Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/532336580B2111F0A93AE5A9762E951A.roa
File: 532336580B2111F0A93AE5A9762E951A.roa (raw, json)
Hash identifier: +rA+QqE6tQMwkfIp+F4ypKgaQqGPBkiiQ7+m0tT3TY8=
Subject key identifier: 8F:81:DC:37:6A:BB:E0:5D:FC:1F:A0:6D:24:CF:65:24:65:6D:F4:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014871
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/532336580B2111F0A93AE5A9762E951A.roa
Signing time: Thu 27 Mar 2025 15:37:00 +0000
ROA not before: Thu 27 Mar 2025 15:36:56 +0000
ROA not after: Wed 16 Apr 2025 15:36:56 +0000
asID: 142286
IP address blocks: 156.250.4.0/22 maxlen: 24
156.250.8.0/21 maxlen: 24
156.250.16.0/20 maxlen: 24
156.250.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84081 (0x14871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 27 15:36:56 2025 GMT
Not After : Apr 16 15:36:56 2025 GMT
Subject: CN=67e5709c-a26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:ed:9b:70:cc:73:57:92:f6:de:05:73:7b:
b9:26:f7:c9:d4:13:27:fc:9e:19:30:72:8d:27:ac:
20:35:ed:59:50:62:12:45:5d:ca:bd:93:49:d6:67:
27:3b:93:42:1f:a6:d4:4b:14:79:48:5c:86:aa:93:
2b:07:98:dc:71:1c:3e:7b:d0:9c:f9:be:95:78:f0:
d9:1f:1e:a0:cf:7f:cf:1b:ad:36:c7:82:ac:20:ae:
af:22:b0:54:50:91:e2:e1:bd:61:e6:33:a0:c9:03:
bb:98:60:c1:80:8a:39:89:f1:ef:b2:18:da:df:36:
30:20:5d:ad:51:88:10:47:45:34:a3:de:d0:69:7d:
09:52:86:04:45:14:76:9e:81:c9:86:49:23:ec:c8:
fe:d3:bb:a5:ec:1b:24:84:16:41:3f:8f:83:82:14:
aa:e6:c4:9b:98:0c:ed:e0:58:b2:5d:e2:d5:17:60:
37:49:56:fe:1d:20:35:77:37:78:96:c4:b0:56:9c:
3a:fd:bc:3d:c9:94:0d:fc:fd:ed:ae:75:cc:10:79:
27:5a:ad:f2:d4:1c:42:7a:3e:6a:e5:fd:a8:a2:4f:
f4:31:c0:45:61:b1:ac:ff:67:05:7f:af:ab:5d:44:
ee:a5:bc:10:5b:b9:f0:1a:c1:bf:cf:82:b9:3e:75:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:DC:37:6A:BB:E0:5D:FC:1F:A0:6D:24:CF:65:24:65:6D:F4:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/532336580B2111F0A93AE5A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.4.0-156.250.31.255
156.250.64.0/18
Signature Algorithm: sha256WithRSAEncryption
af:0a:2b:75:d2:d1:8c:34:33:32:93:df:76:27:d9:64:1c:01:
2c:a8:2c:ce:73:97:00:04:04:25:62:d2:31:89:f8:d7:e1:56:
16:a3:89:43:33:b4:35:cd:86:91:c0:bd:60:2e:ad:45:87:ae:
3b:8e:8e:b5:72:20:90:49:2d:0c:72:47:ad:94:0e:e7:c2:a8:
6c:8e:f6:25:dd:84:42:f4:9d:3c:5e:90:ef:fa:17:84:e9:7a:
d4:92:a6:7e:8e:4e:9a:e6:4c:16:51:6d:ac:e2:d8:7a:51:72:
e2:62:1d:e0:6c:bc:9c:92:ac:4a:c1:4c:eb:97:03:32:64:49:
23:63:9d:40:93:a6:5c:69:66:9e:2e:84:7c:75:3e:a8:a5:a1:
db:3c:9e:0a:19:d0:5d:9e:08:89:33:d0:13:f9:09:99:33:7b:
76:fc:7a:74:13:aa:71:63:97:f8:de:e6:3c:94:cd:b2:ae:f3:
53:45:81:6b:c6:a7:c9:ee:94:e4:f1:5d:aa:71:ce:1b:a3:28:
1f:44:1f:c5:a3:a7:ba:c3:e7:8c:93:f9:54:26:aa:5a:38:b6:
a1:6a:f7:fc:08:ec:60:8a:e9:7c:f6:a7:3b:5b:ec:47:da:a9:
4e:d9:cf:37:9f:4e:cb:1e:7d:bf:d2:01:db:c6:ea:74:95:03:
d1:f1:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:26 2025 by rpki-client