Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032082A8F4A311EFAA08FA6F762E951A.roa
File: 032082A8F4A311EFAA08FA6F762E951A.roa (raw, json)
Hash identifier: Rnwj0H7W6Zh+KGqq+3s95WFpcwCD4BGqt3SYdewzMGE=
Subject key identifier: 35:B6:67:88:44:0F:8B:5C:0A:F0:AC:FD:26:5F:70:1D:DA:3C:D2:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01387F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032082A8F4A311EFAA08FA6F762E951A.roa
Signing time: Thu 27 Feb 2025 00:37:24 +0000
ROA not before: Thu 27 Feb 2025 00:00:20 +0000
ROA not after: Sat 19 Feb 2028 00:00:20 +0000
asID: 17561
IP address blocks: 156.229.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79999 (0x1387f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:20 2025 GMT
Not After : Feb 19 00:00:20 2028 GMT
Subject: CN=67bfb3c4-d1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:1c:b4:7e:33:25:ca:ab:2b:58:c1:0f:ef:
75:6c:ca:9f:94:c6:c6:67:f0:27:ad:46:d5:67:f5:
85:a2:50:f7:34:ed:e0:17:3c:0e:f0:35:a0:a5:06:
44:4c:44:c6:31:6b:41:f8:9e:e0:e9:56:31:38:8c:
12:b3:6f:41:84:b4:79:ed:0c:df:36:59:2f:cf:1c:
5b:e2:86:91:e8:7e:bf:8f:ae:3d:e6:e5:0c:58:91:
d5:e0:65:de:1c:0f:3e:d8:a7:0f:26:4e:72:3f:52:
9b:05:6d:e0:ce:a8:1b:c8:3a:fc:ba:05:92:d9:41:
9a:17:9c:90:88:27:c3:21:2d:08:21:df:01:a0:71:
5b:b5:ea:a6:75:c5:8f:02:2a:8b:b4:25:6a:1b:9b:
b8:8a:2c:67:68:6f:c8:e3:1b:20:9e:64:11:14:dc:
07:5d:5b:00:ed:24:8a:43:14:9d:80:d5:1b:b6:48:
cc:48:83:e7:ef:d0:1b:e9:cb:04:9f:27:6b:c3:fb:
2c:4e:fc:7d:b6:b5:7e:68:ed:c5:a9:55:43:ea:1c:
8d:c1:ae:9f:ae:bc:2a:fe:77:6e:a3:1c:ae:f2:49:
b0:ec:91:17:ba:69:f4:24:64:6f:f5:0a:14:23:4c:
d7:ce:2e:8a:07:9c:d8:56:cc:5b:85:b0:38:c9:4d:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B6:67:88:44:0F:8B:5C:0A:F0:AC:FD:26:5F:70:1D:DA:3C:D2:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032082A8F4A311EFAA08FA6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.54.0/24
Signature Algorithm: sha256WithRSAEncryption
40:99:ea:74:a6:8a:fb:f4:0e:fb:a6:88:8b:6e:f0:5f:81:4c:
72:e3:09:a5:12:22:56:13:63:c4:1a:c8:08:9b:c0:6d:d2:9c:
9b:d1:89:8b:d8:f7:c7:6c:f1:f2:91:17:52:ed:24:5f:79:ea:
e0:2d:be:c5:7e:0b:46:fe:25:d1:e5:b6:16:7d:40:f5:d8:86:
e0:fb:4a:2d:7e:16:fa:dd:28:06:af:95:15:05:69:4c:d6:b8:
8a:7b:53:d0:41:83:21:0d:f7:eb:1b:8f:5e:b7:d1:0e:0f:37:
fb:55:a6:73:08:f5:2a:6d:a0:80:98:9d:95:24:71:18:70:48:
8c:5a:a0:18:de:ef:c2:7b:18:d6:d9:33:46:60:c1:97:41:dd:
97:9b:d2:f8:05:d6:03:07:a6:62:2e:64:c3:45:9c:35:87:90:
a8:b0:fc:6a:13:f3:fe:9d:4e:f0:76:dc:96:22:4d:eb:42:87:
c8:e6:78:5d:db:3f:a7:3f:be:ee:da:4b:5a:4a:e2:2a:6f:c8:
0a:04:1d:3c:1c:a2:36:d2:c7:7e:34:c4:91:23:fc:ba:fe:dc:
af:8a:4b:66:a9:5b:df:1b:c7:c9:54:c0:00:44:ee:02:d4:10:
c6:b8:ad:21:47:b1:91:53:db:66:d2:86:56:6f:9b:a3:31:97:
0b:3a:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:15 2025 by rpki-client