Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2908E2EF44D11EFA01754A8762E951A.roa
File: F2908E2EF44D11EFA01754A8762E951A.roa (raw, json)
Hash identifier: IkyZTY0AwIV7IPA8YZHfmQvllmDZAQX7Xe3uFoSrsrk=
Subject key identifier: CE:28:F6:9B:8B:5D:A7:2F:CE:E3:5D:FD:98:72:4E:C4:82:8A:35:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0133C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2908E2EF44D11EFA01754A8762E951A.roa
Signing time: Wed 26 Feb 2025 14:28:29 +0000
ROA not before: Wed 26 Feb 2025 14:28:25 +0000
ROA not after: Thu 19 Feb 2026 14:28:25 +0000
asID: 984
IP address blocks: 156.252.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78785 (0x133c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:28:25 2025 GMT
Not After : Feb 19 14:28:25 2026 GMT
Subject: CN=67bf250d-1b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:b6:a5:d7:14:e6:e8:58:3c:64:8f:29:95:
a8:02:bd:48:a0:8f:23:7e:c7:b4:64:34:5b:9c:be:
ce:33:81:bb:2f:7f:d0:41:bb:6c:b6:a5:51:a7:9e:
1d:18:04:52:62:43:52:ab:1d:c8:01:c4:51:d2:01:
51:e0:5e:fb:68:61:26:8d:ab:22:03:0f:a5:75:81:
7d:60:5d:08:05:92:04:f8:1b:b6:4a:c2:00:a0:c2:
c1:dc:d8:bf:88:da:11:50:90:34:45:21:cd:b3:10:
6e:d4:da:45:06:a0:4a:3f:96:3e:4b:5b:d2:90:d5:
ba:b6:b6:ef:14:56:0b:74:c7:66:34:0e:9d:7d:5d:
6e:7b:d7:8d:3e:67:47:a7:1c:76:7a:74:bb:de:f5:
fe:38:e2:a7:e2:d9:89:c8:29:96:d4:34:19:11:a5:
1b:22:24:6c:a8:1f:60:05:1c:69:00:b9:d9:d7:a8:
4a:77:04:dc:b5:f7:ac:cd:1a:af:19:47:4c:a4:6e:
93:ea:1a:01:aa:93:70:bb:b4:b1:49:60:e4:bb:77:
ff:d2:ce:0e:46:05:5a:4c:0b:ca:b3:24:54:ac:78:
8f:4a:d2:49:72:6b:b0:6c:f8:c8:ea:9d:f2:20:2a:
a1:3d:09:63:b3:df:78:fa:c9:77:26:b2:91:83:83:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:28:F6:9B:8B:5D:A7:2F:CE:E3:5D:FD:98:72:4E:C4:82:8A:35:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2908E2EF44D11EFA01754A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.192.0/24
Signature Algorithm: sha256WithRSAEncryption
af:4f:6f:16:ce:d5:03:1c:9f:4d:a3:3f:dd:4b:d2:15:46:d5:
5d:78:43:b8:0f:59:71:3e:b3:a9:58:9b:52:70:66:be:c5:0e:
32:6f:39:2c:a1:b3:b0:1b:a0:00:c9:7d:f9:2e:f2:d5:e1:d0:
fb:ad:b8:61:47:79:3d:5b:e7:b4:98:72:d5:7d:4c:12:53:87:
a1:d7:21:41:56:07:e7:13:ef:44:91:91:72:56:8e:c4:3d:ac:
d9:7e:1f:30:bd:3b:a3:e8:1c:e3:06:7f:89:24:0e:d5:fa:3b:
3c:3f:2e:0d:86:d2:a7:87:18:f9:cf:57:0d:cf:7b:83:7b:6f:
a2:47:db:08:66:6d:00:c0:aa:26:44:46:9f:85:55:b1:23:7b:
53:28:b4:ba:cc:75:45:73:ef:3d:a2:3e:b4:0d:04:73:c2:d9:
99:e6:fc:14:16:5e:c2:58:08:bc:68:f2:b6:be:af:fa:a7:45:
b9:c6:9f:0e:a3:9a:30:e7:a6:22:0c:0e:c4:9e:28:2d:a9:4b:
2c:b2:ad:bb:ee:ba:27:a0:24:7b:c6:43:49:0f:9c:48:be:8c:
6a:6d:c8:49:b9:45:7e:c1:d5:37:56:47:8e:2b:c2:04:ad:63:
ca:55:6f:9e:9b:5a:e7:43:e2:16:e1:bd:4a:15:bd:8c:5d:7f:
bc:23:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:38 2025 by rpki-client