Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E62C3678F4A311EF990F0D75762E951A.roa
File: E62C3678F4A311EF990F0D75762E951A.roa (raw, json)
Hash identifier: hVsFh8eSJxxA+nKzqF2JSXsP583qMXgsshQ6i3f9o/w=
Subject key identifier: 83:C3:91:9C:7E:30:1E:74:6B:99:22:0C:5B:8C:06:6B:D4:A7:26:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013889
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E62C3678F4A311EF990F0D75762E951A.roa
Signing time: Thu 27 Feb 2025 00:43:45 +0000
ROA not before: Thu 27 Feb 2025 00:00:41 +0000
ROA not after: Thu 19 Feb 2026 00:00:41 +0000
asID: 984
IP address blocks: 156.232.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80009 (0x13889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:41 2025 GMT
Not After : Feb 19 00:00:41 2026 GMT
Subject: CN=67bfb541-2e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7a:24:f1:93:d1:a4:36:ed:57:cd:f9:f9:62:
83:e6:1f:16:73:9b:db:73:a6:f3:fd:73:53:6b:75:
89:f0:d8:e0:e9:88:2f:c8:2a:cc:88:99:ee:07:2a:
3d:dc:38:1a:d7:5e:06:5a:d3:e9:33:0e:09:fa:99:
96:c1:ba:6b:9c:bd:36:e6:52:0b:61:ac:09:3c:02:
1e:4d:26:57:a1:8b:3a:6f:e9:7c:39:77:d0:01:b8:
17:0c:43:01:e1:6f:28:8f:a8:68:51:f4:ca:12:de:
b0:0c:9f:92:df:6a:21:1d:1c:08:39:d1:a1:ed:25:
49:bb:3b:db:d3:ae:84:06:99:65:e0:84:e3:4c:33:
73:ad:e9:19:13:27:02:22:5b:88:f4:b8:21:f8:9f:
d4:6b:04:ca:93:15:de:41:4b:d2:c3:18:b0:9c:5a:
a1:0b:34:62:10:ed:2e:c1:91:12:f7:3f:22:a9:4d:
c1:a6:18:68:75:96:65:ae:e8:04:b9:c0:1d:18:5f:
14:ac:83:0d:8f:de:2c:e7:cc:21:37:be:15:03:aa:
89:7a:21:fe:86:a6:3d:b2:60:f3:a0:a9:86:6c:11:
6a:ea:9c:68:cf:11:5c:80:e6:57:90:59:a0:f1:4e:
ae:45:a5:df:ce:b8:13:66:ca:d8:64:e8:3b:df:81:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:91:9C:7E:30:1E:74:6B:99:22:0C:5B:8C:06:6B:D4:A7:26:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E62C3678F4A311EF990F0D75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.74.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ff:04:87:92:ad:2d:bd:1a:71:ca:31:75:0f:1a:68:74:de:
bf:dd:2f:93:03:c9:aa:b7:3b:02:59:45:d7:46:a2:a5:b1:0a:
a2:c3:9b:1c:1d:33:d9:43:0f:00:23:77:55:c9:a0:14:92:89:
cd:8a:8a:45:3b:fc:28:34:2a:55:23:0b:fc:e9:83:a3:05:b6:
3f:cb:21:27:b4:4a:cd:0f:1f:ac:a3:e3:c1:17:0d:24:93:02:
62:5f:87:bf:9e:0e:cf:0f:61:97:26:53:e7:45:34:7d:57:79:
38:7b:aa:36:f1:2a:10:60:19:06:f9:c6:76:3c:f7:ec:1f:60:
21:4a:96:06:da:ca:66:28:93:3a:23:8e:53:be:a9:12:f5:62:
69:d8:9c:1d:ab:5d:38:a0:59:99:2e:be:a3:d8:1c:2d:07:15:
9b:12:a3:40:91:93:95:83:a1:f2:53:22:f3:69:82:87:5d:29:
d8:a3:5d:de:6c:81:28:49:ce:08:ca:48:16:45:41:ba:3a:01:
57:31:45:9c:d4:33:06:00:83:ed:66:35:19:11:cf:1b:d2:2b:
93:a7:b5:56:2f:7d:ad:21:5f:43:d7:74:a8:ce:08:cf:10:60:
a6:2b:9a:65:b5:a2:26:0f:5b:34:4f:86:c7:9f:35:9d:82:a1:
7f:3b:47:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:35 2025 by rpki-client