Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2FAE2C0F44211EFA405FE59762E951A.roa
File: F2FAE2C0F44211EFA405FE59762E951A.roa (raw, json)
Hash identifier: 7lUgPVPR0VXKiXIkTKoqz5Xby9vfx8EF+VnRQmlt+7c=
Subject key identifier: 38:9E:4E:D4:F3:3F:3C:8D:7F:79:7A:80:47:1E:60:9A:75:13:7C:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0132F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2FAE2C0F44211EFA405FE59762E951A.roa
Signing time: Wed 26 Feb 2025 13:09:45 +0000
ROA not before: Wed 26 Feb 2025 13:09:41 +0000
ROA not after: Thu 19 Feb 2026 13:09:41 +0000
asID: 984
IP address blocks: 156.252.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78578 (0x132f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:09:41 2025 GMT
Not After : Feb 19 13:09:41 2026 GMT
Subject: CN=67bf1299-29cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:c4:08:17:a1:91:84:c2:98:72:ef:c9:e6:
31:7b:e9:f1:36:ad:b4:02:af:02:ec:b2:73:65:fe:
a7:65:48:4e:45:75:be:25:e5:0b:f9:97:72:18:5e:
1d:ef:33:58:87:db:97:98:5f:ef:31:18:40:0a:aa:
2a:02:2e:76:d9:d0:bd:d5:b8:0e:ae:af:46:3e:66:
92:95:0b:84:12:81:f5:41:6e:26:dd:30:c3:e9:27:
4e:d8:74:f0:1b:f0:44:3c:c5:e3:a6:ee:d3:81:e0:
42:e9:69:03:9c:fd:79:51:bc:46:29:56:f0:f4:15:
4a:58:cf:d7:02:a9:a4:57:08:2d:3e:30:49:84:1a:
f2:65:4d:da:ef:fe:f8:ac:86:ad:c4:bd:cc:01:8b:
ba:ad:4b:4c:e8:96:f7:9d:60:04:5d:5e:39:31:72:
b8:c4:ae:f6:9a:5f:1d:66:d0:a2:3f:71:8b:d9:df:
89:c9:b2:cb:ae:1e:f5:ed:cd:e8:59:21:15:55:2d:
58:43:e1:ca:98:83:10:3a:ef:f8:c1:d8:63:ab:d4:
08:f5:f5:30:aa:d7:cb:8d:cc:4b:e5:26:19:b3:b6:
90:c6:6a:f0:3a:d6:b5:8c:96:77:23:d1:35:54:27:
d3:b7:3a:ba:63:ea:50:bf:fb:73:ac:5a:9a:b0:8f:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9E:4E:D4:F3:3F:3C:8D:7F:79:7A:80:47:1E:60:9A:75:13:7C:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2FAE2C0F44211EFA405FE59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.161.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b4:45:e3:6b:88:20:0d:46:6e:9f:0f:d5:20:01:3f:98:07:
51:b0:d9:a1:f0:b7:3c:5d:85:6f:40:f3:de:2b:48:a3:65:3c:
53:ae:14:87:40:55:c8:a8:cd:18:12:df:4c:5f:23:0d:23:87:
43:08:c7:33:63:b4:c1:55:e7:9f:b8:4d:a0:1a:d9:64:3f:0e:
e9:be:44:d0:77:90:2b:9b:32:62:8c:30:5e:b9:3e:e5:00:81:
ac:63:f9:ca:ec:9e:21:b3:75:c3:2a:d7:1a:f1:8d:09:7f:9f:
14:7c:45:12:38:93:54:d0:af:c6:df:c3:c6:2b:3a:1a:7e:16:
c7:97:75:33:c1:7f:f0:49:47:00:f9:27:14:7d:c9:0a:fa:f0:
56:a1:ca:42:aa:f5:7e:53:a3:02:8e:3d:45:eb:93:5c:36:e0:
86:78:a0:44:39:74:0e:d1:f3:fa:e3:3a:fe:c3:cb:6e:69:47:
be:12:c1:7e:51:b1:a0:a3:0e:a2:ab:1a:b5:08:df:85:0e:98:
b9:64:7c:a6:24:e0:fa:f9:9b:4f:04:c8:4c:22:a3:cd:b4:d9:
5d:fe:4f:c2:67:68:18:51:1b:64:72:e7:dc:56:88:c7:f5:a4:
57:12:21:58:11:0d:20:b4:66:31:4c:05:ab:a5:6a:ef:94:4d:
c8:27:50:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:58 2025 by rpki-client