Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFE15A1CF46811EF963FDD63762E951A.roa
File: EFE15A1CF46811EF963FDD63762E951A.roa (raw, json)
Hash identifier: IZQQtGcw/eK2OOj/V7jPxHQGdRHZEEqHCYZSJfmHtwo=
Subject key identifier: DB:CB:A0:3A:57:00:5B:52:44:76:DA:AD:5F:AC:A4:44:BC:54:81:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFE15A1CF46811EF963FDD63762E951A.roa
Signing time: Wed 26 Feb 2025 17:41:41 +0000
ROA not before: Wed 26 Feb 2025 17:41:37 +0000
ROA not after: Thu 19 Feb 2026 17:41:37 +0000
asID: 984
IP address blocks: 156.228.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79299 (0x135c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:41:37 2025 GMT
Not After : Feb 19 17:41:37 2026 GMT
Subject: CN=67bf5255-f77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ec:c0:83:db:27:0d:02:38:8b:36:03:ac:03:
b6:73:05:5a:52:ff:d1:23:fb:32:cc:94:26:9f:9f:
10:3e:68:fa:d2:37:5b:df:c3:ec:35:09:80:90:b9:
8b:5b:11:98:40:b2:14:6a:e3:9a:20:5f:67:ef:a8:
7b:ac:62:87:70:cf:4b:58:e7:01:74:e4:8e:66:39:
82:f3:4e:d4:7e:6c:a0:a8:46:b4:78:39:a9:34:1c:
bd:e5:80:f6:04:8c:e9:e7:18:bd:7e:1d:91:bc:43:
c7:44:55:b5:de:3e:39:f0:bc:5f:28:eb:ec:85:3e:
50:80:95:59:81:45:59:29:0d:51:69:b2:a6:ff:bc:
22:73:80:79:8b:c8:8d:85:2e:1b:7f:3e:fd:6c:40:
bd:9c:d0:7a:3e:3d:f7:fd:5c:36:ed:49:7a:89:96:
db:de:fb:1f:fc:4a:7e:fd:f8:90:b0:23:6b:e1:8d:
29:62:05:14:c3:ce:20:62:e7:06:b2:10:dc:5f:c5:
48:5f:2d:f7:bd:32:01:1c:18:a8:0a:02:85:eb:c8:
cc:39:04:8d:99:47:38:cd:c9:b9:27:0f:47:96:13:
f6:29:5b:e9:61:63:a8:65:63:78:58:ad:17:0b:a5:
a7:e0:43:23:fb:d0:28:76:45:ab:5f:0c:b0:e8:fb:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CB:A0:3A:57:00:5B:52:44:76:DA:AD:5F:AC:A4:44:BC:54:81:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFE15A1CF46811EF963FDD63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.13.0/24
Signature Algorithm: sha256WithRSAEncryption
84:91:07:8e:b2:5a:f7:3f:c2:d3:f7:e2:e3:77:12:a8:98:45:
ba:61:b6:03:e8:44:54:42:62:7b:16:c7:3f:e2:63:88:d8:6d:
cc:74:cc:27:8e:7f:35:27:cc:4e:aa:74:a8:d6:91:e9:af:ba:
21:83:87:9e:aa:d5:a3:a2:25:ae:d9:55:c3:ea:c1:7d:77:ce:
12:5c:6d:7e:eb:45:2e:ec:f6:60:19:b3:c5:e4:f9:f6:d2:51:
28:e2:e3:83:e1:d0:44:b3:2c:33:6f:6c:df:88:7d:9e:f0:63:
ff:62:01:f3:e7:c6:78:c8:73:c5:3b:97:ce:43:33:ce:77:8e:
e1:bf:d3:1c:d2:c6:83:62:1a:b2:ed:72:7d:ea:7c:3f:db:23:
94:d4:c5:b3:91:7c:40:b6:28:d3:f9:4f:d8:de:e8:57:12:b5:
4e:b2:54:b5:cf:65:59:31:a4:a0:ca:84:e8:3c:8b:ac:0a:eb:
f2:bd:e2:5d:08:05:8b:c5:6b:7b:7a:06:46:90:79:66:d3:89:
dd:02:ad:fe:34:84:51:14:7f:1e:3e:0b:f1:f4:e8:8b:21:a8:
57:14:9d:66:7f:4a:5f:33:fd:9a:09:88:05:e3:16:12:55:78:
34:85:09:78:7f:bb:f4:53:e3:1f:a8:1e:cd:22:87:55:fb:a5:
df:1c:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:44 2025 by rpki-client