Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54FF0618D4AE11EFA2400C9A762E951A.roa
File: 54FF0618D4AE11EFA2400C9A762E951A.roa (raw, json)
Hash identifier: Ae5wBxWWm0f9j/vogGRoPVkW4hxyzg29dk+f41FgMRw=
Subject key identifier: 66:70:72:98:88:C6:58:05:8F:EB:05:B7:62:B9:63:6F:EE:28:76:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01093B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54FF0618D4AE11EFA2400C9A762E951A.roa
Signing time: Fri 17 Jan 2025 08:37:49 +0000
ROA not before: Fri 17 Jan 2025 08:37:45 +0000
ROA not after: Thu 17 Jul 2025 08:37:45 +0000
asID: 63199
IP address blocks: 156.225.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67899 (0x1093b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 08:37:45 2025 GMT
Not After : Jul 17 08:37:45 2025 GMT
Subject: CN=678a16dd-b221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:39:99:2d:50:f8:71:59:a3:98:4a:de:55:34:
92:ac:49:6a:5e:ba:72:83:69:aa:4e:ae:b1:9a:b0:
8d:7c:52:b1:3b:17:e5:3c:de:a3:f5:bf:a6:20:2e:
78:89:ca:91:e1:bd:b3:b8:6f:d7:30:8b:3f:26:9b:
13:7c:b4:83:a8:90:c9:d7:86:27:ff:77:1a:ee:06:
47:0d:20:64:71:b6:38:9c:2e:04:d7:c0:9b:1e:0f:
ad:3b:f9:94:1c:69:03:5f:4e:7e:18:4d:b7:3e:72:
e1:1e:da:7c:67:c9:fc:70:c6:a0:03:86:3f:a2:0a:
ed:77:58:7c:ba:02:fd:e2:0b:af:66:f4:8f:be:2f:
99:df:cb:ea:da:f4:46:e6:69:1e:31:b8:e1:9d:18:
1f:83:5e:6b:60:75:b7:e0:9e:28:b8:d6:b2:d5:ab:
c2:af:78:48:2c:26:5f:8c:0b:9a:1d:00:8a:18:62:
21:a8:19:4e:db:92:32:73:5e:27:cd:be:33:39:1e:
6b:ca:75:0f:ad:e7:c6:d6:77:db:13:49:52:e9:2e:
2a:11:b9:d1:af:1b:00:da:a1:7b:33:51:f2:87:18:
35:af:b0:f9:d6:53:a3:e8:2c:b8:ae:e3:0e:75:ae:
9c:8e:e5:54:31:d1:93:44:20:5b:1d:be:05:48:00:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:70:72:98:88:C6:58:05:8F:EB:05:B7:62:B9:63:6F:EE:28:76:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54FF0618D4AE11EFA2400C9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.129.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ff:4a:c7:08:6b:50:53:0d:c8:ab:a2:2a:ec:dd:ee:ac:2d:
a8:4d:db:16:c1:ad:9c:ac:48:a3:2c:31:b8:54:ad:16:bf:1b:
fa:37:8b:dd:17:e9:a2:0d:87:f9:0b:a5:28:02:4e:d7:95:d0:
78:20:dd:f8:fc:a2:05:b0:aa:94:fb:71:f7:1d:80:cb:f3:81:
c7:5f:1e:d2:ad:cd:ce:d7:57:1b:18:ba:4a:68:b5:3a:9e:c6:
81:01:2b:18:44:c2:1f:ed:3b:3c:08:ee:d3:dc:8e:ae:08:4a:
5b:9e:54:b1:8e:c1:6d:d7:0c:37:4c:e7:74:ce:d1:bc:66:6c:
4a:ed:71:a9:1b:39:4c:f6:5d:7e:8d:65:c1:16:a4:60:6e:ef:
11:bd:5b:82:6d:40:9c:d1:d7:ff:60:d2:5a:83:81:5e:33:41:
1d:bd:ac:da:ef:f0:0c:07:ea:20:a9:38:36:3e:52:b8:fd:19:
ce:0c:90:c8:11:5e:5f:a5:35:93:34:4e:b1:ff:89:7e:09:0f:
09:c3:0e:76:91:2c:40:b3:78:25:ff:93:66:83:0c:79:7d:40:
32:a6:06:a7:c4:22:28:c8:d8:70:7f:fa:42:e7:cc:06:a5:8f:
7f:a1:e1:bf:dd:b0:3f:8d:ac:7f:0e:87:0e:1a:b8:67:fd:64:
1b:18:7a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:35 2025 by rpki-client