Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7695088CDBF611EF9E585D77762E951A.roa
File: 7695088CDBF611EF9E585D77762E951A.roa (raw, json)
Hash identifier: qHmq5/azctWo3cI2qi9wjY++qO4SmbgByQxEo6uF8Kg=
Subject key identifier: 9A:C1:90:75:36:8E:08:12:10:D4:5C:F6:56:BB:B9:3F:D6:B3:5D:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7695088CDBF611EF9E585D77762E951A.roa
Signing time: Sun 26 Jan 2025 15:01:47 +0000
ROA not before: Sun 26 Jan 2025 15:01:43 +0000
ROA not after: Tue 27 Jan 2026 15:01:43 +0000
asID: 149641
IP address blocks: 156.225.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70594 (0x113c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 26 15:01:43 2025 GMT
Not After : Jan 27 15:01:43 2026 GMT
Subject: CN=67964e5b-b3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:11:5b:bc:24:78:d5:d9:66:ac:64:5a:c0:
84:b9:53:0e:50:12:a2:5f:db:3b:94:78:e5:6d:50:
43:99:35:bb:62:0e:db:b0:42:51:df:fe:22:8b:cb:
57:7a:c9:f1:c6:0e:51:32:c1:66:41:f2:9a:e4:2c:
cd:c8:e6:a7:6c:a6:b1:31:1e:c8:25:fd:a5:1a:14:
d1:6e:7f:80:37:55:03:d4:d7:0c:7c:62:cf:3c:76:
ae:fe:02:d6:0a:95:24:56:ee:70:bd:f6:bc:47:3b:
3b:85:02:1c:5e:a4:f3:9a:51:af:a0:bc:ed:d5:a6:
f1:ee:1e:0c:32:ca:08:e5:1e:97:b8:90:d7:eb:16:
ee:6a:10:97:d1:da:43:48:86:18:0c:06:9e:85:a0:
58:3b:37:9d:16:d6:12:cd:96:38:a1:5e:56:70:2e:
f3:44:6e:ff:4a:ca:56:7d:56:e7:70:61:a3:3f:14:
da:1f:c8:b3:a0:07:f5:4b:cd:80:02:bf:92:79:79:
c6:13:44:7a:36:00:b8:aa:f3:3b:df:9e:5d:a9:0d:
8f:32:fc:05:57:84:38:dd:3a:e3:8a:93:02:b1:a6:
21:1c:c5:22:4c:fc:ff:f7:a0:f4:e0:25:64:fb:e1:
29:43:c7:fb:0e:06:c5:53:6e:d8:87:93:b9:46:07:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C1:90:75:36:8E:08:12:10:D4:5C:F6:56:BB:B9:3F:D6:B3:5D:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7695088CDBF611EF9E585D77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.128.0/24
Signature Algorithm: sha256WithRSAEncryption
12:8c:38:3e:a2:56:0a:29:d0:cb:fd:d4:12:3c:24:86:8d:ad:
d8:43:59:00:8a:45:1d:2b:6c:76:e1:60:63:e3:48:ef:20:0a:
3c:85:f5:dd:94:dd:6d:bf:4f:39:f2:cb:a5:10:10:0d:87:e9:
6c:78:19:db:5d:6a:71:f1:6e:6d:a6:fa:36:b5:74:c8:e1:76:
ca:75:08:b0:a0:77:59:99:21:e1:c8:e6:f3:8c:c6:7b:8b:04:
5d:0e:25:1a:6d:9d:0c:91:d8:89:9e:c9:cd:49:ea:e3:dc:e5:
48:dd:ce:c4:b0:ac:1d:dc:93:87:88:7c:01:08:2d:00:5f:2f:
a8:ad:6f:6d:4e:da:aa:75:66:53:6f:80:18:1e:1b:6b:7c:c9:
14:1e:1d:5c:db:4e:eb:59:c3:0f:7b:19:53:c6:a3:a9:a1:f1:
39:75:d7:81:ad:04:05:79:db:21:bd:25:f9:77:11:f4:e8:6c:
ff:98:f9:85:ab:77:01:84:6d:29:13:af:11:31:0e:a4:d2:ca:
d2:3d:4b:72:ab:f4:f4:84:bd:56:1c:9e:0d:a5:af:fc:25:b4:
bb:0a:22:32:bd:9c:56:58:ae:80:63:79:bd:3b:db:2f:9b:80:
ac:06:73:1f:58:4a:52:cb:19:e6:b9:f3:e5:92:9c:9e:b6:ca:
92:2e:23:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:48 2025 by rpki-client