Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F49C72D8F43D11EFAD3FF2B5762E951A.roa
File: F49C72D8F43D11EFAD3FF2B5762E951A.roa (raw, json)
Hash identifier: SfCQXoMOU2qd4eFtAX4hBUfcYGXHUAhLMjGLdx2itlg=
Subject key identifier: 2D:CF:CA:6C:46:29:6E:7E:D5:21:7B:FB:24:73:8A:A1:59:98:77:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013289
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F49C72D8F43D11EFAD3FF2B5762E951A.roa
Signing time: Wed 26 Feb 2025 12:34:01 +0000
ROA not before: Wed 26 Feb 2025 12:33:57 +0000
ROA not after: Thu 19 Feb 2026 12:33:57 +0000
asID: 984
IP address blocks: 156.252.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78473 (0x13289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:33:57 2025 GMT
Not After : Feb 19 12:33:57 2026 GMT
Subject: CN=67bf0a39-b263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:06:fd:bb:28:c5:20:79:b1:d9:21:7b:4e:
ce:ae:1f:90:f9:65:4b:61:09:a9:d2:76:52:8a:0e:
cd:d2:12:e4:2a:68:b3:84:20:fe:48:d5:00:50:81:
86:3d:02:f0:f5:22:c4:dd:51:ef:01:82:8e:5c:2a:
6a:d9:f7:65:32:f7:64:ae:85:e9:6e:77:b9:b6:1c:
9e:24:df:b3:ff:82:f9:48:2c:2b:7b:13:0c:65:86:
1a:c1:06:a7:3b:d1:a9:76:96:7a:47:62:08:5f:da:
b5:fa:86:54:77:1f:0a:9d:7b:19:8f:0f:0f:75:32:
29:df:d2:0f:aa:dd:b0:17:ec:40:25:3b:82:81:69:
c4:a5:ae:01:1f:45:0f:1b:91:6f:ae:64:85:72:01:
a7:68:54:fe:6e:17:ce:f6:9a:6c:d9:5e:7e:e7:8e:
3a:2d:97:3d:cd:3c:8e:3f:5f:f4:45:6a:d5:7f:d5:
3d:48:4d:a6:a0:7f:66:84:4b:a0:23:27:ff:5d:bd:
41:cb:16:66:1d:19:a7:35:85:4f:b6:53:c4:25:1c:
1f:2f:7f:cc:7d:ba:09:43:f1:e9:d6:f7:38:ea:a9:
81:09:44:cf:14:ee:d3:04:cf:85:8e:7f:1f:74:e9:
72:73:38:5b:9f:21:27:68:f2:ac:f3:fd:09:a4:59:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CF:CA:6C:46:29:6E:7E:D5:21:7B:FB:24:73:8A:A1:59:98:77:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F49C72D8F43D11EFAD3FF2B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.145.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:be:44:b5:e1:63:c8:e9:9a:db:15:1c:ba:33:0a:84:39:09:
91:80:97:97:e5:b9:c7:87:e4:9b:2b:4f:b3:79:84:f8:0b:08:
9d:0f:1f:33:a6:b4:66:6b:ac:11:1f:1c:e8:74:48:4d:1c:f7:
49:89:4d:aa:5f:98:29:12:fc:e3:09:54:02:49:46:9a:7d:cf:
e4:eb:01:3d:d6:df:de:e8:ca:0b:81:a5:bc:34:40:bd:07:63:
6a:dd:7b:b0:b8:5c:7d:0b:bd:d1:1f:5b:4e:c3:29:f9:9a:9b:
eb:1e:b0:52:fa:6f:8e:57:b9:ef:5d:9c:f8:f9:ce:0d:72:61:
2f:58:89:75:82:b1:b4:f1:3d:02:77:b3:d0:81:17:81:fa:1a:
43:80:dd:c0:ba:52:ab:c6:33:af:7c:67:82:bb:50:a5:9c:b7:
0d:30:94:76:f9:91:22:66:e3:dd:eb:9b:6b:3e:50:7f:69:59:
4e:c3:c7:fd:ce:f7:b4:88:93:f7:d1:92:3e:78:00:01:4d:3a:
9e:57:ea:9a:7f:68:6a:10:05:2a:08:cc:c7:bd:46:93:b4:bc:
d1:71:da:5c:d2:ff:26:2b:4d:a9:6a:d0:2c:c5:52:e4:f3:70:
bd:8d:af:72:16:1e:8f:4c:56:98:20:7b:06:b8:91:7f:98:e7:
f9:0f:ad:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:58 2025 by rpki-client