Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE3C3FBCF42F11EF95ED2555762E951A.roa
File: EE3C3FBCF42F11EF95ED2555762E951A.roa (raw, json)
Hash identifier: oHLx6gClDU2uJ890YyrbVfDOH6nqT8U8125FFFdfC2s=
Subject key identifier: 47:60:C0:C6:F8:DD:F1:E8:F1:BE:C0:B9:E8:DD:48:A4:2E:27:0A:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013175
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE3C3FBCF42F11EF95ED2555762E951A.roa
Signing time: Wed 26 Feb 2025 10:53:37 +0000
ROA not before: Wed 26 Feb 2025 10:53:33 +0000
ROA not after: Thu 19 Feb 2026 10:53:33 +0000
asID: 984
IP address blocks: 156.230.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78197 (0x13175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:53:33 2025 GMT
Not After : Feb 19 10:53:33 2026 GMT
Subject: CN=67bef2b1-2657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:4e:41:a7:fe:be:87:89:fa:c2:c2:ed:fc:
95:31:5c:87:b9:7b:f0:81:f8:f6:5c:7e:b2:0a:b2:
b5:65:d0:69:9f:d0:d4:28:25:65:97:15:13:55:f1:
cf:8f:46:19:07:fa:e3:d0:f1:7b:a8:2e:f3:d7:65:
64:5d:aa:49:1d:2c:2d:3c:ed:68:02:b6:bf:28:44:
75:c3:4f:6f:b1:37:54:d9:6e:5b:ce:41:39:98:75:
88:51:72:ad:d2:9f:60:b6:3a:29:20:61:04:99:81:
45:92:90:28:9d:b3:f4:95:2e:6a:de:44:eb:4a:90:
dc:9a:e4:88:91:ff:ad:71:b2:ea:45:cb:ed:e9:4a:
a8:9d:71:3d:f2:d7:2b:91:23:51:e6:35:3c:9d:86:
68:2a:bf:f8:a2:4f:0d:72:d9:c7:a7:98:6a:d6:6f:
5d:ff:f0:04:27:df:a3:14:d1:2a:88:20:b8:c0:3c:
27:99:0f:10:83:6c:f3:ef:01:31:c4:95:fa:5d:85:
2c:84:53:4e:ac:27:6d:cf:4b:be:b8:bc:2f:9b:01:
72:c6:4d:32:c4:64:69:23:1a:e5:a0:26:86:a3:ee:
b5:d1:20:2d:d3:37:6f:0e:fd:b8:ed:be:c5:a7:04:
17:31:97:93:70:4b:e9:fc:36:31:b9:c9:e3:51:91:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:C0:C6:F8:DD:F1:E8:F1:BE:C0:B9:E8:DD:48:A4:2E:27:0A:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE3C3FBCF42F11EF95ED2555762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.178.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:21:0a:99:06:43:d2:04:3a:e7:1a:aa:06:34:77:e5:78:78:
b5:06:f7:60:a0:b0:85:4a:b5:70:e9:ef:8a:70:83:9c:04:af:
da:2d:9e:e6:34:e8:52:27:b1:f5:d4:6a:b1:c8:c6:8d:bf:31:
54:47:56:ed:92:ed:5e:8d:38:27:b6:0f:23:1f:7b:76:1d:d2:
76:63:f9:98:95:64:c0:2e:16:c7:69:28:03:3c:53:6f:ca:7b:
03:94:ce:13:a5:92:25:33:c0:38:a4:01:91:70:69:34:11:4a:
d6:2c:5a:ac:b5:c6:29:ae:ae:c9:ca:2f:b9:cf:9d:79:27:54:
0c:fd:57:f5:56:4b:3d:56:ce:f9:1a:ac:5e:ee:1b:42:7b:2d:
6a:49:26:47:c0:79:c8:10:56:b0:8c:5f:06:0b:25:0b:b6:b3:
53:5d:d1:3a:42:41:6b:cc:16:35:1b:3a:19:b6:54:85:ac:d8:
7b:6c:b1:1d:e0:fe:ed:bc:ad:12:6b:73:52:80:ca:31:86:e5:
0b:f5:52:70:8c:4a:e1:39:5b:5a:dc:da:51:9a:2b:b2:d4:3f:
ce:df:a5:94:b3:e1:b6:c0:8c:15:64:3b:12:c5:f2:0c:f3:fa:
8a:51:ad:aa:ee:24:e0:13:89:95:03:28:0d:e3:d0:e2:d3:48:
7a:dc:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:14 2025 by rpki-client