
Signature Algorithm: sha256WithRSAEncryption
77:3b:e2:9b:4e:ae:1e:48:d9:f6:c2:dc:f5:bc:60:43:da:77:
d4:82:0f:db:aa:c7:57:1e:6a:45:9e:7f:09:a2:e6:0a:86:78:
03:ee:df:64:75:41:8a:e0:9b:c7:ff:eb:45:f7:de:4d:31:8d:
aa:e0:b0:a2:f7:d6:c8:4f:cf:67:8a:60:57:3b:2f:26:70:0c:
d8:b4:25:74:b8:46:38:a0:82:f3:ad:99:a3:77:42:95:ca:ca:
c0:e5:08:01:d4:04:2f:b8:d6:30:d5:5c:80:90:81:e5:f5:99:
4a:40:4b:57:ae:43:05:37:57:6a:ad:e9:bd:af:72:c1:a4:80:
7d:3a:49:7e:e7:c8:32:7b:bf:0b:ab:1c:71:5b:18:70:57:3e:
ef:b1:82:84:4c:2c:9e:9e:54:5d:8d:1e:94:7e:5b:de:c5:a2:
be:64:b5:cd:fe:53:fd:14:cd:b5:e4:f9:8d:14:ac:5f:6e:c7:
46:6b:7a:82:85:59:3c:6a:7b:ca:70:cf:86:1a:e6:9d:7d:74:
09:7a:76:e9:4c:49:6d:df:f8:92:c7:30:49:ef:c6:6d:26:6a:
e0:20:a1:dc:9c:64:b7:40:60:0a:d8:22:01:50:93:6a:c7:0f:
6b:7c:89:9e:19:ea:c9:be:9e:b3:2a:e9:f7:df:62:fb:25:5f:
44:74:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:53 2025 by rpki-client