Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9F88970F44C11EFBB52969F762E951A.roa
File: E9F88970F44C11EFBB52969F762E951A.roa (raw, json)
Hash identifier: zjAgSh/mA8S6vyUqRGL0tiBMUCj8Rv8d9WcbJmtlpEk=
Subject key identifier: 2E:8B:53:D0:9A:CD:BE:C2:76:B3:30:97:52:A6:E9:A2:C0:6A:43:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0133B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9F88970F44C11EFBB52969F762E951A.roa
Signing time: Wed 26 Feb 2025 14:21:05 +0000
ROA not before: Wed 26 Feb 2025 14:21:01 +0000
ROA not after: Thu 19 Feb 2026 14:21:01 +0000
asID: 984
IP address blocks: 156.231.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78769 (0x133b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:21:01 2025 GMT
Not After : Feb 19 14:21:01 2026 GMT
Subject: CN=67bf2351-d719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:04:90:64:c3:4e:37:4e:f6:e0:d2:a7:35:
af:6b:55:12:d8:c2:98:69:f2:64:13:cd:53:03:6a:
2d:ec:3b:da:ac:4a:ac:4b:a2:da:ae:ea:61:c3:de:
f4:52:8a:ee:8c:99:6b:43:04:34:ac:2b:29:1c:e8:
b0:67:9b:c7:8c:a9:b7:d2:b6:e4:3d:68:df:90:92:
85:90:7e:53:87:a4:d1:5f:46:0a:a5:2b:ca:1c:c0:
d3:21:7c:11:de:16:9f:07:83:eb:05:c0:50:fe:06:
e0:28:e3:4b:1e:a4:f0:b2:79:2f:96:b0:46:29:e9:
63:86:d2:87:05:75:f8:85:9e:03:99:e2:ca:e4:fa:
02:12:9c:f1:b5:b5:b6:ad:e3:9a:aa:cf:d6:f2:8c:
af:de:55:78:37:1d:99:ff:05:93:79:ab:e3:a4:97:
ef:d8:00:11:a4:a5:a2:63:ca:2e:a5:b9:00:ed:f1:
ae:88:28:c3:58:45:9b:2a:31:47:c2:cd:1f:c0:4b:
96:9a:58:85:1f:b5:76:08:c5:df:57:18:46:2d:24:
36:1b:45:6c:70:2a:12:32:37:e7:b7:f6:ec:27:df:
a6:39:20:88:fe:dc:22:37:ef:0f:14:97:0a:6b:89:
fd:0e:f1:e5:dd:73:8d:2c:95:23:ca:73:df:29:04:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:53:D0:9A:CD:BE:C2:76:B3:30:97:52:A6:E9:A2:C0:6A:43:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9F88970F44C11EFBB52969F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:54:05:45:c3:aa:b8:2b:df:b8:27:20:fc:ee:b1:88:8b:3a:
2e:f4:a3:ed:ea:d4:ef:b0:36:12:58:91:cc:25:64:75:0b:8c:
1a:94:bb:2a:d0:72:fa:cd:b0:c9:fa:3f:18:ad:0f:1f:ff:11:
2b:c9:b4:cc:88:9b:d7:b7:b3:35:1a:95:2b:da:13:91:7b:97:
70:1f:3a:f2:b3:a0:76:5d:8a:ef:53:05:e0:1a:22:30:8c:ac:
ff:bd:fe:7c:32:0b:60:e5:c0:9a:af:0f:d7:58:b5:9d:eb:15:
84:0a:32:2c:1a:29:b1:4d:35:52:ac:f5:10:5b:e2:a5:47:78:
d7:68:9b:f2:64:a9:19:53:82:33:c0:72:e9:28:00:06:2e:06:
65:df:9d:dd:bb:17:da:13:1f:6d:f2:d9:fc:6a:23:1c:24:4f:
0e:d5:aa:2a:59:77:c3:e8:5b:68:8c:0e:ec:44:cd:e0:5b:24:
56:47:f3:23:e4:f5:c8:4a:c3:34:99:12:fc:6c:6a:ff:d0:28:
69:59:de:60:c6:83:c1:80:96:5f:e0:a3:09:ee:a3:dd:78:7f:
ce:83:4d:64:25:c0:65:36:e5:13:d6:2f:02:df:dc:37:9c:10:
88:dd:2e:30:15:a2:0f:8c:21:9d:df:8d:af:a3:fb:d0:a5:55:
3c:c0:cf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:57 2025 by rpki-client