Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E0B8D4F34911EFAF8748AD762E951A.roa
File: 54E0B8D4F34911EFAF8748AD762E951A.roa (raw, json)
Hash identifier: X7KSDBeX3H4woz9QBmB3WHeOENPDFv6qlyUruEl7Z+Y=
Subject key identifier: 75:A8:E0:1F:31:D0:9F:12:03:5F:8A:E2:45:72:95:28:47:45:F3:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E0B8D4F34911EFAF8748AD762E951A.roa
Signing time: Tue 25 Feb 2025 07:22:55 +0000
ROA not before: Tue 25 Feb 2025 07:22:51 +0000
ROA not after: Sat 19 Feb 2028 07:22:51 +0000
asID: 17561
IP address blocks: 156.249.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77224 (0x12da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 07:22:51 2025 GMT
Not After : Feb 19 07:22:51 2028 GMT
Subject: CN=67bd6fcf-0959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:52:11:e1:ea:59:01:2e:37:fb:80:76:a9:
56:6d:a9:95:39:4e:3c:fa:9a:2e:08:b9:69:79:a6:
ac:3e:de:b7:f0:65:00:fc:08:71:16:94:df:16:4a:
59:8b:ec:f3:97:c3:59:78:f8:7a:b8:34:ad:7a:dd:
ae:37:d2:61:bf:9d:7e:48:c4:82:97:98:2a:6a:20:
5f:88:28:4a:01:a0:40:70:fc:6d:ec:a7:14:11:21:
95:d2:bd:d0:91:f0:da:6b:a2:66:37:ab:37:8a:6e:
50:eb:5c:5d:b0:1e:31:88:5b:d6:6f:1f:1e:b7:ec:
20:c8:44:9f:2b:9e:6b:37:32:39:30:75:7c:f0:8c:
78:17:32:e9:b9:c0:2f:2c:be:a4:8c:69:a5:34:52:
b4:6d:79:36:52:09:af:3c:40:f3:7e:14:5f:fc:90:
ff:96:8a:e8:ea:7e:31:da:bd:1f:05:fb:c2:84:42:
20:41:21:08:c4:24:9a:80:c7:ae:e7:3b:f4:5f:d6:
fd:d2:49:d0:34:91:24:df:25:85:5a:2b:5f:1c:e2:
5a:99:ee:fd:74:1e:e6:c1:78:8f:d1:9f:c0:6d:99:
7d:fd:24:99:cc:ad:87:98:fa:ec:74:b2:4e:0c:8b:
0a:db:1d:2f:c0:5c:89:45:92:b8:8d:f2:fb:de:45:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A8:E0:1F:31:D0:9F:12:03:5F:8A:E2:45:72:95:28:47:45:F3:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E0B8D4F34911EFAF8748AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.224.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8f:48:3a:a5:16:6b:5c:36:dc:a2:fb:a5:ec:60:5a:72:a2:
34:4f:bd:a8:29:67:36:16:f5:b1:aa:20:ca:f7:50:e0:f8:ca:
61:f1:68:06:fe:07:c0:ae:af:d5:88:a8:50:26:fb:ad:f7:31:
02:aa:80:38:41:ac:63:85:a2:a5:30:54:ac:71:ec:4b:8e:8f:
52:a6:bb:a2:ab:a5:99:a1:d6:f1:d6:05:29:c8:bf:8c:ce:fc:
5b:5c:57:37:c2:1d:d6:6a:7f:af:cd:43:69:34:67:16:b5:9b:
54:65:2a:7d:95:06:43:72:04:28:50:28:59:4b:a6:45:ca:b8:
74:15:63:43:c4:46:78:87:d6:6c:63:0e:9a:c3:93:bd:3c:1c:
b1:07:53:01:ca:bc:91:84:c2:36:a6:d1:1b:0b:ec:b6:55:72:
f3:08:41:d0:7b:c6:b5:06:af:c0:43:da:ff:07:d9:54:73:5e:
03:92:8c:36:c1:3c:59:aa:59:20:ca:33:5e:42:22:88:3f:3a:
f5:54:56:01:71:e0:cc:7f:27:30:f6:14:ee:b6:32:55:5f:6b:
ff:c5:0d:62:b6:e1:50:5b:63:05:02:56:40:c5:7b:cf:97:ef:
94:f4:4f:a9:96:88:4f:27:73:68:74:35:41:37:92:44:da:bd:
a1:5e:e3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:34 2025 by rpki-client