Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38857294F61C11EF80CA2F92762E951A.roa
File: 38857294F61C11EF80CA2F92762E951A.roa (raw, json)
Hash identifier: nMGz73tNB6Vq3GekyjrlvH+wED+AOj8lrOSNP8kOOsw=
Subject key identifier: AD:BB:E4:9D:27:DE:BF:8E:D0:0F:4B:30:9F:F2:7A:E9:B2:14:3B:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38857294F61C11EF80CA2F92762E951A.roa
Signing time: Fri 28 Feb 2025 21:37:34 +0000
ROA not before: Fri 28 Feb 2025 21:37:30 +0000
ROA not after: Sun 13 Apr 2025 21:37:30 +0000
asID: 55320
IP address blocks: 156.244.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81759 (0x13f5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 21:37:30 2025 GMT
Not After : Apr 13 21:37:30 2025 GMT
Subject: CN=67c22c9e-857a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:77:1b:3e:75:d1:6c:e0:61:d9:27:ec:dc:
38:bb:8c:c1:0f:cb:b7:b9:84:ce:a7:37:28:73:74:
c9:c2:3f:01:2b:63:fb:05:56:ac:90:ba:d5:fd:23:
54:7b:7f:99:39:2d:6c:ee:b6:b6:ae:63:63:e9:5b:
8d:4c:dc:fc:e7:be:53:19:7f:de:37:bb:06:39:01:
ad:01:4a:e3:c5:26:49:67:aa:20:32:f6:73:d1:5c:
d0:a4:13:df:4d:e1:79:6a:a6:6c:c3:98:6a:c8:27:
4e:ff:be:6e:e7:05:74:6f:1c:c6:0e:49:f1:34:c5:
f2:ec:2f:6b:c3:c6:97:13:bc:7b:79:e5:5c:5f:af:
b8:6c:a5:1a:e2:10:9f:ce:24:d4:34:d9:de:36:2c:
c0:11:09:1e:06:cb:57:88:58:15:d7:aa:98:7b:2a:
32:07:6f:3a:40:95:5c:d0:a5:3e:9e:bc:d7:9b:60:
f1:c4:32:24:f5:13:de:cc:1b:c8:b3:0e:22:00:98:
a6:85:34:fd:86:1c:5f:ef:5b:d2:bf:de:65:53:2f:
99:b8:00:99:0e:b7:23:31:3a:96:ba:5b:27:91:81:
42:01:88:91:f3:68:fd:8e:22:06:4a:da:4d:0e:3a:
9d:36:b0:21:1c:94:22:21:3d:1b:41:8a:80:06:05:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BB:E4:9D:27:DE:BF:8E:D0:0F:4B:30:9F:F2:7A:E9:B2:14:3B:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38857294F61C11EF80CA2F92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7a:62:cd:f0:a2:38:2f:70:bb:68:eb:34:fe:87:9a:8c:03:
32:28:53:66:6e:66:bd:82:4e:ee:75:4a:22:41:52:6c:35:43:
a6:7d:8f:c3:ea:b9:00:19:e7:28:e9:b7:db:77:e6:cb:e8:60:
06:c9:0e:dd:6a:8c:fb:eb:4f:cd:01:9a:cb:71:8f:d1:35:aa:
50:5b:19:f2:2c:62:08:6d:7f:26:0b:83:91:a2:0d:8e:95:e0:
5c:df:e2:ac:04:cc:78:14:68:af:10:26:04:9c:e3:04:05:32:
13:47:a3:d4:4a:2c:ee:f0:0e:49:5d:d0:07:2b:d7:c7:be:2a:
1e:82:5b:b8:dc:29:d8:c5:35:00:75:08:ad:98:80:cf:9d:43:
18:93:34:c4:25:3d:44:8a:95:3a:b2:98:34:91:68:b9:e7:a3:
43:f4:af:f6:20:54:e7:25:2c:61:9c:be:c1:b5:48:aa:7d:7a:
fc:f7:1f:24:c8:0a:f2:95:49:70:d0:72:c2:71:0c:99:49:ad:
c9:fa:aa:64:6a:4d:f2:ec:74:38:56:d4:19:75:c8:48:15:00:
ee:f1:35:b9:9c:91:4e:9b:de:48:b4:65:e5:a9:28:62:11:d2:
8b:ce:fb:d7:15:56:5d:65:3e:08:c4:4b:e5:e3:e7:b6:8b:6d:
35:6e:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:54 2025 by rpki-client