Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A4735AEF5D211EFA235009E762E951A.roa
File: 2A4735AEF5D211EFA235009E762E951A.roa (raw, json)
Hash identifier: Oc3xu4wvjYwvEtk7ORXnEeItF4lQ7mGEWRNJwhaQfwQ=
Subject key identifier: 3F:2B:6B:92:06:54:55:98:25:20:66:C2:7D:0D:06:AE:A7:15:0B:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013DAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A4735AEF5D211EFA235009E762E951A.roa
Signing time: Fri 28 Feb 2025 12:47:27 +0000
ROA not before: Fri 28 Feb 2025 12:47:24 +0000
ROA not after: Sun 13 Apr 2025 12:47:24 +0000
asID: 138915
IP address blocks: 156.244.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81326 (0x13dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 12:47:24 2025 GMT
Not After : Apr 13 12:47:24 2025 GMT
Subject: CN=67c1b05f-282f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:63:e5:76:d4:41:7b:e6:92:84:f4:df:e2:
74:8c:f3:b9:c2:57:14:63:19:7f:3d:24:c6:86:7f:
8b:69:44:c4:65:7b:42:77:f5:53:cb:4c:13:19:5f:
e4:0d:da:d4:1a:d9:bb:20:06:5a:e6:15:55:d1:b2:
7d:ae:6c:3a:7e:5e:85:04:21:fc:6c:78:81:bf:de:
a7:8a:e0:ed:33:b9:0e:07:4e:6e:da:29:ef:10:d7:
24:9a:8c:c8:1a:f9:62:85:24:20:03:5e:2c:b2:08:
37:dd:9e:43:f3:7c:9e:fa:17:87:d3:7d:89:22:28:
a5:db:cd:f9:c4:fd:4c:ca:08:63:19:97:f7:7f:2c:
0b:80:9d:6d:e1:73:cd:74:1b:e3:e2:3b:c5:27:97:
ad:d6:7e:1a:da:3c:cd:3f:a8:4e:46:3a:87:ad:13:
bb:63:f3:cb:46:dd:96:ce:af:c0:87:1f:49:cf:4d:
32:08:4f:b2:92:9c:b6:fe:49:dc:b1:b0:ee:3a:fe:
f3:00:5d:4e:1e:bf:f4:db:fd:46:b0:45:55:41:4a:
a0:d0:ca:d7:86:ef:16:d3:a6:e5:28:a9:af:c4:f0:
f7:5d:6b:13:4e:02:ba:d4:37:f6:f5:08:a7:62:8c:
6b:69:dc:36:a2:39:22:83:9d:53:ee:2b:0e:c9:e7:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2B:6B:92:06:54:55:98:25:20:66:C2:7D:0D:06:AE:A7:15:0B:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A4735AEF5D211EFA235009E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.3.0/24
Signature Algorithm: sha256WithRSAEncryption
28:8b:cd:6b:5e:36:51:e5:01:8d:0b:02:f7:c5:ed:30:cc:86:
c5:94:5d:56:61:3d:49:fa:5d:1d:bf:22:d8:c4:99:ea:09:2c:
7b:03:1d:0e:6d:f1:de:e3:41:92:68:cd:39:57:81:19:27:9d:
e0:42:ad:2d:b1:26:ab:a6:d0:fe:0a:96:55:db:39:b1:d6:be:
35:01:42:e1:40:13:d5:5e:13:ce:67:db:04:3d:13:d3:4f:11:
5a:71:cc:c3:a8:82:a4:e8:41:26:fb:55:95:94:87:01:f4:a8:
ca:92:5b:16:57:da:22:f3:3c:36:95:00:19:b5:ad:8b:75:04:
44:7b:ea:c3:09:a2:42:e2:b6:34:0b:79:4f:d4:f2:d5:1f:ea:
d2:b2:6e:63:f1:c2:96:0b:4f:90:0a:56:14:6f:cd:2f:4b:24:
91:cf:34:b1:a5:4d:7e:ea:78:47:fd:df:1b:27:5e:10:36:ae:
e3:a5:45:bb:d1:61:63:9f:8d:d0:c1:02:c2:f3:f9:12:c0:1b:
f1:5a:b5:fe:1e:7c:8a:0c:67:70:e4:14:62:21:21:57:c0:a2:
07:0c:f8:21:31:5c:7d:5e:fe:8f:72:ef:36:16:09:8b:fe:d3:
75:95:3c:7f:6e:42:44:d7:db:61:5e:5e:74:19:12:02:68:56:
07:7e:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:34 2025 by rpki-client