Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2410F6B6F46511EFAE35F349762E951A.roa
File: 2410F6B6F46511EFAE35F349762E951A.roa (raw, json)
Hash identifier: neUl1x0OOo2GZKSjPaRrtT9Os5k24MpJd8l6fkNxKCE=
Subject key identifier: 5E:83:3A:6F:AE:94:81:69:C4:91:D5:DA:33:3C:FA:0E:DA:CF:FB:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01356F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2410F6B6F46511EFAE35F349762E951A.roa
Signing time: Wed 26 Feb 2025 17:14:31 +0000
ROA not before: Wed 26 Feb 2025 17:14:27 +0000
ROA not after: Sat 19 Feb 2028 17:14:27 +0000
asID: 17561
IP address blocks: 156.250.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79215 (0x1356f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:14:27 2025 GMT
Not After : Feb 19 17:14:27 2028 GMT
Subject: CN=67bf4bf6-849a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:ba:b9:d7:c5:f9:34:db:f0:56:5e:c0:65:
b6:b5:4b:4c:b4:d6:66:5d:22:ba:71:f1:d8:e1:e3:
27:30:1e:ef:8b:2d:eb:01:6e:8b:84:10:72:3d:ce:
14:cc:1c:d9:3a:87:5e:56:ff:86:10:18:49:b0:79:
95:ea:4d:e7:56:8b:ac:73:81:c4:21:1d:8a:ca:f1:
be:d1:e5:d4:e2:9d:19:f4:96:83:85:12:55:e7:08:
da:6f:3c:8b:74:f7:32:00:55:e8:dc:60:8f:63:8a:
5a:63:88:fb:e0:ed:91:5f:58:e0:f9:b6:fb:d4:c0:
8e:1d:28:b5:b7:70:f5:cb:68:9c:65:7d:29:f8:c3:
27:4d:91:34:39:b2:98:c9:c9:0e:35:98:19:75:f4:
8c:b8:a0:de:61:9d:b8:90:ac:c7:1c:94:4a:50:b5:
1c:b8:40:15:43:8e:6b:db:3d:43:63:df:15:d9:c7:
48:9e:db:59:ae:f8:a0:cb:c6:ce:27:3b:8e:50:9b:
ee:2c:c0:3e:7b:86:f4:d4:50:88:8f:0a:3e:07:d8:
02:83:c2:b6:03:8e:8e:cd:ae:a0:33:d8:97:7a:69:
52:52:3a:7b:6b:18:bf:03:5d:83:18:ee:b9:c0:31:
13:ea:0a:6b:be:1e:60:8a:ef:02:36:c3:17:93:2c:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:83:3A:6F:AE:94:81:69:C4:91:D5:DA:33:3C:FA:0E:DA:CF:FB:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2410F6B6F46511EFAE35F349762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.57.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1d:73:2c:42:66:23:cc:1e:06:7b:e0:b6:eb:6e:2f:65:2a:
40:4c:b2:20:58:1e:55:b1:f0:bb:73:8e:5a:af:10:28:50:c3:
9a:e1:1b:75:11:89:8d:e0:2d:a8:16:87:22:86:67:7f:4a:42:
d1:3e:be:b6:57:c8:f3:f2:d4:ae:80:c2:af:76:5f:32:cd:15:
6e:2d:08:21:04:20:10:e4:6f:00:50:3c:e1:80:b6:5f:65:9c:
aa:88:50:6f:6f:c8:78:99:5d:fd:6f:55:bc:6f:a4:c8:84:87:
bc:04:b6:78:07:e9:52:b5:75:2e:41:d4:f0:83:ff:96:7e:0a:
b4:95:f3:45:50:75:46:b8:f3:11:3e:69:60:da:76:bf:2b:3a:
80:7f:cd:82:8d:d8:cf:48:98:a0:08:bd:ed:22:b6:a2:e8:91:
64:ac:0d:62:b2:53:ae:90:a2:11:c6:8f:73:a9:7f:89:10:71:
2e:35:bf:59:7d:ec:24:92:7e:7e:47:11:6e:3f:ac:1f:d8:06:
30:02:35:8c:ed:52:8e:78:20:bc:bc:4a:31:9a:8f:a6:c7:7e:
47:79:44:d5:7f:0b:d2:ad:a4:6a:4e:f2:7e:2c:af:7c:a3:36:
ee:ef:b3:24:19:f2:b6:c4:02:49:27:d3:a5:55:09:5a:c1:41:
d8:78:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:51 2025 by rpki-client