Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DC2BE82F47111EF80CAF99B762E951A.roa
File: 1DC2BE82F47111EF80CAF99B762E951A.roa (raw, json)
Hash identifier: BdSMY+eQNuH2NiFzAiIWI2hi9Gp/KK+i79lUquh+n9g=
Subject key identifier: 4A:37:53:37:C3:FA:18:77:95:B4:01:5D:32:8B:BE:35:66:EB:AA:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013685
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DC2BE82F47111EF80CAF99B762E951A.roa
Signing time: Wed 26 Feb 2025 18:40:14 +0000
ROA not before: Wed 26 Feb 2025 18:40:10 +0000
ROA not after: Sat 19 Feb 2028 18:40:10 +0000
asID: 17561
IP address blocks: 156.233.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79493 (0x13685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:40:10 2025 GMT
Not After : Feb 19 18:40:10 2028 GMT
Subject: CN=67bf600e-0d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:b3:75:66:00:84:d3:33:c4:dc:ce:91:64:
d5:07:5c:16:dc:c2:83:87:cb:27:15:14:a3:b9:c6:
2e:61:69:22:dc:81:12:29:8f:04:6e:99:66:68:95:
c0:5a:79:1b:97:56:03:4d:27:25:f7:80:f7:76:ea:
e3:6d:64:c7:c0:a8:7e:ab:01:7e:c5:5f:ea:41:16:
f2:f9:64:d6:46:41:12:37:c0:5f:b6:f3:71:b5:4a:
0b:f5:7a:32:0c:83:58:c0:59:15:25:1b:9b:b5:72:
17:58:9d:b7:71:3d:7c:62:ef:97:fa:a7:2f:af:36:
56:60:8d:b1:46:9c:2a:0d:aa:7c:a4:c1:f0:5a:42:
46:77:15:ca:90:bb:99:da:d5:28:a3:3d:71:66:4b:
cc:0e:d9:86:09:95:63:da:17:ac:b7:48:c7:20:3a:
ee:12:3e:05:ff:16:0b:87:e2:a5:79:80:59:9a:5b:
86:97:60:70:64:31:da:16:3c:a3:fb:2e:b1:41:d4:
47:42:d9:7f:f4:e6:a3:36:5f:00:67:36:05:d2:11:
ef:78:53:3b:48:0e:49:56:12:11:87:4f:d9:3d:23:
cb:ac:c7:6e:82:43:95:ea:1b:ee:1a:57:e0:41:e2:
30:b9:43:63:cb:4c:0f:3b:bc:03:f1:da:12:f6:65:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:37:53:37:C3:FA:18:77:95:B4:01:5D:32:8B:BE:35:66:EB:AA:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DC2BE82F47111EF80CAF99B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:59:97:1c:6f:63:83:59:ff:3a:0c:03:a2:0e:f3:f4:1c:b2:
84:06:a6:b5:50:57:9f:6d:f9:c9:09:dd:ac:09:73:81:d7:2d:
1d:3c:e2:e7:25:9c:73:25:57:ab:82:3f:41:9b:03:97:d1:81:
0f:20:47:09:58:d9:23:16:99:47:70:d0:73:33:2c:e2:b3:0a:
67:b6:58:58:69:68:13:1f:8c:60:01:16:1a:d3:a6:da:9c:64:
b4:dc:7e:5a:5e:4e:c0:14:54:34:e8:c6:50:ea:71:fd:bc:d1:
93:01:db:33:5c:51:97:03:48:2a:f0:ae:0a:f5:11:27:02:e1:
5e:42:70:f2:05:e9:41:cd:c8:b5:70:66:62:0c:f9:f6:df:21:
02:20:ac:35:41:a5:13:3f:0f:03:0b:80:ef:55:f4:38:a3:d7:
a9:9b:9c:4a:8c:d1:30:36:a1:06:60:82:45:a6:99:7f:e6:a8:
08:d7:9e:5f:40:ff:45:b8:93:c3:88:5f:97:a9:17:7b:3b:fd:
fb:0c:60:e4:e6:10:f2:0e:20:f0:5e:51:56:5b:a1:ff:69:d5:
3d:9f:5e:ea:f2:f1:eb:e9:04:54:e0:18:c3:2e:86:31:55:2d:
27:f8:8e:d9:b5:48:e6:2d:c6:19:9a:48:d5:d6:02:e5:9c:8e:
cf:09:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:56 2025 by rpki-client