Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6D6809AF45A11EF9B64B881762E951A.roa
File: E6D6809AF45A11EF9B64B881762E951A.roa (raw, json)
Hash identifier: zBoqgxon4B/4hMF1hc1hBG+0l8ZGy2QNDu8gztYDyFQ=
Subject key identifier: 07:58:FA:68:4E:64:7B:54:74:43:76:23:0C:48:BB:19:E7:71:F1:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013486
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6D6809AF45A11EF9B64B881762E951A.roa
Signing time: Wed 26 Feb 2025 16:01:13 +0000
ROA not before: Wed 26 Feb 2025 16:00:54 +0000
ROA not after: Thu 19 Feb 2026 16:00:54 +0000
asID: 984
IP address blocks: 156.252.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78982 (0x13486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:00:54 2025 GMT
Not After : Feb 19 16:00:54 2026 GMT
Subject: CN=67bf3ac9-5aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:df:78:a1:6a:a9:46:c2:f9:9b:fa:0f:39:
0e:49:19:5b:8c:d3:36:a6:25:d0:76:6e:22:46:4e:
0f:2c:7a:c4:41:c9:c2:cf:94:2b:f0:42:40:55:55:
90:47:9d:8f:b9:ef:a6:fd:67:c3:af:af:28:ac:af:
5f:25:a5:a4:93:89:d4:81:e6:98:25:77:ce:6e:ea:
7d:38:e3:e8:5b:43:68:a9:e4:d9:e8:02:7b:a2:d2:
8a:00:0b:3f:01:af:3c:82:6b:eb:4f:df:03:3f:87:
f5:a7:56:6a:d2:63:72:ef:36:46:87:27:51:1b:ee:
70:b0:5b:4b:18:ab:14:61:32:48:94:7a:27:2d:34:
05:16:b1:58:ed:94:ee:a7:b0:7c:4a:a4:c2:67:5a:
7c:5e:4c:97:2f:fb:04:05:93:54:3e:1c:94:fc:3a:
c7:01:e6:e8:db:74:04:2c:15:f6:98:3f:a2:f4:80:
14:b0:53:e9:26:39:3a:5b:53:9c:21:78:bf:ae:6a:
25:46:a8:e8:fb:af:eb:e9:e7:31:45:b4:48:03:a6:
83:d1:50:4c:d0:fa:15:db:1a:94:57:5c:14:3a:3a:
1c:05:d0:9f:7e:79:e7:35:7d:0b:94:15:b7:d0:03:
29:e6:41:93:e3:0b:55:7f:c2:08:9d:3d:3f:d9:24:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:FA:68:4E:64:7B:54:74:43:76:23:0C:48:BB:19:E7:71:F1:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6D6809AF45A11EF9B64B881762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.226.0/24
Signature Algorithm: sha256WithRSAEncryption
02:cb:a8:e9:f9:29:1a:27:76:43:f8:eb:21:1e:62:42:db:1e:
f2:63:13:28:2c:b2:11:38:1f:cc:2e:66:54:cb:35:10:04:36:
71:2d:1a:11:e6:05:8a:af:c2:3c:25:fa:e7:9d:20:61:dc:9c:
c1:27:bc:72:d0:21:a5:ff:c0:a4:a2:02:8a:bc:a1:73:9d:67:
88:7e:7b:79:01:6e:49:40:47:36:fb:2e:87:91:15:05:52:40:
0b:cc:34:aa:f7:84:62:97:06:aa:2d:23:ee:74:33:7c:db:ec:
ec:fb:67:30:b7:e9:87:1d:07:12:20:42:c1:3a:29:e7:84:53:
e2:83:6c:87:98:ca:59:ea:8e:2d:82:29:b2:f5:a1:24:aa:4d:
4d:86:8c:68:e3:88:75:04:15:43:e0:15:a5:04:e4:8c:06:34:
27:38:9d:58:ad:57:6d:c6:c5:35:73:29:1f:80:99:a6:79:ec:
3d:38:19:ee:d4:29:be:35:01:f6:1b:81:13:5e:c5:50:f5:67:
bf:ec:d5:5b:5a:5b:47:04:44:d2:02:84:8c:d3:fe:30:c9:6a:
15:21:d1:0b:16:0e:d6:a1:fa:6e:1a:25:a8:70:9f:37:49:75:
30:ec:71:4f:0f:cc:43:6a:69:02:e9:1c:56:e8:fc:5b:d2:9c:
31:56:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:02 2025 by rpki-client