Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DE85FE4FB3C11EF8A99925C762E951A.roa
File: 1DE85FE4FB3C11EF8A99925C762E951A.roa (raw, json)
Hash identifier: zeC8LM1oru+tzdrecRTWtT95e0tsK1Wq2LugAATzNl0=
Subject key identifier: D4:8C:2B:CA:49:B4:9C:F4:C5:7E:49:6D:8F:CF:93:0F:D7:8E:E9:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014414
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DE85FE4FB3C11EF8A99925C762E951A.roa
Signing time: Fri 07 Mar 2025 10:08:29 +0000
ROA not before: Fri 07 Mar 2025 10:08:25 +0000
ROA not after: Sun 13 Apr 2025 10:08:25 +0000
asID: 399195
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.252.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82964 (0x14414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 10:08:25 2025 GMT
Not After : Apr 13 10:08:25 2025 GMT
Subject: CN=67cac59d-8e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:43:62:50:30:1b:37:20:c5:1e:8f:5c:50:
55:6c:b7:a2:c5:45:18:c0:72:80:52:44:0d:d1:50:
11:ef:49:fd:e2:85:46:b0:47:fa:95:e5:40:78:e4:
43:1b:87:d0:23:ca:a4:c2:5c:d1:6a:67:8f:e7:65:
b1:94:c1:80:52:82:55:f9:44:b9:79:27:2f:d7:a1:
49:5e:cb:26:d2:ef:1a:e9:df:25:1b:ba:48:38:40:
c2:f3:39:c8:20:35:21:09:bf:ba:a2:50:81:9e:fb:
fc:9b:2a:a7:6f:4d:56:20:af:0e:75:0f:3e:6e:cb:
b9:00:14:c7:4c:e9:87:fd:7a:62:5c:bd:ad:a0:74:
20:dd:21:fe:46:60:6b:93:3a:9f:ee:c7:0d:15:19:
06:1d:79:7c:0e:8f:e6:9d:70:ea:2f:01:48:a0:dc:
a7:9f:8d:b8:f2:4d:32:7e:90:d0:4f:66:a6:89:f8:
7b:33:67:71:6c:fd:36:c0:c0:5e:3e:e3:01:d1:33:
1a:c3:4d:bc:5c:a6:a8:3a:ce:5e:2d:61:62:43:bd:
f1:a3:f0:eb:fe:6b:c4:db:13:57:6a:97:f1:ba:4c:
12:ed:bf:52:59:6d:fa:eb:7d:d1:7f:85:8e:47:14:
7c:da:d2:29:92:91:c6:19:7d:f1:a8:13:1a:67:90:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:2B:CA:49:B4:9C:F4:C5:7E:49:6D:8F:CF:93:0F:D7:8E:E9:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DE85FE4FB3C11EF8A99925C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.252.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:c3:d3:6e:f1:e5:c7:64:a0:d1:a6:12:e6:36:d5:de:03:a5:
38:82:ac:fd:22:5c:c8:81:14:e2:3b:ef:41:83:71:b3:d0:33:
ce:3e:59:85:2a:e1:53:47:eb:12:2f:0c:1f:06:a1:d9:5b:ec:
aa:58:2c:87:c7:e4:62:98:e5:ff:ac:65:c9:32:9a:fa:ed:68:
58:45:3f:f1:4b:53:01:42:d2:68:d8:c2:92:5c:f6:39:07:0c:
62:8f:3b:f8:12:c1:30:af:b6:9b:e6:20:d9:69:ba:8d:a2:d2:
5e:44:af:47:de:18:b1:4f:53:24:cd:ec:d9:aa:0d:00:20:46:
e8:13:0f:5e:ec:e2:02:3b:d4:65:b3:e2:06:53:c0:2d:84:a5:
e7:a8:e6:86:54:2a:46:0e:f0:2e:de:a9:89:cf:97:35:db:a8:
f6:4f:5d:88:d3:ba:0e:4c:0a:01:d7:62:2a:ae:dc:fd:33:5e:
08:ba:94:20:3b:8e:15:dc:c6:09:75:2e:a4:8b:ec:45:61:20:
0c:7d:6c:fd:70:96:f1:e4:a8:04:49:71:1f:03:7e:3d:9b:15:
8b:a6:b4:9d:30:56:fc:bd:0f:0c:13:ef:62:55:99:38:9e:89:
3f:12:bf:08:e4:6a:8f:70:fb:cd:26:db:bc:e9:8a:cb:82:f3:
8e:d9:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:08 2025 by rpki-client