Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17691950F5DE11EF8E348F70762E951A.roa
File: 17691950F5DE11EF8E348F70762E951A.roa (raw, json)
Hash identifier: hQ9NKI+i3V0k9drWLVpCWghd5E49c+1ZaEh4X6Sfc0k=
Subject key identifier: D8:99:62:82:39:51:8A:39:1A:23:CF:5E:57:DD:4D:97:57:F1:30:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17691950F5DE11EF8E348F70762E951A.roa
Signing time: Fri 28 Feb 2025 14:12:50 +0000
ROA not before: Fri 28 Feb 2025 14:12:46 +0000
ROA not after: Sun 13 Apr 2025 14:12:46 +0000
asID: 138915
IP address blocks: 156.244.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81454 (0x13e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 14:12:46 2025 GMT
Not After : Apr 13 14:12:46 2025 GMT
Subject: CN=67c1c462-baa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:c0:01:ed:28:a2:82:ca:8f:0c:b8:02:be:
85:b5:81:dc:eb:df:bc:fb:21:9d:e7:1f:05:99:59:
e5:98:24:cc:79:0d:52:eb:b1:59:84:51:67:8a:14:
04:ca:ce:7a:c6:ee:cd:bd:13:7e:3e:41:9d:b2:35:
dd:4f:b4:f8:f2:83:cb:67:7b:c3:9b:70:68:32:4a:
95:e9:15:3e:70:d8:40:0d:3c:f2:da:64:08:13:35:
68:76:17:9b:31:74:db:2d:e1:3d:9c:ef:f3:89:49:
fd:40:fd:84:88:26:04:a4:75:52:7e:50:06:86:9b:
e9:20:67:5a:a5:38:25:4e:a7:9c:96:08:cc:22:4a:
3e:8d:5e:0c:25:2e:24:94:8d:30:74:a1:12:07:43:
46:60:55:a5:b6:0d:f1:52:81:c8:3a:19:3f:06:48:
b0:15:c0:fe:1d:3c:62:bf:69:25:41:df:41:74:d4:
b3:ee:70:10:95:7c:68:27:01:3d:60:b6:e1:a6:89:
b7:5c:3d:a8:9b:fb:96:47:ef:bb:fd:14:b5:eb:df:
ff:19:8e:71:96:ae:95:2f:2f:c5:20:48:3b:5e:9e:
44:97:bc:1a:30:6a:85:34:97:52:26:63:be:c1:1e:
cb:12:96:91:58:c5:2b:9e:82:1f:40:83:18:b8:01:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:99:62:82:39:51:8A:39:1A:23:CF:5E:57:DD:4D:97:57:F1:30:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17691950F5DE11EF8E348F70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a1:8d:59:81:ff:a6:0e:87:21:19:a4:55:4f:8b:2e:7a:0b:
d6:06:2a:ef:dc:2e:6c:a9:75:13:15:9c:ff:df:25:64:60:45:
f1:b7:8a:5d:b1:a9:80:b9:17:45:fd:8e:8e:0d:a6:12:ee:a4:
b3:34:fe:fb:9a:f0:bd:9d:c5:16:31:ac:00:96:e8:f0:0a:f9:
ef:ec:56:f3:e6:32:26:20:f6:57:02:b1:92:70:08:21:2c:a9:
7e:2f:6f:f6:ad:de:ab:89:f1:7a:48:8a:28:e7:56:9d:ee:7a:
ae:e4:aa:ec:38:aa:22:48:94:01:bb:24:17:52:df:0e:15:16:
5f:bc:b1:f9:b9:8b:ef:d8:27:97:70:23:a5:5a:46:54:d3:2d:
69:49:a6:3d:b6:26:50:09:5f:5f:ca:64:2b:2c:85:ca:ab:0a:
12:b3:6f:50:a6:b3:5e:d4:41:49:2c:12:24:26:d1:0b:5f:7a:
d9:cb:5d:84:d0:05:80:aa:ba:1e:e3:7d:be:85:1b:88:65:e4:
c3:79:7f:11:89:5b:18:91:6a:40:80:b8:c5:7d:11:a9:17:f0:
02:7a:80:51:a5:20:02:3b:3d:02:51:12:cb:b7:ac:b5:4c:78:
24:49:2e:37:c3:9d:39:90:af:b6:04:6e:a3:9f:ed:0e:17:22:
64:97:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:33 2025 by rpki-client