Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65DEBB3A058311F0BB1B826A762E951A.roa
File: 65DEBB3A058311F0BB1B826A762E951A.roa (raw, json)
Hash identifier: eef1y0jMT3HF9aSlwyEnMh8usTELsW/QU5HkhTrMT60=
Subject key identifier: D0:17:12:4A:F6:5A:30:E4:6D:3F:0A:54:E1:4D:0E:00:6A:9B:0F:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01474C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65DEBB3A058311F0BB1B826A762E951A.roa
Signing time: Thu 20 Mar 2025 12:03:56 +0000
ROA not before: Thu 20 Mar 2025 12:03:51 +0000
ROA not after: Fri 01 Aug 2025 12:03:51 +0000
asID: 400619
IP address blocks: 156.241.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83788 (0x1474c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 12:03:51 2025 GMT
Not After : Aug 1 12:03:51 2025 GMT
Subject: CN=67dc042c-2bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:98:5a:07:ba:79:de:c6:ca:7d:71:eb:ed:
99:1f:6c:d3:a7:fa:3e:62:82:57:ee:e8:5d:4b:a9:
7e:cd:a0:b7:6c:7e:bf:7f:2a:1d:7e:85:0f:01:52:
e9:38:d8:b8:32:00:51:c2:cc:3a:f4:a7:d9:60:6e:
c9:ec:39:2f:97:97:e6:ea:1f:09:51:b3:a0:e1:f2:
68:42:23:77:79:86:67:1b:c6:97:e9:1e:3f:26:5e:
b2:3b:ec:d9:5c:0c:3b:78:9e:6c:10:76:91:d0:58:
78:37:47:71:ba:da:29:36:bd:00:fa:b1:c9:3a:f9:
5d:85:17:34:ac:ce:32:5c:e3:3e:78:d7:a6:81:af:
99:39:1f:6a:2b:f3:09:9b:c0:64:47:2c:ee:4e:3c:
56:c7:71:0e:0d:21:18:e1:46:65:86:ff:19:3f:6c:
5d:44:80:95:b3:8d:52:c9:19:a2:31:9f:20:9f:2a:
82:5f:81:0b:3b:37:e3:31:0c:49:e8:f3:4c:0d:c9:
0b:36:3b:b6:9f:17:2a:a1:e6:e2:de:58:0e:4e:49:
da:db:13:31:42:b5:a8:f4:2e:30:f0:24:8c:65:7a:
d5:35:f0:e6:2b:c9:03:43:de:bf:7c:28:59:e2:42:
48:eb:67:39:9d:12:f9:18:30:9e:16:13:08:3c:29:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:17:12:4A:F6:5A:30:E4:6D:3F:0A:54:E1:4D:0E:00:6A:9B:0F:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65DEBB3A058311F0BB1B826A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.128.0/18
Signature Algorithm: sha256WithRSAEncryption
56:7f:0c:ec:1d:f1:85:70:a7:a6:37:6e:2c:c1:b5:d5:aa:e7:
5f:e7:6e:f2:20:54:65:01:c6:20:79:bd:e2:0a:0d:97:53:82:
db:e7:55:f2:9c:60:2b:93:9a:0b:d8:99:fb:e2:73:35:29:31:
45:47:9f:7b:c4:12:1b:81:a0:e6:39:fc:66:ba:f7:39:c8:eb:
3a:a3:31:b8:b4:ec:db:a4:4c:e6:78:f3:23:31:5d:59:a1:53:
62:3a:b7:0d:7a:b9:a8:6f:86:d9:1c:7d:a7:b5:41:74:d6:66:
3c:7c:12:be:e0:7c:3c:a6:a3:50:6c:0b:bd:f2:59:b1:d0:dd:
c8:c1:45:df:67:9b:54:1e:6e:6a:04:37:0f:c5:e9:e1:c8:1a:
9a:48:84:02:90:72:cf:5e:eb:c8:6f:77:00:83:0e:d7:1e:bd:
e4:bf:5f:37:be:72:09:cb:3e:a5:ee:59:44:12:65:1e:19:c9:
63:d1:65:71:df:a3:57:22:39:3a:75:9c:97:b5:aa:7e:98:d2:
dd:f5:9d:3f:fd:b2:79:0b:a6:a2:cf:20:34:a8:e7:61:64:3d:
d9:9b:6c:de:b8:aa:80:c1:7a:ad:94:75:4c:1a:81:16:b3:fb:
a5:c7:d1:d7:6e:5b:e2:95:46:91:f6:27:4c:8e:1b:1c:5e:c0:
aa:1f:a7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:38 2025 by rpki-client