Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A3BC838F5D211EF963B7B9E762E951A.roa
File: 5A3BC838F5D211EF963B7B9E762E951A.roa (raw, json)
Hash identifier: +I4mBonurjIs8PyYKXOy2IGGPerKfcJb27Cxr8mzdPY=
Subject key identifier: D3:96:B4:83:BD:2C:6B:B0:9D:96:C3:E8:2E:BD:BA:1F:02:38:B6:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013DB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A3BC838F5D211EF963B7B9E762E951A.roa
Signing time: Fri 28 Feb 2025 12:48:48 +0000
ROA not before: Fri 28 Feb 2025 12:48:44 +0000
ROA not after: Sun 30 Mar 2025 12:48:44 +0000
asID: 203020
IP address blocks: 156.253.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81330 (0x13db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 12:48:44 2025 GMT
Not After : Mar 30 12:48:44 2025 GMT
Subject: CN=67c1b0b0-8615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:65:fc:28:42:1a:52:cd:5b:4f:45:46:a6:ca:
ba:60:55:2d:99:28:f9:65:cd:b4:e6:cf:cd:36:3e:
4c:1d:4f:6b:fc:89:d0:a4:70:45:a4:dd:ad:21:1b:
95:87:9c:2d:ab:d2:e3:fe:57:a6:d3:14:21:a4:5e:
2f:ee:7b:8f:22:2e:96:a1:b9:53:f2:f8:4f:35:15:
aa:6b:3f:04:f5:54:ed:f4:65:da:35:37:0c:68:ad:
d3:ba:ce:7a:f4:47:4f:50:2a:f4:cf:e9:08:84:c5:
04:2c:04:dc:dc:f9:e7:ba:6a:8d:d9:a0:1f:bb:89:
0c:55:89:38:79:e9:52:3e:14:49:35:9a:8b:02:c1:
28:8d:01:73:95:9c:73:a3:94:52:5c:7c:91:25:31:
45:cd:85:11:61:ff:03:36:6a:23:59:19:a6:d2:1e:
77:12:07:85:b3:03:f4:ef:0b:a8:23:5b:a9:c2:d0:
ef:33:49:cd:34:d1:5b:4e:04:b6:a4:24:ec:23:e1:
37:55:a0:7e:51:08:a1:66:d9:8b:22:69:6c:ac:50:
fa:de:91:fa:4f:db:6a:34:a0:d5:c9:bf:e0:34:e9:
aa:a2:e9:87:31:e8:bd:80:0c:4d:9b:22:2a:50:98:
17:cd:d7:d2:bd:36:9b:cd:89:ce:b0:70:88:5f:04:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:B4:83:BD:2C:6B:B0:9D:96:C3:E8:2E:BD:BA:1F:02:38:B6:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A3BC838F5D211EF963B7B9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.210.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:d5:38:65:f4:7a:37:c3:b6:83:5a:61:2e:b6:c8:d6:dd:6d:
4d:37:6d:83:33:d5:cb:f7:54:27:3d:fe:9e:0f:54:bb:64:4b:
9a:05:83:2f:07:d9:4d:0d:4c:56:93:6c:c3:d6:f6:61:fa:63:
8e:c2:5e:57:a5:40:4e:fc:bb:fd:b7:65:fe:cf:38:35:32:62:
ce:ac:83:fc:05:38:01:ad:dc:a9:53:67:1c:37:8a:d0:1e:b4:
41:09:d4:99:e2:ae:7d:be:f7:e4:94:d6:68:55:25:9d:65:ad:
88:e9:44:d4:87:51:05:92:56:46:ac:6a:61:a7:6c:8e:72:29:
0c:34:e3:a9:e0:86:00:47:68:c2:cd:8c:db:3d:b4:0e:d5:eb:
53:04:51:07:5d:a1:02:fa:ef:b2:3c:9a:d6:e4:dd:95:c6:ec:
d9:f2:b5:25:5c:63:a8:91:db:0f:df:5f:eb:4f:be:fe:21:4d:
7f:5f:16:e1:9d:75:37:25:f0:ef:72:19:66:92:97:61:7c:0e:
c7:70:e2:d1:0a:fb:5c:f7:1a:fc:78:6e:49:c4:30:32:f9:41:
e4:cd:e9:59:3b:41:f9:c9:e1:ce:06:62:7f:f9:07:97:e4:23:
ed:07:ab:47:5c:0c:52:3a:07:c5:2d:94:14:26:14:93:a7:35:
ac:10:37:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:09:22 2025 by rpki-client