Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EF18A96F5E411EFA18C0C9A762E951A.roa
File: 4EF18A96F5E411EFA18C0C9A762E951A.roa (raw, json)
Hash identifier: Zipc1/fmvP7Q/KdBbid8BxKbT0RdxSZbXYlJ3R9NnfQ=
Subject key identifier: 64:F2:3D:95:D6:16:EF:01:D3:DA:21:B8:E4:E5:3B:90:45:BA:D3:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EF18A96F5E411EFA18C0C9A762E951A.roa
Signing time: Fri 28 Feb 2025 14:57:20 +0000
ROA not before: Fri 28 Feb 2025 14:57:16 +0000
ROA not after: Sun 13 Apr 2025 14:57:16 +0000
asID: 138915
IP address blocks: 156.244.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81533 (0x13e7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 14:57:16 2025 GMT
Not After : Apr 13 14:57:16 2025 GMT
Subject: CN=67c1ced0-42be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:77:41:97:80:1d:db:2b:b7:5a:20:58:1c:
95:3f:3e:c1:08:65:14:43:bc:58:1c:b5:25:6b:33:
94:e1:1d:0d:63:e6:fe:31:03:4b:15:f3:b7:98:78:
74:a8:46:b4:ab:30:c0:4b:f9:8d:75:11:1b:a3:0a:
8c:2f:4a:a3:9f:ad:3d:4d:29:a8:85:64:84:56:8c:
d0:62:69:8a:87:af:ab:e0:26:6e:ff:64:ba:45:f0:
c8:67:4a:2f:72:ac:d7:84:4b:ac:ef:d3:29:5e:4b:
f8:15:d9:26:1f:3d:f5:9d:f8:27:9a:09:31:a7:54:
56:b9:aa:2d:d4:8c:78:c3:dc:f9:54:5a:84:b7:22:
d9:8b:d4:82:fa:52:de:f8:af:b9:7f:44:df:42:c5:
9b:a3:cb:40:17:99:1d:49:c0:16:9f:f8:4c:ff:13:
e1:19:16:19:cd:2f:0c:ba:49:c9:33:c1:d2:5a:bb:
c8:3d:2a:3d:67:ee:54:e7:92:7b:38:19:5a:be:a6:
d4:94:19:c6:01:0e:21:a6:87:73:5e:a2:d3:4f:e8:
cb:61:ab:00:8b:d2:b4:8e:23:cd:ce:3f:24:b4:8a:
4f:92:ad:ba:df:26:80:f6:ae:72:6d:2c:9d:7f:5d:
b2:5e:87:7a:e6:74:25:e3:00:71:22:ce:bb:4e:ad:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F2:3D:95:D6:16:EF:01:D3:DA:21:B8:E4:E5:3B:90:45:BA:D3:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EF18A96F5E411EFA18C0C9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f1:20:2a:b6:2f:aa:65:37:ef:b9:14:6d:12:52:7c:22:a0:
d9:50:c8:34:f1:de:53:6b:68:f0:6c:b9:54:0e:8e:8b:b3:87:
48:d7:25:05:68:51:e3:00:12:48:65:28:53:f1:30:23:c7:4c:
d6:40:26:42:83:99:12:a6:b1:ab:7e:8d:65:25:a8:4e:8f:72:
42:54:01:41:ee:b3:9a:f5:73:95:12:3d:20:6f:4b:ac:b4:7e:
f2:9b:1f:9d:be:45:9e:3b:09:b8:6f:6c:30:d3:7c:6a:b9:96:
5b:56:24:97:8f:c1:29:7e:de:2b:48:c3:43:dd:03:38:e3:ca:
89:55:79:25:5d:90:3e:0f:c0:90:2d:2b:2f:e2:de:98:cd:17:
32:19:c3:12:bd:60:5e:8f:f7:2f:29:6f:59:d2:ba:19:7b:89:
0b:6f:f6:9a:55:26:b7:9c:08:55:d4:89:6f:44:1a:b8:8e:e9:
db:31:36:59:62:40:31:15:d3:56:a1:a7:21:11:35:b4:48:1b:
79:b3:59:97:62:bc:65:71:a4:9f:62:a6:a8:53:fa:b2:c1:b4:
63:33:2a:4d:4e:c9:95:f1:bf:00:ff:d9:25:69:68:fb:e4:82:
36:99:64:ee:ed:cc:1c:7c:d5:0f:5a:51:2c:58:1e:a1:86:51:
c0:5d:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:18 2025 by rpki-client