Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/103FD632F16F11EFB0E9C66D762E951A.roa
File: 103FD632F16F11EFB0E9C66D762E951A.roa (raw, json)
Hash identifier: ebkhUBC20MIifLeGeMxDhuu0iPm1gByVqNiNIxMbGQk=
Subject key identifier: 6C:E8:E2:D3:26:D1:59:BB:A8:70:3C:8C:A8:AA:C3:F0:BA:70:97:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0129BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/103FD632F16F11EFB0E9C66D762E951A.roa
Signing time: Sat 22 Feb 2025 22:47:59 +0000
ROA not before: Sat 22 Feb 2025 22:47:55 +0000
ROA not after: Sat 05 Apr 2025 22:47:55 +0000
asID: 134823
IP address blocks: 156.234.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76221 (0x129bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 22 22:47:55 2025 GMT
Not After : Apr 5 22:47:55 2025 GMT
Subject: CN=67ba541f-bfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:93:8f:21:a4:db:63:83:90:6b:75:ad:01:
55:cb:b1:56:7d:49:56:a9:0f:63:5d:f5:b4:31:4b:
1a:df:49:01:aa:04:ce:8d:fa:66:78:9b:35:a3:af:
d0:ea:0b:f3:36:a6:80:09:dd:82:a7:36:ad:bd:bb:
00:74:34:7f:5c:47:10:7d:98:73:2c:ab:18:79:c3:
8c:f7:38:76:61:7f:47:98:4a:34:e4:c2:3d:df:0e:
ca:a1:e6:1a:4e:db:4e:44:7b:82:5e:50:8d:d4:e1:
44:b2:f2:13:0f:30:a3:0e:b4:49:8c:31:8b:50:52:
5f:91:39:59:bc:cd:ea:d5:ba:ae:35:42:2a:bd:fc:
81:30:9d:1c:f3:44:88:33:f1:d3:c8:5e:68:68:82:
6d:f2:97:4c:1b:ff:14:51:54:90:aa:c0:4c:07:fe:
15:af:72:78:89:86:f4:85:ea:f7:a9:6a:6d:98:76:
2f:ed:92:ba:6f:71:f2:46:6d:1f:53:54:18:a4:04:
a7:60:a0:b3:bf:ae:d7:71:6c:ad:ab:cf:5f:9f:89:
ee:00:b5:e6:2a:58:43:aa:22:7e:1d:57:a4:dc:b6:
0f:b7:e8:df:44:b1:60:5e:b0:ca:2a:92:48:f5:d8:
04:a5:2a:77:3d:58:94:f7:12:43:c2:24:2f:4f:4f:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:E2:D3:26:D1:59:BB:A8:70:3C:8C:A8:AA:C3:F0:BA:70:97:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/103FD632F16F11EFB0E9C66D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:6f:c2:3d:ad:1f:a6:9f:c3:8b:3c:66:6c:26:9e:85:81:60:
80:75:cf:32:aa:4e:82:08:03:d0:e1:91:42:55:78:77:b8:e3:
e4:16:c4:68:38:5e:ab:5a:fb:ce:76:cf:ef:c0:70:14:d8:21:
51:e2:ca:73:ac:29:36:ca:8d:df:24:bc:a5:f5:7b:fe:22:e5:
14:6c:c8:88:5e:9d:45:8c:ec:85:1c:93:41:c3:3a:02:4c:b3:
f3:42:01:6a:84:c7:b4:0e:93:a5:67:14:76:63:63:95:44:0f:
7d:c5:83:0d:3c:fb:fc:15:9d:85:e9:98:7b:59:97:67:6f:79:
0a:ac:af:63:a6:00:8a:3d:ac:1e:60:4d:38:32:0e:77:3e:a6:
1a:89:04:37:90:cf:67:ac:52:d8:c0:ec:f5:58:ef:fd:a5:88:
39:da:81:1d:81:ee:4f:64:05:45:a2:63:f9:5e:cd:23:7a:14:
ce:39:9e:4b:39:7b:e6:46:3f:ac:8a:7a:68:11:ef:5c:90:bb:
62:69:f5:b0:46:e8:c3:80:77:ee:20:ec:db:4b:d2:73:17:5e:
5b:5e:fc:4a:79:84:7c:14:1d:0a:57:90:3f:10:6c:ea:d8:d6:
b2:5a:72:fb:58:27:e5:f9:7e:08:3f:7c:38:f7:96:e5:a8:8e:
c9:4f:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:38 2025 by rpki-client