Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52BD05B8F47411EF9AB718B3762E951A.roa
File: 52BD05B8F47411EF9AB718B3762E951A.roa (raw, json)
Hash identifier: ixo1Y38SijSJ9dUt5DdNSh2mTnnRvKo4IinOSdH4c2c=
Subject key identifier: E6:FA:B1:E3:23:86:F7:44:C3:11:3B:0B:8C:DC:FF:72:A0:EF:BA:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52BD05B8F47411EF9AB718B3762E951A.roa
Signing time: Wed 26 Feb 2025 19:03:11 +0000
ROA not before: Wed 26 Feb 2025 19:03:08 +0000
ROA not after: Sat 19 Feb 2028 19:03:08 +0000
asID: 17561
IP address blocks: 156.241.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79569 (0x136d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:03:08 2025 GMT
Not After : Feb 19 19:03:08 2028 GMT
Subject: CN=67bf656f-2577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:07:cf:ba:11:c6:33:8c:64:cb:a1:37:bf:
98:38:5f:99:69:1d:c1:06:96:39:24:68:2f:56:67:
e7:ca:0c:73:18:0b:44:d8:f5:14:43:f4:41:91:0a:
6f:29:fb:9c:aa:0c:59:9a:30:95:f6:99:03:34:a5:
c4:91:8f:2a:73:a4:67:78:e6:84:e6:bd:d5:22:ff:
d8:04:c9:42:11:66:ef:7d:4a:84:6d:cd:85:fa:e5:
eb:ec:b7:db:f1:d2:7f:ba:a7:bf:78:bf:27:44:10:
7b:11:4d:db:86:aa:82:e4:43:8f:c3:a4:5b:1a:f5:
0a:66:e3:65:9c:7a:b2:65:65:f1:20:4a:50:87:2b:
76:95:14:ad:63:11:9e:65:d4:45:fb:f9:f5:de:ef:
92:df:8c:61:37:1f:76:1c:7c:74:25:ca:eb:46:77:
8e:17:1e:7c:21:00:b3:18:ff:ff:37:a7:08:2b:12:
ff:e9:d7:4b:8b:f4:54:eb:ea:cd:1f:66:87:18:0e:
6e:6d:cc:15:c7:9b:fc:4e:31:86:ef:75:05:8a:1d:
50:60:c6:dd:32:a6:a1:8c:c6:e0:c9:d8:67:a1:60:
b9:12:be:8a:82:4e:5b:46:b5:46:3d:87:f4:d5:24:
29:85:90:ac:61:70:cb:d6:68:9e:cb:99:7a:75:44:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FA:B1:E3:23:86:F7:44:C3:11:3B:0B:8C:DC:FF:72:A0:EF:BA:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52BD05B8F47411EF9AB718B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:28:b9:26:d9:ba:6b:30:0c:cf:80:6f:41:2f:e3:90:32:4b:
e1:c9:9f:00:75:a0:8e:8a:5e:9b:b6:73:b3:27:16:55:63:f6:
81:c3:49:40:e1:14:2d:e0:57:a7:45:35:10:78:61:59:a0:cc:
ed:f1:34:a3:f2:85:56:8b:f8:82:ff:21:77:68:07:a8:ba:01:
c5:b2:3a:3f:f4:ec:3c:bb:d4:0c:d1:2a:6f:f4:f9:c6:80:3b:
7a:67:ca:dc:83:0b:e9:e3:bf:db:9e:1b:29:81:c8:88:8c:ca:
84:62:50:00:c7:f5:dd:e5:59:63:8f:c1:83:59:7b:27:79:c9:
b4:11:07:8e:2e:b3:3f:2e:db:c4:f5:2a:42:ab:84:24:dd:94:
a6:b9:f4:a8:21:b9:e8:db:f6:8c:bd:ab:0f:ca:ad:eb:ed:d7:
85:6f:3b:0d:f7:20:f9:51:69:9e:c4:c0:ec:6e:32:f7:33:16:
5d:35:f0:0a:0e:60:42:2a:29:c2:37:a5:fc:f2:81:64:cb:36:
66:5f:d6:ac:7c:6c:8c:99:d5:55:06:5a:cf:4b:97:f8:79:a1:
75:59:a5:24:5b:57:5f:43:da:40:7b:ca:bd:46:dc:f0:d2:9f:
d5:f5:0c:d1:53:57:4e:3e:c7:22:14:fa:6b:e1:02:aa:b6:f1:
6b:6a:39:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:04 2025 by rpki-client