Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/767D01D604BB11F08EE49BAA762E951A.roa
File: 767D01D604BB11F08EE49BAA762E951A.roa (raw, json)
Hash identifier: A3Io8sObQuFAEtng8Yw2Ozk5FIpqrUoS6aZMx8ez7j0=
Subject key identifier: 70:A5:03:6D:3E:2B:BE:16:2C:FC:7A:40:E9:71:5C:EC:D4:DA:91:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/767D01D604BB11F08EE49BAA762E951A.roa
Signing time: Wed 19 Mar 2025 12:12:44 +0000
ROA not before: Wed 19 Mar 2025 12:12:40 +0000
ROA not after: Sat 19 Apr 2025 12:12:40 +0000
asID: 20473
IP address blocks: 156.253.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83710 (0x146fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 19 12:12:40 2025 GMT
Not After : Apr 19 12:12:40 2025 GMT
Subject: CN=67dab4bc-f994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:48:ac:e8:a8:67:5a:7e:5e:05:9f:b4:17:
18:85:5e:3a:0a:c7:2f:a7:8d:18:fb:45:ec:64:97:
f6:4e:a1:55:e2:92:04:b7:5b:d4:d4:8a:1b:77:f6:
a5:f8:5d:a6:a4:5a:53:b1:9e:c2:46:53:f0:8d:ff:
f2:7b:e1:c1:20:ad:92:e3:27:92:6f:1e:bb:24:f0:
2e:d0:39:54:f4:19:14:56:49:61:a3:67:9f:86:91:
57:91:de:54:51:ed:4f:f7:e4:8e:8e:a7:73:23:9f:
9a:39:b4:f8:24:3c:02:ac:8d:22:58:44:98:46:b9:
37:a0:ab:9f:4b:a4:97:b5:0b:77:49:4d:06:27:97:
9a:37:2d:52:a3:b4:de:41:b0:98:07:34:90:a2:13:
54:6f:b1:5f:13:dd:e5:af:8e:4c:b5:7e:af:75:f6:
22:f6:6a:49:42:78:24:70:26:5b:8b:47:b2:5a:cd:
83:0a:17:f3:92:d6:34:ed:7b:d9:e9:a4:41:a6:52:
33:22:d1:b6:f8:55:8d:14:92:04:f4:8b:c3:18:73:
b6:9c:64:91:05:9a:74:02:9b:f0:de:ee:bc:02:92:
d4:e5:9b:ff:d4:ce:55:9f:7e:94:40:2b:c9:df:39:
3b:52:03:02:dd:75:43:75:5c:59:f3:75:0c:bc:e4:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A5:03:6D:3E:2B:BE:16:2C:FC:7A:40:E9:71:5C:EC:D4:DA:91:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/767D01D604BB11F08EE49BAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.56.0/22
Signature Algorithm: sha256WithRSAEncryption
26:4d:1f:7d:8e:1e:a3:e5:6f:2d:a7:1a:0a:2f:19:c7:89:0d:
5d:56:59:fe:6b:82:61:fe:dd:9c:95:ea:46:6d:16:7c:ff:24:
5c:ff:cc:99:b0:38:0b:12:40:a2:52:f5:e0:f9:d5:f1:02:b9:
fc:7a:54:03:f8:f3:67:24:58:c8:2c:39:b8:99:ec:3d:30:d9:
46:a1:48:57:aa:8b:1b:0c:e6:d1:0f:50:79:f4:2c:9d:42:47:
49:8a:45:8e:bd:e3:32:7e:0c:82:d5:d1:97:ff:f1:25:46:db:
02:cf:41:a6:a2:bc:0e:80:85:96:b9:84:e4:7f:89:b6:a6:d2:
3f:38:0b:ff:00:5a:ce:d6:d4:72:a7:65:98:be:05:0a:ff:63:
ba:e3:ee:a9:50:64:2c:38:d0:ca:82:c4:4a:51:09:67:71:dc:
84:c4:35:8d:30:5c:1a:f3:6b:54:cd:1b:cd:69:50:5f:7c:d6:
a8:24:92:ce:a4:f8:0a:27:56:34:5b:ab:03:b0:e9:bc:bd:8b:
d9:63:00:a6:9f:9c:e3:92:7f:b8:9f:7f:5b:82:ce:b0:df:bd:
5a:3d:d7:9f:cf:a9:1b:44:9f:ed:55:fe:45:b3:4b:5f:05:c1:
04:b3:96:3c:49:44:20:7b:92:20:ed:9b:ba:f0:93:4c:81:c2:
50:b6:42:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:52 2025 by rpki-client