Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/325B16BEF34A11EF8A64E2B1762E951A.roa
File: 325B16BEF34A11EF8A64E2B1762E951A.roa (raw, json)
Hash identifier: GX19UYN03PHzG6S86VXoILrJ1TEEqGVFpo0LLtpKutI=
Subject key identifier: 29:7C:EC:8B:3A:53:19:EA:FA:71:24:13:1D:96:D5:63:DF:6E:CA:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/325B16BEF34A11EF8A64E2B1762E951A.roa
Signing time: Tue 25 Feb 2025 07:29:07 +0000
ROA not before: Tue 25 Feb 2025 07:29:03 +0000
ROA not after: Sat 19 Feb 2028 07:29:03 +0000
asID: 17561
IP address blocks: 156.249.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77230 (0x12dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 07:29:03 2025 GMT
Not After : Feb 19 07:29:03 2028 GMT
Subject: CN=67bd7143-d3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:68:5a:33:f0:0f:40:38:2f:6f:2b:28:aa:
d4:1d:47:f9:da:f7:e5:3f:87:38:49:ac:4e:77:7a:
2b:bd:83:73:5a:6f:78:6f:ec:d3:7d:9c:83:17:cf:
5a:7b:12:fc:bc:2e:eb:14:a8:fd:2d:97:10:52:0d:
e3:3f:48:51:78:b4:60:15:6d:c2:93:cc:aa:54:e1:
d6:5e:07:45:ac:ab:d8:f4:18:fd:cf:32:3d:86:9f:
e3:c1:2a:cf:87:18:f3:62:64:43:82:c3:7b:96:a2:
da:17:0d:17:5f:29:12:fe:1f:24:43:4c:9f:a6:45:
d6:a3:69:e3:bc:1d:d8:dd:bd:17:72:49:51:f2:80:
15:fb:9c:8b:69:f1:c7:99:55:81:77:9e:d9:44:4f:
05:dd:63:a3:93:9e:1b:cb:8f:9d:5e:89:56:19:c5:
9e:a7:e9:ac:4b:d6:63:ed:4c:6c:a4:c2:dd:7b:63:
af:7d:cc:3d:1c:03:be:20:68:ea:a6:eb:28:86:e9:
f6:e4:28:70:cf:4a:18:c6:12:40:fb:1e:1b:3b:83:
11:e9:d4:92:70:e8:ce:28:31:b9:bc:13:36:6a:24:
46:c8:3f:06:86:b7:7c:85:d3:8a:22:12:b1:87:44:
6e:db:ad:29:c9:87:dd:92:b4:15:78:5d:ab:b1:d6:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7C:EC:8B:3A:53:19:EA:FA:71:24:13:1D:96:D5:63:DF:6E:CA:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/325B16BEF34A11EF8A64E2B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e8:cd:89:7e:6f:42:7e:4e:03:a7:bf:5c:7d:7a:a2:d3:bb:
31:91:5d:1d:64:28:1e:44:f0:8b:5d:ae:98:82:c8:69:f9:4e:
e7:32:5b:fb:0c:3b:1e:62:5c:13:d8:0a:c7:1a:e1:7c:b9:14:
a2:b4:2f:9f:a2:18:27:ff:3c:ea:26:1b:4f:8c:79:d7:e1:c2:
f3:48:b0:53:a3:4d:9f:68:10:5f:e6:86:54:29:f1:74:1f:71:
d5:ce:64:3e:96:ab:9c:36:9e:44:4e:2a:14:26:b7:9b:f1:af:
78:b5:0b:57:98:f7:b6:b3:af:33:55:7b:c7:85:cd:3b:70:41:
7b:78:7d:42:cd:10:75:89:43:c3:13:52:f0:a3:45:36:50:b9:
92:d3:b9:93:6a:fd:f4:b2:a4:17:62:72:32:27:3c:c0:75:40:
bd:cb:3b:8e:c7:f3:c9:ff:2d:cf:55:db:65:32:cb:61:c8:b5:
a8:78:f8:bc:1d:9d:d1:8f:9e:17:8d:a8:d7:f6:f0:9d:e9:3d:
b1:e3:53:01:60:fa:4d:8f:2b:b1:d5:aa:0d:09:54:6a:97:f1:
5e:82:0d:f8:cb:6b:be:1b:70:b7:8c:5c:ea:df:8f:47:8e:8d:
d2:7c:09:2d:8b:4a:e0:e7:13:6b:c7:7d:ec:bb:a5:41:fc:cd:
d9:8b:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:50 2025 by rpki-client