Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC49F5E0F41B11EF957E5448762E951A.roa
File: FC49F5E0F41B11EF957E5448762E951A.roa (raw, json)
Hash identifier: XIsXU8pnPfBFtsj3KGRojDOAO7dT6OnTOKYY5SSt3Zk=
Subject key identifier: 6A:5B:7D:57:43:17:97:7C:00:79:0D:DF:03:66:7B:C2:35:64:B3:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012FEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC49F5E0F41B11EF957E5448762E951A.roa
Signing time: Wed 26 Feb 2025 08:30:51 +0000
ROA not before: Wed 26 Feb 2025 08:30:47 +0000
ROA not after: Thu 19 Feb 2026 08:30:47 +0000
asID: 984
IP address blocks: 156.252.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77807 (0x12fef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 08:30:47 2025 GMT
Not After : Feb 19 08:30:47 2026 GMT
Subject: CN=67bed13a-fc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:34:79:48:35:fb:c9:7e:c5:e9:56:10:87:
bb:52:af:b1:d1:65:74:37:a0:78:c0:a6:5a:cb:6a:
5f:3a:65:46:20:0c:90:c2:e1:a5:96:c9:05:a7:ab:
93:7f:3e:a7:de:03:c5:f5:8c:3f:d8:49:78:96:04:
fe:4b:df:98:ca:46:38:4e:c8:5c:78:dd:96:8b:ce:
84:1e:9b:27:8c:42:26:e7:f4:d4:5a:e4:21:4d:c8:
c9:54:eb:ab:71:c0:4e:82:9f:f0:c2:bd:c5:cc:59:
10:72:fd:14:35:42:12:ad:e6:51:3e:54:e6:da:db:
3a:e5:d2:94:38:05:5a:4e:5b:72:3c:09:79:ad:57:
15:23:4f:39:ed:59:07:18:f9:22:20:8c:c7:e2:68:
28:65:a6:07:fb:0e:fd:da:2b:60:47:41:de:2d:cd:
5e:93:12:17:a8:fb:c8:6d:92:b3:a4:d6:13:f6:ad:
40:a3:00:38:78:3e:01:7e:23:c2:97:ca:a7:1c:01:
16:c7:fe:ad:76:3d:0c:ad:f3:88:87:4b:b6:9b:2c:
d7:5e:fc:aa:8b:e3:f3:88:62:38:98:f2:8a:37:16:
f9:ba:2c:f9:ef:fa:85:7b:df:64:93:24:58:1a:b4:
b9:66:8e:bf:eb:18:d4:f1:f9:c1:a9:cf:f2:b3:7e:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5B:7D:57:43:17:97:7C:00:79:0D:DF:03:66:7B:C2:35:64:B3:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC49F5E0F41B11EF957E5448762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.16.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a8:ea:75:74:ac:ee:55:ab:90:a6:e9:b7:00:18:1f:82:4d:
5c:7b:30:6c:85:80:f9:e7:2f:ec:59:b5:69:2b:f2:25:2a:50:
b2:5f:a7:69:b0:93:6f:c2:57:65:73:76:6f:63:9a:24:3e:b0:
84:14:cd:0f:42:6c:77:2d:e1:92:65:54:bb:19:51:f0:4c:1c:
a5:24:e5:86:2e:9a:9a:0c:1a:c4:60:57:fe:0b:ea:0d:01:8e:
08:b9:7c:fe:20:5a:95:b2:f1:cd:c1:af:95:78:26:7f:ab:e4:
9d:e1:37:3e:72:93:cf:0f:91:72:a9:72:c9:3f:e5:9e:f9:32:
fe:a9:9c:e5:9b:81:73:a7:9d:7f:23:37:9c:84:e8:52:ff:ae:
f1:80:29:88:77:cf:fe:47:d5:c3:55:cb:58:8b:ae:5b:e2:ba:
76:d2:17:c9:82:24:1b:ec:67:2c:2d:bd:32:85:32:a4:24:81:
bd:fc:7b:d9:4f:42:8c:7e:15:4f:af:7f:9c:de:ed:e7:8a:48:
69:33:39:f2:b5:53:55:cb:00:4e:15:06:9b:3a:85:4e:d1:c9:
30:4e:9a:14:72:3b:06:34:92:8f:c5:8a:35:f5:40:56:e3:6a:
80:6d:37:15:a7:49:c4:5a:a1:e8:6f:11:bd:d1:7d:d2:0a:b0:
bd:49:f9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:57 2025 by rpki-client