Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C3F2138E06E11EF8AB1CAA5762E951A.roa
File: 7C3F2138E06E11EF8AB1CAA5762E951A.roa (raw, json)
Hash identifier: 5bRmhmHSlUwEXH3Co54OrHjyhQRz+HS528f+XOB93fw=
Subject key identifier: D8:4A:AE:58:A3:44:8A:08:E5:0A:8D:FF:E5:4A:5E:95:79:F0:12:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01187B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C3F2138E06E11EF8AB1CAA5762E951A.roa
Signing time: Sat 01 Feb 2025 07:31:01 +0000
ROA not before: Sat 01 Feb 2025 07:30:57 +0000
ROA not after: Thu 01 May 2025 07:30:57 +0000
asID: 328608
IP address blocks: 156.243.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71803 (0x1187b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 1 07:30:57 2025 GMT
Not After : May 1 07:30:57 2025 GMT
Subject: CN=679dcdb5-5197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:16:15:6a:99:08:c3:df:98:82:85:02:79:
a4:fe:a4:91:4d:c7:1c:50:d3:a1:78:70:10:19:2c:
c0:d4:44:da:7b:d7:96:b1:36:57:e6:25:b1:29:07:
00:23:44:73:9f:f1:d1:72:5e:d7:70:22:35:b8:61:
ef:2d:e4:96:4d:ef:a3:21:db:ae:f4:03:c7:23:33:
01:66:56:59:0e:58:a4:14:af:e8:2f:15:6d:63:0e:
37:46:53:7d:c7:61:3c:b3:57:7b:ae:f0:93:db:af:
41:a0:8e:36:34:fa:e3:6e:be:ca:97:47:4b:3f:df:
90:10:21:90:f8:db:45:a9:f9:08:21:e8:ef:28:8d:
7a:55:54:de:77:1c:4c:af:8b:b8:8c:88:0d:c5:2d:
c3:ba:cc:0a:63:d9:a4:d9:2d:96:d0:63:4b:41:ef:
86:75:5e:16:31:ef:0a:95:44:63:e8:54:32:99:5c:
52:72:c3:44:70:51:b8:be:29:bf:fc:cf:23:e2:28:
73:dc:c0:11:f0:91:68:27:1b:9f:3c:9b:49:81:89:
40:bb:25:53:6a:e7:91:90:37:2e:c3:67:b1:5c:1e:
c7:32:91:00:39:40:83:d4:ab:e0:b8:89:e0:5a:1c:
c1:c4:6b:b8:2c:f0:3c:96:ad:64:d9:17:7a:8e:52:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4A:AE:58:A3:44:8A:08:E5:0A:8D:FF:E5:4A:5E:95:79:F0:12:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C3F2138E06E11EF8AB1CAA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.148.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:63:6a:fd:13:8b:38:f9:e1:ce:7c:52:59:43:ff:a1:f2:d0:
d2:71:bd:2d:ec:98:48:b6:32:2a:38:42:d6:d5:c4:4a:fc:f2:
96:54:61:ce:09:9d:30:b8:13:c0:5a:a1:b1:a0:08:92:d1:21:
1f:4f:27:a1:e0:72:2e:c5:e8:81:5a:5b:e1:cc:83:81:0e:08:
87:45:77:e8:4f:7b:90:63:de:1b:65:34:e4:6f:c7:d1:6e:4a:
2f:dd:05:31:e8:11:94:a2:96:84:e9:e7:57:4a:3e:ff:96:63:
2f:f9:d5:e7:6a:d0:36:18:4f:8d:6f:ce:eb:51:32:55:2c:6a:
81:52:80:00:9b:ba:4e:5e:94:57:58:74:39:45:a3:5c:e1:31:
6a:a0:d9:c1:e4:82:78:f6:5d:c6:8f:d8:b8:5f:46:39:85:3e:
23:52:14:ab:16:bc:5f:15:f4:2e:61:09:89:48:ee:58:a0:8e:
06:04:bc:98:6c:e0:43:2e:5b:84:74:85:46:d2:10:85:92:9a:
aa:4a:53:d6:43:2f:e3:f3:ed:ee:cd:77:20:49:d1:12:fb:bd:
06:44:79:58:b0:68:1d:73:e4:b3:98:61:f2:26:b1:cd:10:d4:
6b:1c:a5:5b:f8:5b:e0:30:05:c9:fe:c7:f1:19:5c:bc:72:a8:
db:38:30:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:43 2025 by rpki-client