Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8B8939CF42911EF8285B3A8762E951A.roa
File: F8B8939CF42911EF8285B3A8762E951A.roa (raw, json)
Hash identifier: 8hM2UuZxomNob+E8hK/+KIv5GlS6JqIMxHbzUiRKIcM=
Subject key identifier: E8:4A:82:D0:F2:F8:24:E1:97:38:C4:BE:1C:54:A1:FD:9A:07:28:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8B8939CF42911EF8285B3A8762E951A.roa
Signing time: Wed 26 Feb 2025 10:10:58 +0000
ROA not before: Wed 26 Feb 2025 10:10:54 +0000
ROA not after: Thu 19 Feb 2026 10:10:54 +0000
asID: 984
IP address blocks: 156.230.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78036 (0x130d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:10:54 2025 GMT
Not After : Feb 19 10:10:54 2026 GMT
Subject: CN=67bee8b2-29af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:7a:ce:09:0d:c2:a4:af:f6:93:16:38:33:
fa:e4:7e:5c:1d:e1:45:6e:c6:d3:65:bd:ea:9a:df:
ee:39:22:53:fc:08:67:6f:1b:e8:08:31:98:05:8b:
06:ce:25:0f:de:84:c4:e2:20:ea:98:ba:b8:1c:4d:
b3:f9:0b:60:9a:fc:97:c3:0a:11:64:2a:be:aa:9b:
a8:bf:b4:10:14:f8:23:ea:66:98:3a:c1:2a:ba:a9:
f4:ec:77:0f:07:49:4c:38:11:d8:32:0d:79:ee:f9:
44:c1:27:cf:33:5e:7e:38:22:0a:28:b0:9b:b9:2f:
cb:7d:c4:16:36:fc:19:7d:55:ea:0f:22:06:10:c1:
4d:68:0d:57:2a:d9:b5:17:76:67:11:2b:35:a8:6c:
f6:a5:f1:5e:46:d4:9f:b8:1c:ca:f0:50:28:dc:ad:
7b:cc:86:11:c4:da:9e:2f:24:1a:ef:09:69:0f:35:
2a:63:3e:84:03:40:78:f6:15:d0:9b:33:73:c3:17:
31:a0:e9:21:1c:ff:8f:81:f4:04:04:76:b3:1f:92:
3d:f1:a3:d2:4f:6e:9d:60:98:eb:bb:fe:b4:a3:05:
ad:14:0d:72:14:e3:df:63:10:18:75:02:1a:79:ee:
5a:bd:9e:45:aa:fb:58:68:93:11:68:de:8c:6e:30:
ef:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:82:D0:F2:F8:24:E1:97:38:C4:BE:1C:54:A1:FD:9A:07:28:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8B8939CF42911EF8285B3A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.143.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:04:5a:ba:95:d0:48:ca:dd:28:11:df:d0:98:a1:7f:2a:aa:
6c:f5:d6:14:8e:b5:bd:d6:88:c9:5b:8f:fd:9d:49:55:24:70:
e9:6a:bd:9f:4a:75:e5:45:75:47:a2:96:9b:05:56:cc:65:9d:
00:35:09:e2:c1:bc:2c:78:2a:33:e7:44:f0:c9:1e:de:64:ae:
60:56:a9:4e:25:64:de:e2:48:ac:f0:34:d1:e1:d5:48:bd:6c:
b6:3a:fb:45:f0:e7:d5:1c:9f:16:3c:40:b8:e1:58:41:6a:43:
87:87:4c:9e:72:81:17:7b:c5:ae:93:43:7f:e2:0a:0c:1b:d4:
42:8a:ed:13:13:0c:37:61:f9:9a:88:5a:36:d4:32:7b:05:ff:
26:04:8d:85:92:60:a4:38:b9:39:d4:2d:31:b3:b1:75:23:03:
8e:36:33:58:a1:5e:ab:e2:a1:97:9e:d4:79:7d:40:b4:39:a4:
c5:66:02:9d:a3:1b:9e:48:a0:fb:37:3b:24:31:92:8a:e1:b7:
2d:31:17:62:64:69:40:c2:27:9d:96:f2:30:08:fa:a1:5e:fc:
af:43:83:a8:c8:eb:95:0c:18:c1:f6:59:53:38:02:97:81:f8:
f1:ef:1c:58:bb:57:1d:7f:25:dc:ba:21:54:ee:fb:28:de:2a:
8a:1a:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:51 2025 by rpki-client