Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAC6A436F45011EFB28108BC762E951A.roa
File: FAC6A436F45011EFB28108BC762E951A.roa (raw, json)
Hash identifier: h6O81AkXh24MivW4f68Idpod9ysEA+3eHy6iDYcL7Qo=
Subject key identifier: 84:6C:B6:05:A9:FA:6C:5D:BB:98:D8:67:4E:01:07:E3:AF:24:77:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0133F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAC6A436F45011EFB28108BC762E951A.roa
Signing time: Wed 26 Feb 2025 14:50:11 +0000
ROA not before: Wed 26 Feb 2025 14:50:08 +0000
ROA not after: Thu 19 Feb 2026 14:50:08 +0000
asID: 984
IP address blocks: 156.252.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78834 (0x133f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:50:08 2025 GMT
Not After : Feb 19 14:50:08 2026 GMT
Subject: CN=67bf2a23-4ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3e:9c:7d:17:1c:7e:cb:46:b1:1d:fa:94:9c:
da:68:33:26:00:99:b2:d0:2f:ea:4e:73:cf:72:f9:
d5:24:86:61:54:8c:f6:c1:fc:ba:05:cb:d8:bc:d8:
6c:39:c7:a9:46:88:b1:96:1e:72:c6:6a:8f:b9:71:
13:20:65:b0:b0:f9:81:f5:d6:53:f2:5b:d0:f1:2f:
46:e9:a0:8b:96:58:e5:53:f6:78:ef:3b:45:d5:44:
c6:1a:16:51:66:67:68:54:4b:9c:d4:3f:91:39:1b:
5f:2d:26:86:6d:ae:16:be:16:97:f9:ac:de:f4:b0:
e3:6e:bd:88:4f:11:91:96:cc:bd:ca:b9:7a:10:d9:
41:5c:66:04:94:ef:6f:2f:29:07:e8:90:6f:56:18:
f3:20:92:3f:53:71:ce:8a:dd:0c:d1:be:13:eb:1c:
3a:94:f3:eb:50:49:e6:41:7c:15:47:6c:56:a8:ed:
29:1a:6c:c8:d4:8e:5b:1e:b8:bb:3f:f3:6a:04:b5:
b7:8c:aa:f7:9f:f0:8a:61:30:62:59:72:f3:9e:b5:
1f:27:44:b6:72:be:9b:e1:02:31:50:1a:5b:39:36:
c8:d5:4c:85:00:7c:ca:cc:e7:05:26:af:36:80:82:
02:78:86:01:66:1b:19:c0:8e:af:7d:39:4e:7e:c4:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6C:B6:05:A9:FA:6C:5D:BB:98:D8:67:4E:01:07:E3:AF:24:77:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAC6A436F45011EFB28108BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.200.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:04:7a:e5:c9:91:f7:26:98:81:93:37:f5:c3:31:0a:e4:1a:
3e:b6:03:38:b9:5a:ba:63:51:5a:86:04:b3:63:5e:9e:ad:6d:
b2:43:10:f2:16:1f:e6:56:af:59:a8:8c:5e:29:cf:a8:78:d7:
31:6b:a6:68:e2:eb:91:07:ff:ef:2d:df:1d:5c:c3:b4:8e:49:
43:ba:a0:63:6c:20:93:f6:16:68:8d:ec:d1:4e:8d:db:4c:5e:
de:da:ab:50:00:f8:3c:b8:97:18:65:5a:92:d8:e6:b2:ac:c8:
5e:33:4a:84:a5:a4:f5:3d:97:8b:78:47:24:6b:52:a2:d7:d3:
80:ba:4e:f8:a7:af:27:51:08:cc:05:a5:2f:8f:27:b3:37:34:
c5:9c:21:58:ac:ae:4f:3b:9d:17:6e:aa:fa:dd:cc:35:74:6d:
a5:b5:23:2b:e7:6c:ea:4a:1a:03:e1:14:8f:24:93:c9:6d:be:
90:7a:84:96:57:78:06:dc:3e:76:fa:54:d9:e6:8d:5f:12:54:
29:61:73:9c:79:6d:bf:cd:f8:3b:a2:ab:21:da:8f:a9:f1:e5:
88:e0:8a:2c:7e:a5:84:a6:08:b6:54:72:f2:80:e4:7d:73:41:
5a:b8:ce:42:0e:58:c9:30:77:bb:c5:4d:a6:2d:ef:b2:7d:d3:
48:82:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:24 2025 by rpki-client