Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AA6FD82060911F0869FF8A3762E951A.roa
File: 0AA6FD82060911F0869FF8A3762E951A.roa (raw, json)
Hash identifier: 3M6DBjZ/tq002sdEWnEIBfqWQgj01JlsmnfKPiGXspg=
Subject key identifier: 77:7E:40:D9:C0:E9:32:BE:77:B1:CA:A5:CE:48:4E:D2:62:4E:62:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014760
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AA6FD82060911F0869FF8A3762E951A.roa
Signing time: Fri 21 Mar 2025 04:00:35 +0000
ROA not before: Fri 21 Mar 2025 04:00:31 +0000
ROA not after: Fri 11 Apr 2025 04:00:31 +0000
asID: 57043
IP address blocks: 156.229.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83808 (0x14760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 21 04:00:31 2025 GMT
Not After : Apr 11 04:00:31 2025 GMT
Subject: CN=67dce463-0632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:07:9c:22:68:f2:13:04:39:63:47:bf:19:
52:dc:d0:31:63:8d:08:a6:4f:cd:95:f6:d1:49:be:
7b:fe:37:5f:70:7f:f7:cb:47:6a:08:3f:cd:4a:d0:
81:b0:2b:8c:4a:0b:a2:9f:42:82:4a:b3:d0:58:8e:
b5:a7:8e:2a:19:ce:d6:62:d8:c4:b2:87:a9:38:f2:
86:5d:23:59:20:28:2d:14:8d:e5:c5:d3:c8:60:be:
a1:16:b4:d6:10:15:fd:40:6a:d5:f7:61:97:76:26:
45:aa:86:71:ad:aa:a8:40:af:1b:c4:67:07:d2:74:
10:a9:a0:79:64:76:04:86:af:ad:29:2b:d1:16:95:
10:91:2e:57:d1:77:01:93:e8:f4:7e:36:2a:62:3a:
c1:c4:66:21:f9:34:25:dc:07:36:54:18:8a:79:b9:
c8:27:06:c0:8c:e7:0e:fe:10:91:69:82:46:79:af:
09:6b:d9:a8:0e:ca:2e:9d:11:67:29:bc:a8:f8:a9:
53:44:86:53:a1:81:b5:ff:0c:cc:64:bc:5b:25:e2:
4c:6c:48:6b:cc:66:f6:98:03:55:2e:05:8a:30:fe:
36:4f:a7:c2:40:88:a1:09:7f:67:44:c9:48:26:59:
2c:6c:ee:58:6e:3f:d5:09:7c:e7:0c:23:3b:e9:d9:
ed:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7E:40:D9:C0:E9:32:BE:77:B1:CA:A5:CE:48:4E:D2:62:4E:62:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AA6FD82060911F0869FF8A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.120.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c2:76:d6:53:b3:35:f2:1a:23:67:b8:4b:69:17:54:1f:46:
3e:31:bd:17:65:1c:9a:21:cc:cd:35:bc:55:75:26:22:5e:1c:
9b:b0:68:dd:5d:7a:53:e0:d7:a6:54:8b:2d:e6:a5:11:23:05:
14:14:68:e0:81:75:a7:08:82:6b:b4:9d:c9:a1:df:5c:2c:63:
d9:85:0b:15:f9:47:28:84:6b:c3:e7:d5:85:5b:df:f3:b6:d2:
42:22:70:05:63:b3:0d:a3:e5:82:38:24:79:50:a1:87:05:8e:
67:6c:3a:f3:b7:56:fd:3e:36:30:98:46:f3:8c:94:ff:7d:e2:
61:3c:e0:a0:71:12:21:10:79:da:cc:23:c6:37:33:7b:49:e7:
9d:b2:ce:2e:da:86:5c:9b:22:0e:66:b8:06:07:e1:50:89:87:
1a:ea:20:62:83:35:8b:0a:c2:b6:93:e8:52:27:f7:e5:51:2b:
4c:c8:3c:5d:02:58:5e:fc:80:9e:11:73:74:3f:92:32:06:09:
07:11:25:5f:8c:29:84:7a:1e:bc:c5:82:80:fc:0a:c3:84:5d:
b0:70:2f:b8:5f:2d:43:44:9e:b1:26:c4:b8:fa:53:78:28:85:
42:e6:16:c6:cb:70:a0:f9:8a:f7:12:e3:98:05:9e:0c:84:11:
61:69:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:20 2025 by rpki-client