Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34CA108A057411F09C3F8B91762E951A.roa
File: 34CA108A057411F09C3F8B91762E951A.roa (raw, json)
Hash identifier: okkN55JYKnJ2wuRYI1xoz8B4kgdMWrhS6XiDXYHlOnM=
Subject key identifier: 04:89:24:07:BE:05:93:F4:B5:C1:81:5F:EA:0A:70:01:11:AC:3F:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014718
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34CA108A057411F09C3F8B91762E951A.roa
Signing time: Thu 20 Mar 2025 10:15:11 +0000
ROA not before: Thu 20 Mar 2025 10:15:07 +0000
ROA not after: Wed 09 Apr 2025 10:15:07 +0000
asID: 55020
IP address blocks: 156.241.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83736 (0x14718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 10:15:07 2025 GMT
Not After : Apr 9 10:15:07 2025 GMT
Subject: CN=67dbeaaf-2629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:2d:71:b4:82:a5:6d:f5:c1:9c:71:71:d4:
0e:80:a1:1f:47:fe:aa:16:8b:db:6f:91:2e:b4:bd:
55:8a:ea:06:fd:51:ae:aa:f8:f2:2b:18:52:84:3a:
26:20:93:7e:5f:e7:e5:55:14:44:46:70:b5:46:34:
54:74:58:c4:56:1a:27:5b:5b:91:2c:d0:84:90:05:
5e:37:2a:f5:73:99:25:55:39:f6:91:a8:9a:c1:64:
78:42:86:52:90:19:9c:08:4b:09:3a:5d:fa:5e:5b:
f6:47:08:4e:a0:67:59:cd:5f:a9:1d:09:6b:2d:a7:
61:85:b1:1b:27:76:9f:68:7f:cc:95:0f:b3:a2:24:
91:92:ed:ae:c4:98:4c:a7:a5:df:57:3a:7c:73:0d:
35:6a:42:bb:d6:4c:2f:8f:e8:91:3e:79:17:4e:d0:
85:fd:39:c4:de:5d:c5:f4:2c:1c:b2:7b:df:d6:85:
40:6f:98:d8:5a:31:83:a8:05:23:31:ed:f6:eb:a0:
a5:08:1c:16:25:60:cc:bc:d9:f8:d3:96:08:53:37:
8c:a1:3f:39:b3:36:00:df:e5:dc:8c:c1:86:f9:77:
77:6d:5d:a9:90:77:5f:98:3b:ee:7e:55:f5:e5:7e:
68:6e:60:9e:17:33:f5:a2:53:ed:58:0d:64:0c:a5:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:89:24:07:BE:05:93:F4:B5:C1:81:5F:EA:0A:70:01:11:AC:3F:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34CA108A057411F09C3F8B91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.128.0/18
Signature Algorithm: sha256WithRSAEncryption
24:64:dd:25:f6:4b:19:9c:b9:78:77:0d:6c:68:3c:4e:b0:76:
f7:68:3b:b7:6c:92:7a:cd:86:3b:ac:b9:98:9d:5b:3d:a6:bf:
37:d6:cf:1f:d0:68:39:b8:83:64:fd:dd:72:60:3f:6b:fe:7c:
be:bf:ac:ce:c1:0c:aa:3d:73:07:a2:b3:69:bb:4f:1c:b2:28:
e0:1d:8f:58:e1:48:09:c1:95:55:28:7d:4d:52:ec:c1:71:19:
ab:89:d3:19:6e:f9:90:e6:67:e2:96:57:0c:94:42:cb:34:16:
8e:09:4e:12:d8:c9:97:05:8e:de:04:2e:04:46:3a:59:2b:56:
fb:ef:b6:97:23:56:b9:1f:88:ae:75:5b:26:c1:79:a1:2d:53:
54:92:1b:81:23:66:15:9b:d1:7b:32:d8:64:c5:a4:4f:53:d9:
89:5f:cf:2f:2c:3e:8e:f3:4b:ce:9e:67:29:ea:44:bf:c2:0c:
83:ab:bc:54:a8:32:ac:1f:a9:c1:8c:63:eb:6e:92:52:75:e4:
bc:3d:6b:48:1c:5b:b2:82:d5:2f:2e:2a:bf:9a:06:52:80:af:
c5:bb:85:ac:38:c5:48:02:58:a6:14:2e:31:9c:83:62:81:a1:
37:7c:84:76:9d:2a:93:c4:73:68:67:79:97:5b:79:00:cc:06:
44:0a:67:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:30 2025 by rpki-client