Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00BE9E4C057811F0A97456A6762E951A.roa
File: 00BE9E4C057811F0A97456A6762E951A.roa (raw, json)
Hash identifier: Z+a9iNZ5EDKlZao+79AXQDMg8dYwJkLhiq8nn9PYsgQ=
Subject key identifier: 64:0B:E7:C7:77:29:A8:0F:94:C7:8A:23:DB:59:F2:20:E4:7F:4A:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014726
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00BE9E4C057811F0A97456A6762E951A.roa
Signing time: Thu 20 Mar 2025 10:42:22 +0000
ROA not before: Thu 20 Mar 2025 10:42:18 +0000
ROA not after: Wed 09 Apr 2025 10:42:18 +0000
asID: 55020
IP address blocks: 156.241.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83750 (0x14726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 10:42:18 2025 GMT
Not After : Apr 9 10:42:18 2025 GMT
Subject: CN=67dbf10d-2a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f9:2c:4e:28:5d:96:45:0f:84:ca:d6:6f:58:
22:ee:fc:d6:ef:f0:67:ef:b7:03:d3:a0:fd:57:26:
f0:2f:7c:61:f8:31:e4:f1:8a:ae:3c:b5:07:73:14:
12:f8:08:2c:9c:31:85:64:52:c9:38:05:87:e4:c6:
a3:55:3f:c0:c5:08:e4:93:47:20:88:98:3f:73:ff:
38:a6:ab:24:74:cc:8b:b7:fd:ab:2d:d4:5c:28:87:
77:43:53:01:2b:6e:18:93:85:f3:75:1c:cc:2d:51:
23:de:58:05:7e:0e:f9:9f:92:4e:e9:65:5a:58:e0:
2a:47:57:78:9a:b6:48:b5:9b:a7:c6:7d:28:c2:2d:
c0:b2:9b:d7:18:32:47:39:4e:1b:ac:d1:02:fa:d3:
16:09:43:f1:96:d1:77:34:b5:1d:3f:5b:af:a4:f7:
38:ce:66:07:92:e9:b7:bf:f8:6d:a2:9f:8c:2b:30:
09:24:df:df:19:49:07:09:e9:dd:ab:cd:4f:c8:c5:
b3:fb:48:db:17:b0:52:b4:cf:fb:65:55:4b:1a:a6:
96:b8:13:47:e9:3a:ab:a5:e4:aa:71:43:08:e9:dc:
1b:41:be:b8:6c:c6:8f:f9:d4:e6:b6:b1:60:6e:91:
f7:bc:64:0c:20:15:ed:fd:d5:e9:eb:7d:bc:a1:02:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0B:E7:C7:77:29:A8:0F:94:C7:8A:23:DB:59:F2:20:E4:7F:4A:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00BE9E4C057811F0A97456A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.188.0/24
Signature Algorithm: sha256WithRSAEncryption
69:69:08:bc:14:8d:ec:f6:32:42:17:52:20:35:75:35:63:c5:
99:37:bc:d2:4a:9c:ae:75:4f:a0:0f:2e:83:31:7d:62:89:ee:
20:d8:a1:38:78:54:6c:bb:24:16:91:95:f2:a9:1c:0a:2b:3e:
2e:fa:65:68:2d:37:76:e2:b2:37:6b:74:7a:bb:20:b6:17:8c:
8d:94:3f:c6:c3:cf:ec:2b:84:ce:8d:0e:7f:4d:6c:dc:d5:54:
76:03:52:91:ae:4e:8e:8b:5e:02:6b:0c:53:32:ea:b8:52:d8:
e2:1b:2e:56:8f:b1:3c:33:03:38:84:a7:5a:65:41:06:c3:db:
30:48:46:85:47:e1:15:51:f1:08:92:2f:a0:e2:9e:60:a0:12:
fe:e8:ea:c4:93:07:cf:67:2f:45:83:19:67:85:72:e0:c3:bd:
18:16:05:ea:40:d9:dd:6b:9e:2e:72:89:7d:2a:25:18:b4:45:
30:e9:71:a6:4b:f3:3f:44:32:13:2c:69:e6:82:84:09:65:84:
81:d5:67:b9:15:7b:63:55:47:c0:09:0c:82:fc:d9:ec:65:06:
d7:d9:00:80:7a:6d:cd:9c:6b:04:73:f5:f2:42:95:d9:7a:fd:
cd:74:03:4e:2a:d9:92:0b:cc:46:cb:7c:7e:b6:f7:42:b6:84:
48:06:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:09 2025 by rpki-client