Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/470FA530E00211EFB4D87EBF762E951A.roa
File: 470FA530E00211EFB4D87EBF762E951A.roa (raw, json)
Hash identifier: iFQrP66i4pedkDfS4MJyEIJU0ZlHUbxeorAEnOLwQWg=
Subject key identifier: 89:12:53:06:B9:CC:50:12:08:82:B3:BF:DE:A2:F0:86:5E:E1:E4:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/470FA530E00211EFB4D87EBF762E951A.roa
Signing time: Fri 31 Jan 2025 18:36:26 +0000
ROA not before: Fri 31 Jan 2025 18:36:22 +0000
ROA not after: Sun 11 Jan 2026 18:36:22 +0000
asID: 399077
IP address blocks: 156.248.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71413 (0x116f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 18:36:22 2025 GMT
Not After : Jan 11 18:36:22 2026 GMT
Subject: CN=679d182a-be49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:17:ab:67:18:15:16:5b:f3:c1:64:ab:73:
a3:8a:61:fa:f0:2a:9b:61:c5:ab:6b:bc:e5:8f:49:
ac:04:11:b6:6b:fc:be:d2:7e:cc:68:33:b9:b5:85:
3f:1c:a8:16:59:00:b0:1d:82:df:ab:21:60:9a:67:
39:77:c1:54:b6:4e:ee:35:cc:3f:f4:cc:7f:22:b7:
54:b5:88:f0:90:f8:cd:a1:20:a9:ac:0c:36:2b:df:
22:ff:e5:e0:a5:a2:e2:82:3d:64:72:53:d1:a0:bb:
7b:f6:79:e6:c3:75:f9:da:19:fd:08:61:34:ac:25:
30:cb:bf:73:bd:e7:ed:ab:e6:ab:ac:a6:da:79:57:
de:f5:66:91:dd:87:2e:96:18:a2:65:89:ae:0e:b8:
57:fc:c7:bd:3e:eb:bb:3a:3a:5c:d3:f4:2d:a2:24:
7f:dd:09:47:7b:3b:3c:f3:4f:bb:17:b2:a0:64:d4:
0c:90:db:83:19:32:28:6e:c2:fe:c5:65:b5:f1:a1:
0c:25:99:16:a1:4d:63:d6:17:de:8a:0e:86:b4:4a:
b8:ec:a0:18:38:3d:9b:4f:d2:48:bf:b6:07:7e:65:
63:c2:10:e4:f4:a2:98:bb:43:23:f9:41:cb:2d:8b:
2a:9d:db:c9:9f:f9:93:16:66:c9:db:fd:a0:0a:23:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:12:53:06:B9:CC:50:12:08:82:B3:BF:DE:A2:F0:86:5E:E1:E4:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/470FA530E00211EFB4D87EBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.73.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ca:2d:06:2e:33:f3:c1:5f:c1:72:e3:d0:3c:ff:92:41:ae:
38:5c:a7:20:a2:7c:b3:09:5c:31:0e:1d:e4:a7:8e:c0:ca:a1:
47:ff:fa:ad:36:93:a9:68:d2:35:d6:95:ea:f7:6c:b7:e4:ad:
bf:b9:86:b5:a6:fa:e1:eb:ba:da:d3:58:b5:26:e2:94:69:f1:
51:e4:b8:47:6c:10:5c:b5:b5:19:e3:cf:6b:12:a3:f2:68:d5:
e1:d4:98:38:51:dd:82:d8:f8:75:01:7f:78:c5:09:2f:4b:ea:
74:7e:d5:a9:12:39:c0:a8:82:6d:18:dd:88:dd:49:25:c5:d9:
85:d9:c4:ff:4a:87:99:5f:ce:3c:7a:52:f3:3a:1b:c8:1c:fa:
ef:0e:3a:18:73:c4:3a:e4:c4:b6:9c:d6:44:ea:18:ec:e4:01:
8c:c5:ed:32:d8:eb:1a:32:09:eb:ca:dd:bb:35:51:bc:64:fa:
8b:e0:7f:fc:c2:8f:56:8f:3b:d6:04:1f:80:61:ab:bd:f3:a8:
2b:21:29:2b:84:e9:13:c3:5a:90:7d:ea:25:38:6b:fb:4c:81:
2b:26:06:3f:79:8d:57:e9:5a:e7:c6:12:fc:60:95:2f:e6:00:
f4:24:5e:99:b7:e2:b3:fe:51:19:6c:0e:98:b7:92:e0:48:45:
f6:a6:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:08 2025 by rpki-client