Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4430C8ACFB3D11EF975F6963762E951A.roa
File: 4430C8ACFB3D11EF975F6963762E951A.roa (raw, json)
Hash identifier: fY+/mhnnKJjSN+3ePMKkOvQibYOmy4kSmuQsRL1eBMs=
Subject key identifier: 77:41:75:67:9C:11:6E:D3:D9:08:5F:19:79:2E:F0:62:F8:5F:77:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014418
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4430C8ACFB3D11EF975F6963762E951A.roa
Signing time: Fri 07 Mar 2025 10:16:43 +0000
ROA not before: Fri 07 Mar 2025 10:16:39 +0000
ROA not after: Sun 13 Apr 2025 10:16:39 +0000
asID: 36137
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.252.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82968 (0x14418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 10:16:39 2025 GMT
Not After : Apr 13 10:16:39 2025 GMT
Subject: CN=67cac78b-1866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:e1:81:6b:46:57:7e:b0:71:40:8a:dc:f4:
94:10:1f:e1:80:ee:54:60:f1:14:49:d1:eb:f5:cc:
54:94:85:ef:4e:c4:d3:a0:22:34:75:5a:c8:ed:f8:
00:64:13:b3:76:dc:00:77:44:f9:24:fc:ba:59:a0:
42:03:c5:b8:44:fc:8b:4d:43:a8:81:2d:bb:08:d6:
d8:e6:9e:95:ce:60:ba:eb:02:77:de:42:7f:45:7a:
45:d3:48:5c:ec:ba:5b:6a:b1:76:df:05:d2:c5:d7:
49:50:22:44:e2:90:63:cc:c3:03:79:92:e2:40:e4:
4c:b3:1c:9a:5a:89:71:48:e2:cd:1c:af:fb:ed:31:
3b:df:de:fe:48:6f:72:ff:1c:55:41:7e:31:6c:b8:
79:25:05:bd:b8:f2:fc:80:b6:ed:29:6c:f0:fa:05:
cb:54:f9:8b:e5:74:5d:8f:4a:21:6f:f2:43:15:5d:
b2:7c:04:7a:a5:6d:07:2b:9a:94:a0:9f:d1:59:c8:
0e:41:32:35:bb:cb:7a:88:73:ca:d2:d6:ec:01:1d:
0b:4b:9f:d9:46:38:ac:db:dd:91:33:d2:16:b1:35:
42:cc:de:b4:31:f8:55:c1:7e:c9:3d:02:ce:06:f9:
72:a3:ce:e8:8c:8b:00:ab:c0:e0:d9:84:4e:a3:28:
ce:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:41:75:67:9C:11:6E:D3:D9:08:5F:19:79:2E:F0:62:F8:5F:77:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4430C8ACFB3D11EF975F6963762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.252.96.0/19
Signature Algorithm: sha256WithRSAEncryption
a8:b2:8c:15:74:1c:57:88:a4:d8:a0:32:e9:fd:4a:ec:49:54:
91:7c:e1:65:d1:9a:16:ca:7a:6d:b1:53:83:58:e8:bf:02:5a:
ad:33:08:94:b0:16:34:cc:6a:a7:2f:b7:16:c1:cf:e8:28:7f:
9c:32:a3:d0:8a:27:95:92:72:66:d8:a2:a7:fe:c8:ba:2e:69:
ca:49:ea:14:00:db:e1:3a:85:30:2f:92:d7:4d:06:f7:ac:e2:
f2:eb:e8:05:2d:0d:3f:d1:00:c9:90:0f:73:9a:63:46:03:68:
39:b9:92:89:87:04:3e:ce:4a:52:24:52:97:39:45:87:87:09:
5b:03:9c:3a:c7:aa:43:74:45:00:04:dd:3b:09:da:a2:9c:3d:
7c:40:d7:d3:80:10:33:2b:0c:0b:70:29:a4:78:f1:08:c7:0d:
07:de:89:3b:b4:cf:3a:50:43:5c:fb:c4:1f:9a:7d:81:3a:be:
e5:4b:fe:aa:0b:2f:3d:98:3e:ee:29:3f:54:96:ae:26:db:8b:
2f:fe:be:a7:c8:db:9a:b0:87:50:49:93:44:9a:d8:ee:87:17:
a8:21:6e:e6:43:d0:7a:a8:cc:99:6b:7e:83:6a:92:e2:80:00:
e9:ac:4f:6f:62:92:6e:f3:95:db:3a:26:14:c2:7d:ad:c7:3a:
34:42:f3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:10 2025 by rpki-client