Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04A91A24FFE111EF8F9207AC762E951A.roa
File: 04A91A24FFE111EF8F9207AC762E951A.roa (raw, json)
Hash identifier: zxRJ6zPbFRaPW1oToUEThecvBrSlSZIOxr6njPFJ7qo=
Subject key identifier: 98:58:37:B9:3C:04:A6:F4:45:DC:87:BD:D0:83:BE:68:6A:1F:32:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01458A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04A91A24FFE111EF8F9207AC762E951A.roa
Signing time: Thu 13 Mar 2025 07:58:58 +0000
ROA not before: Thu 13 Mar 2025 07:58:54 +0000
ROA not after: Fri 11 Apr 2025 07:58:54 +0000
asID: 213448
IP address blocks: 156.228.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83338 (0x1458a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 13 07:58:54 2025 GMT
Not After : Apr 11 07:58:54 2025 GMT
Subject: CN=67d29042-c37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:b3:8e:48:db:71:0d:55:da:fe:34:4a:59:
16:b0:50:eb:62:99:cc:12:ed:a0:b9:d1:ca:0d:31:
94:84:6f:f1:2c:af:0e:12:18:ce:39:55:f7:67:45:
bb:bf:e5:91:ed:4f:4d:c8:72:ea:7a:92:a6:8e:c8:
a3:40:5c:44:f1:a5:cd:c0:4e:36:12:aa:38:3f:14:
45:c7:0f:e0:81:64:21:9d:0f:f8:bd:13:ce:5b:9f:
e0:f1:01:73:cc:ed:59:fb:6b:c6:47:ee:a8:a0:ad:
ef:d9:71:c0:71:ec:a2:8d:73:15:be:ac:f6:81:4f:
00:b0:57:e6:88:00:56:33:c9:18:aa:da:46:2c:fe:
e8:cc:50:79:85:90:a1:dc:b1:08:14:cc:cc:26:8f:
d2:41:5b:92:0d:cd:94:9e:a7:84:b5:a0:b5:7d:72:
c6:4c:5d:46:32:a6:32:75:21:0c:14:2f:97:b7:0d:
a0:3c:9b:f1:0a:7d:14:fc:13:4d:c4:68:7b:e8:e2:
c4:ea:b2:0b:66:40:95:34:c9:5e:27:2b:a9:71:36:
ec:2c:7c:b1:57:3a:af:fc:8e:f1:c6:1b:0f:e2:b6:
e6:c5:b6:90:cf:30:75:87:d5:ee:25:af:d3:dd:db:
37:cc:92:1f:67:10:ce:ce:40:48:d5:58:27:45:f2:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:58:37:B9:3C:04:A6:F4:45:DC:87:BD:D0:83:BE:68:6A:1F:32:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04A91A24FFE111EF8F9207AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.233.0/24
Signature Algorithm: sha256WithRSAEncryption
01:15:17:32:2a:8f:4e:90:f6:f6:71:eb:ff:b6:9c:a1:ec:4a:
7b:3f:98:ac:98:15:61:9c:88:77:73:91:55:6f:0d:d2:f4:2e:
53:53:ca:d7:66:13:7d:8a:ea:be:1b:4a:66:78:18:6c:98:03:
a9:84:30:27:34:07:c0:ee:26:6e:e9:1d:9f:25:c6:e8:a0:11:
ae:31:88:c2:0e:29:70:fa:97:ec:a3:01:be:31:f4:f1:0b:16:
e0:a7:42:f3:6f:ce:fd:33:b1:3d:01:74:ae:8c:0d:21:ec:9a:
1f:27:0e:3a:c5:87:33:0d:15:27:36:ab:61:5d:1f:af:14:85:
fd:f1:be:b2:f2:d4:bd:85:e1:12:64:d3:fc:a2:00:1a:16:92:
31:10:1d:a6:77:39:f6:e9:2f:b8:cb:de:4e:c7:eb:8b:e9:eb:
97:df:1d:4d:ec:7c:ae:c7:06:ad:6e:52:62:c3:dc:39:df:f2:
ad:ad:5d:9b:1b:19:e7:1d:95:ae:48:89:8f:83:f8:52:2e:6f:
08:28:30:1b:cf:f9:d0:09:57:86:b2:a0:6c:57:c7:19:25:88:
85:23:a5:d3:78:43:01:f9:62:47:71:39:9e:35:81:96:58:a0:
60:33:4a:76:64:2c:4a:4e:f8:96:48:7a:c7:d3:90:e6:21:66:
b9:47:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:59 2025 by rpki-client