Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8740EAB2E14A11EFB406E96D762E951A.roa
File: 8740EAB2E14A11EFB406E96D762E951A.roa (raw, json)
Hash identifier: Kvzh+D8sNDXpJMDBZPw/WZOVYD0GE3cUfTF42x9G+IA=
Subject key identifier: 8D:26:ED:32:C2:FC:18:B0:74:E0:63:86:AB:D7:F6:0B:CE:57:78:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011A19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8740EAB2E14A11EFB406E96D762E951A.roa
Signing time: Sun 02 Feb 2025 09:46:08 +0000
ROA not before: Sun 02 Feb 2025 09:46:04 +0000
ROA not after: Thu 01 May 2025 09:46:04 +0000
asID: 328608
IP address blocks: 156.244.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72217 (0x11a19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 2 09:46:04 2025 GMT
Not After : May 1 09:46:04 2025 GMT
Subject: CN=679f3ee0-3577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8d:b6:a7:ff:08:5e:f1:4e:fc:55:bc:22:b9:
0e:38:96:64:d3:b0:44:08:fd:4a:a9:a2:65:93:fd:
e6:08:a0:a3:45:4d:ec:5e:ee:c7:9e:fa:1e:13:fc:
1c:a5:c4:c3:59:b9:2d:4b:88:df:29:0d:88:34:0f:
f8:de:ee:d7:f9:b1:fe:00:83:7c:d2:78:03:b7:0c:
10:05:6c:df:42:f0:b3:b2:4c:d7:af:2b:3c:e6:8b:
d1:fe:0a:07:9b:94:e4:30:b9:30:3f:77:21:b8:2e:
8d:3e:fd:85:5d:5b:ba:fb:ed:95:a6:85:66:3b:08:
23:05:1e:06:29:4d:cb:b4:df:4d:a5:1a:67:c5:11:
51:3e:0e:6d:c8:d9:1e:72:42:b3:0d:1b:eb:5b:30:
92:a4:a5:83:02:1e:01:06:f6:f1:80:39:df:25:3d:
40:c4:ed:fb:08:b4:fd:64:56:c0:f8:82:89:5b:48:
13:b6:b3:c9:2f:e6:5c:8a:4f:a8:c1:24:70:cd:88:
c5:10:42:5d:7e:42:e3:ef:a3:a5:a2:7f:2c:78:9f:
b8:21:d3:5b:db:70:cb:25:fc:28:15:8f:bc:a9:80:
74:91:e4:26:7a:b4:ba:81:cd:3b:0c:19:d4:64:a4:
21:23:98:da:e5:38:42:c7:6d:cc:e7:82:9f:e0:58:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:26:ED:32:C2:FC:18:B0:74:E0:63:86:AB:D7:F6:0B:CE:57:78:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8740EAB2E14A11EFB406E96D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.208.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ac:40:c9:b9:81:be:cc:d8:bc:91:45:14:38:a6:24:f2:1e:
7c:51:41:f3:b1:2d:3b:d9:f0:8f:c6:51:85:69:9d:97:98:d0:
69:0d:aa:ef:67:c4:12:30:c5:20:a8:06:9c:ee:59:e4:e1:ed:
74:b5:b9:15:49:5f:ba:d0:48:3f:b2:44:d2:c9:e9:1f:61:8b:
ca:b6:6e:4a:55:48:c0:fe:0a:e5:c3:a5:48:be:8d:f2:33:35:
62:e9:d9:0d:5f:f2:92:76:10:4f:93:c6:9b:52:83:6b:61:24:
be:d3:55:a1:f7:45:3e:2a:ac:a3:0d:15:b1:7b:cc:60:fe:21:
f9:97:b6:08:f8:d5:b7:6e:42:cc:52:61:d7:d5:1e:ef:db:8e:
54:99:bd:d3:6c:f7:7e:a0:43:2f:54:ef:49:e0:c8:e8:d6:e6:
ae:ad:c2:14:2a:6e:9a:c8:e4:eb:0e:ba:61:7f:f5:cf:d5:f0:
09:66:4c:3d:dd:f0:83:19:33:97:bf:dc:bc:6d:91:6b:c5:32:
69:be:1a:9f:8d:b0:42:f1:52:15:06:57:db:09:65:73:27:34:
2c:c0:2f:f5:d7:57:e5:3d:8a:a7:0f:ee:cd:c1:c8:39:ee:7c:
40:1b:f4:a3:90:3c:01:07:8b:76:cd:ef:47:29:e0:95:dc:c0:
04:18:27:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:22 2025 by rpki-client