Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3343482EF5CC11EFB4AE3374762E951A.roa
File: 3343482EF5CC11EFB4AE3374762E951A.roa (raw, json)
Hash identifier: nv3cOKj2v44z0EMaQPCNrofwTOMdgGTSrX8HOXWtcKI=
Subject key identifier: F9:0F:8B:FF:74:51:68:E1:F0:FB:D0:88:DC:CC:77:66:18:F1:5A:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3343482EF5CC11EFB4AE3374762E951A.roa
Signing time: Fri 28 Feb 2025 12:04:45 +0000
ROA not before: Fri 28 Feb 2025 12:04:42 +0000
ROA not after: Mon 31 Mar 2025 12:04:42 +0000
asID: 394432
IP address blocks: 156.252.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81253 (0x13d65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 12:04:42 2025 GMT
Not After : Mar 31 12:04:42 2025 GMT
Subject: CN=67c1a65d-7670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:f4:0d:c5:95:47:12:8b:7a:86:61:8e:d4:
8a:d0:1c:3e:4b:4a:c3:bb:5e:48:54:f4:87:6b:92:
3c:36:ad:16:62:5b:6c:51:66:76:c7:01:32:0a:a6:
82:56:6c:84:cd:b5:b3:1a:d3:99:9b:b0:ad:4b:d3:
59:53:77:f4:55:ac:4e:24:98:34:fc:52:24:d0:d2:
39:b9:3c:56:ef:57:d1:f8:79:fd:80:7c:24:cc:1d:
67:3e:33:6f:d7:1a:32:c5:f4:2f:12:1a:6a:b9:a4:
88:17:54:30:c3:6d:1b:b0:f2:bb:94:e5:98:9d:79:
04:d4:4d:dd:1b:7e:e0:cc:a4:ea:43:6e:6b:7c:5d:
81:a2:5a:ea:aa:9f:19:53:1f:d3:14:4a:67:04:7a:
5b:5b:d7:7a:7c:15:6b:0c:42:87:ca:41:06:e9:d3:
d9:a7:7e:2c:ae:37:68:cf:46:45:e1:71:e7:96:3f:
fd:d3:d6:6b:1d:45:d1:cc:27:a2:d9:4f:ed:0f:b6:
30:fe:53:2f:1c:01:a6:20:3f:88:e4:33:2f:82:19:
6c:32:ff:a6:79:e0:2d:1b:ff:0d:12:75:f6:55:55:
cf:3b:48:42:da:17:c0:af:12:d6:03:6f:9c:95:16:
ed:df:af:72:79:a1:81:89:a4:88:e4:d7:5e:d7:b6:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0F:8B:FF:74:51:68:E1:F0:FB:D0:88:DC:CC:77:66:18:F1:5A:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3343482EF5CC11EFB4AE3374762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.144.0/20
Signature Algorithm: sha256WithRSAEncryption
70:06:c1:6e:f9:ad:d7:6a:d6:b4:b6:f2:fb:25:d7:6d:6a:7d:
89:84:ac:3e:19:6b:6a:5e:9d:21:77:23:db:b5:48:d5:71:9a:
2c:e1:9d:02:c3:9e:25:3e:ca:6b:b7:41:99:be:97:db:14:75:
0d:f3:07:67:da:78:78:b7:e0:77:57:b6:11:41:26:52:d8:77:
fa:81:cf:22:1d:fd:62:ec:e6:4f:c6:48:d7:e5:ed:a9:92:2b:
7b:5a:8f:dc:28:40:70:a7:28:d7:3b:d1:75:32:cf:14:ab:31:
8b:38:f6:69:02:d9:4e:3b:8c:62:8e:00:14:83:94:ad:9c:33:
93:2f:70:da:7f:7c:1e:22:ae:b9:f8:03:7e:7a:d0:c3:ba:a1:
7c:aa:92:3c:29:50:44:e8:fe:1e:72:6b:cd:ca:5a:bc:a0:16:
0d:b2:c6:c3:e9:12:29:81:c7:cf:33:38:40:bd:df:7b:e1:66:
d1:bd:87:a2:ef:f2:1f:42:56:82:11:0c:80:b5:28:cd:18:91:
be:af:2b:78:33:5a:f0:55:b8:0a:04:6e:99:d9:5e:bb:98:38:
b8:b2:c2:ef:f4:9c:e5:48:2d:0e:62:aa:b5:3e:f9:af:9b:92:
ee:44:83:2f:aa:d1:15:8f:8a:d3:e6:e1:09:cc:2f:07:7a:d2:
89:5c:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:47:50 2025 by rpki-client