Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6792FA26F5D011EFAF257E90762E951A.roa
File: 6792FA26F5D011EFAF257E90762E951A.roa (raw, json)
Hash identifier: e2+fLVucXTCbeoTVDBgLPVRm5sIFk4abCvu/hqKuyMw=
Subject key identifier: 36:B7:BC:FB:00:1D:8E:66:B3:F2:B4:20:AF:B0:BD:9E:BB:46:37:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6792FA26F5D011EFAF257E90762E951A.roa
Signing time: Fri 28 Feb 2025 12:34:51 +0000
ROA not before: Fri 28 Feb 2025 12:34:47 +0000
ROA not after: Mon 31 Mar 2025 12:34:47 +0000
asID: 394432
IP address blocks: 156.252.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81306 (0x13d9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 12:34:47 2025 GMT
Not After : Mar 31 12:34:47 2025 GMT
Subject: CN=67c1ad6b-961a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:8c:21:6c:5f:03:14:3b:cc:b5:e5:a0:90:
46:fc:d8:d2:dc:86:86:21:c5:2e:24:0e:57:96:73:
ad:f8:e4:81:c4:30:b7:14:8e:4f:cd:40:20:fc:fa:
72:23:cd:f7:00:54:d4:c6:e8:04:89:04:d2:c0:52:
7b:80:13:03:d0:98:aa:42:90:13:4e:60:54:da:62:
77:59:85:2b:f2:a1:be:eb:51:17:7d:4e:c9:36:98:
f0:71:d5:bf:0e:49:71:a7:fd:9a:e9:66:54:10:b1:
0b:ae:fe:21:72:3d:3a:31:33:18:e7:d8:5a:08:bc:
5d:68:1d:ac:57:b2:5d:6e:d2:ee:f7:e8:47:90:88:
c4:24:21:f5:77:7c:3e:19:34:af:9c:91:9e:a7:f1:
f0:b5:62:85:13:6b:59:57:38:00:d6:d6:70:75:58:
c3:73:7c:5b:9c:6a:f3:dc:f9:38:9b:46:e9:08:7c:
81:7e:74:76:5a:e6:04:47:44:6b:82:d4:41:fb:67:
e6:4e:56:f1:e7:10:38:55:fb:3f:d9:67:54:32:48:
b1:9c:b5:0c:85:d5:ad:cf:cb:1d:8d:0d:fa:bc:1b:
f8:bb:b2:39:5e:9e:13:2a:6d:55:99:22:8d:f5:cd:
a5:7e:83:18:4f:58:36:6a:5c:83:2b:67:13:9d:6e:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B7:BC:FB:00:1D:8E:66:B3:F2:B4:20:AF:B0:BD:9E:BB:46:37:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6792FA26F5D011EFAF257E90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.160.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:64:5e:f9:42:29:e6:22:87:b2:1d:0f:b0:d5:e7:e2:f1:c5:
0b:30:06:72:7d:4d:93:51:b1:8f:88:f1:0c:63:79:c0:b0:21:
84:e7:fe:b7:65:50:5b:73:91:67:48:4f:a4:46:b1:22:2e:0e:
22:71:18:43:cd:0f:9b:6e:55:5a:00:c4:cd:f8:be:26:c0:bc:
28:b4:ad:49:fb:7c:da:66:3e:41:74:5c:b7:66:5d:b0:59:fa:
9a:3f:7f:b8:75:35:8f:39:bf:43:cd:10:28:22:0a:57:c5:b8:
19:4f:ae:03:03:63:e6:45:f5:9e:20:24:eb:9c:54:a6:78:88:
05:91:cb:d7:1d:8c:d5:8f:95:f0:20:fe:0f:c7:a6:8f:ef:dc:
40:fd:be:84:f2:ce:cf:84:82:ca:9f:ec:f7:fb:78:06:4d:9a:
a2:76:c3:ce:fe:88:fc:4f:3d:1f:a5:c6:96:a2:48:9a:21:3b:
ee:0e:fa:aa:b8:ae:eb:58:f7:4b:3a:fb:29:85:63:33:c4:76:
c5:f6:4a:79:29:64:5b:36:67:5d:59:7f:9e:90:13:2c:9c:18:
91:a4:59:c7:70:37:1d:41:d7:1a:31:35:5f:0e:c3:74:38:c5:
a5:6b:ef:c9:f0:f2:e2:71:da:03:df:71:ed:77:22:e8:18:37:
64:36:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:21 2025 by rpki-client