Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DB061A8057B11F09A2590BA762E951A.roa
File: 2DB061A8057B11F09A2590BA762E951A.roa (raw, json)
Hash identifier: iONnu0ZXt3ZHzcPl/jtYS5nyGUHa6YnLKDZcp6X/JF4=
Subject key identifier: 65:C0:FD:6F:D2:6B:93:C1:8C:A7:7F:9F:E4:14:C3:78:4D:19:1B:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01472C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DB061A8057B11F09A2590BA762E951A.roa
Signing time: Thu 20 Mar 2025 11:05:06 +0000
ROA not before: Thu 20 Mar 2025 11:05:01 +0000
ROA not after: Wed 09 Apr 2025 11:05:01 +0000
asID: 62610
IP address blocks: 156.241.129.0/24 maxlen: 24
156.241.133.0/24 maxlen: 24
156.241.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83756 (0x1472c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 11:05:01 2025 GMT
Not After : Apr 9 11:05:01 2025 GMT
Subject: CN=67dbf661-719f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:1c:03:72:85:9d:81:8f:17:00:d3:06:11:
0f:e9:e2:a2:9b:34:b9:40:1d:ea:31:d1:23:83:70:
a5:4d:82:6a:1a:3f:9f:3e:7f:58:e2:09:db:ba:f4:
5c:3b:d1:da:01:db:a4:23:5b:47:de:3a:e3:46:e3:
d1:65:67:a8:d5:98:2a:77:7d:1d:df:2b:10:c2:f6:
b5:58:f1:3a:ba:2a:fe:45:e2:55:f2:42:cb:d8:0c:
c8:6d:49:c7:2c:1b:2d:d8:89:05:b7:2d:54:62:c0:
b4:fa:07:fc:86:9e:e9:04:07:16:62:7b:ce:55:8b:
c3:de:e5:f1:70:80:b3:d6:92:81:de:18:53:ce:4d:
18:19:d1:31:9c:62:3d:11:d8:90:14:2d:17:bc:cd:
32:f1:fc:1c:91:0e:0c:f9:4a:8a:34:a8:1b:03:bb:
f0:f7:a4:5c:e5:e8:29:82:d9:94:e4:d0:73:61:98:
2a:f8:5c:23:7c:09:f9:88:45:69:c1:ca:5e:63:7a:
3b:f9:dd:b1:e3:95:4d:44:4a:ad:dd:ca:18:50:7f:
5c:8f:cd:44:5b:93:3b:fc:de:56:45:ec:0a:c8:e7:
03:d7:9f:9a:4e:ab:0c:71:f6:34:90:96:63:84:f9:
84:26:a8:55:ec:6c:ac:66:a0:26:ae:f6:c8:63:16:
2b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C0:FD:6F:D2:6B:93:C1:8C:A7:7F:9F:E4:14:C3:78:4D:19:1B:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DB061A8057B11F09A2590BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.129.0/24
156.241.133.0/24
156.241.135.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ab:2c:7f:dd:85:9b:8f:a5:d7:1c:3d:3b:1b:84:1a:e6:28:
3a:ce:51:5f:5a:6a:e3:f2:79:40:23:44:e2:50:d3:c7:c6:17:
4d:46:84:19:d1:6c:11:ae:bc:5b:8c:ea:c7:97:d1:1d:99:78:
55:ce:a2:0a:08:17:39:28:ba:bb:ac:11:8c:f0:5c:e5:f9:c9:
3b:ee:92:b1:da:ab:16:01:e1:00:3c:6e:5c:6d:fd:8d:af:ad:
93:b6:44:b9:83:53:2b:88:7e:9a:4a:2b:54:15:10:ce:c0:93:
6d:4d:e5:42:3a:bd:6f:19:58:51:e0:58:b7:db:c4:2b:a5:36:
8c:c0:c1:e4:65:92:f8:4e:4e:af:e8:80:da:41:78:54:f1:f1:
01:49:1e:be:28:66:5d:52:57:e6:fb:ec:d7:23:c0:62:0f:43:
ce:59:cb:11:26:ce:4f:a6:46:d2:3f:39:9e:05:a0:9a:58:87:
30:6b:d4:2e:96:9e:f7:92:4a:02:ff:5d:7a:7d:14:e6:6f:20:
e8:6d:ea:e0:84:a9:fb:7c:89:82:33:43:80:66:ff:10:5f:f1:
84:08:b3:52:91:f9:73:95:2a:e0:d6:c9:e2:e6:4a:4b:8e:af:
24:8e:df:1a:49:3a:69:39:88:b4:6e:5a:ee:93:58:b6:ea:70:
c6:71:ed:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:41 2025 by rpki-client