Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A0A750AF60C11EFBFB1EAA2762E951A.roa
File: 0A0A750AF60C11EFBFB1EAA2762E951A.roa (raw, json)
Hash identifier: LA9NgtSquMxAd3xCVuSXgqxVACImWw7Gy2j81XTJq2E=
Subject key identifier: DB:E5:77:34:18:0E:9E:44:F1:EA:C0:42:D5:FA:2A:D1:DE:A1:67:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A0A750AF60C11EFBFB1EAA2762E951A.roa
Signing time: Fri 28 Feb 2025 19:41:44 +0000
ROA not before: Fri 28 Feb 2025 19:41:40 +0000
ROA not after: Sun 13 Apr 2025 19:41:40 +0000
asID: 138915
IP address blocks: 156.244.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81671 (0x13f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 19:41:40 2025 GMT
Not After : Apr 13 19:41:40 2025 GMT
Subject: CN=67c21178-463f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:29:80:09:e2:e0:10:48:f0:85:f7:be:ec:
39:45:2d:15:2f:43:5d:67:6e:56:bd:06:89:50:f3:
50:85:5a:3c:f2:ab:ae:25:6c:d2:ed:c2:71:9e:9a:
ae:dd:1b:3d:a3:6e:98:76:95:75:b1:2e:10:58:37:
28:05:91:8a:e5:5f:dc:aa:15:0c:83:14:31:43:1a:
b7:f5:3f:86:18:34:19:76:a5:06:0f:0b:ba:9f:ba:
cd:19:73:97:60:7d:6a:da:af:7c:eb:32:34:4d:68:
0a:7d:0b:77:45:fd:8e:c6:5a:8f:77:2e:f2:7d:5d:
4d:20:75:44:11:f9:b9:7e:8d:c7:01:bf:fd:0c:79:
79:5b:87:a9:bb:cb:6d:96:55:e1:e8:59:2c:25:19:
63:b1:ed:d5:60:30:c6:1f:f5:24:be:e9:8f:24:2d:
0a:85:b9:be:71:e1:78:dd:a3:65:bd:88:bf:45:aa:
35:f5:b9:b8:5d:3d:36:95:2f:5d:bf:d0:23:49:8b:
84:ae:b8:c4:fb:a8:66:46:e9:56:84:31:7a:22:4b:
a3:e3:0c:4b:68:c3:dd:62:8e:41:fe:b8:88:da:cd:
d6:5c:0f:25:2e:67:82:5b:29:02:a5:49:9a:26:dc:
33:ba:66:4c:ca:32:9e:05:8d:2b:e9:b7:d1:a7:9e:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:77:34:18:0E:9E:44:F1:EA:C0:42:D5:FA:2A:D1:DE:A1:67:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A0A750AF60C11EFBFB1EAA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f5:1a:33:71:ed:5e:b3:bf:48:dd:97:2b:1b:26:e3:da:3b:
45:1a:1f:8e:4f:f7:29:24:36:f2:e7:ec:26:e0:b3:c3:56:89:
09:7b:14:34:40:00:dc:c8:50:aa:67:ee:36:02:5a:ca:26:2a:
e9:52:a7:51:a9:70:a9:a7:20:7d:f8:5d:ec:2f:66:cd:b4:27:
31:93:09:96:33:ae:22:cd:6f:74:ac:82:80:a4:20:3b:0a:c8:
2b:29:d6:64:2a:30:06:1c:c0:91:db:35:80:ea:81:f9:89:02:
d5:7e:c4:f6:8f:64:b9:ba:d6:90:5f:63:cf:f0:d9:2d:99:11:
63:ba:cf:c6:57:88:dd:19:72:93:dd:1d:3a:4b:9f:ae:8d:b3:
3a:bf:ae:e9:93:07:f4:92:7e:26:61:21:9d:bb:24:4f:70:a5:
64:70:88:0e:7f:2d:c7:a9:54:22:8b:83:11:55:a2:1d:80:ec:
f1:92:a8:b3:e3:5b:b1:56:13:c4:03:75:2a:c2:2c:e4:08:53:
e1:7d:24:90:94:60:1d:9c:89:42:6b:66:c0:8d:8e:90:1c:db:
a1:41:bd:d9:a0:59:4b:2f:47:69:a3:3f:90:2f:52:6e:b6:81:
e1:78:8a:20:a9:56:cd:88:73:13:8f:c3:cb:35:7a:e1:92:5d:
0e:0c:da:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:49 2025 by rpki-client