Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B01B6CEF34A11EFBA1F2BB4762E951A.roa
File: 8B01B6CEF34A11EFBA1F2BB4762E951A.roa (raw, json)
Hash identifier: vnm6KM/ANLuHmhRfG90sR77GitR4TAnpFXbDpF8aX/0=
Subject key identifier: D7:95:CE:2A:42:D6:A9:D2:F1:E3:06:46:9D:D5:FC:A7:AB:97:C3:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DB0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B01B6CEF34A11EFBA1F2BB4762E951A.roa
Signing time: Tue 25 Feb 2025 07:31:36 +0000
ROA not before: Tue 25 Feb 2025 07:31:32 +0000
ROA not after: Sat 19 Feb 2028 07:31:32 +0000
asID: 17561
IP address blocks: 156.249.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77232 (0x12db0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 07:31:32 2025 GMT
Not After : Feb 19 07:31:32 2028 GMT
Subject: CN=67bd71d8-94a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:a8:96:f8:35:ad:9a:fd:bb:10:d7:ad:b2:
0a:fd:d5:08:94:41:ec:42:52:b3:19:a4:01:c4:b3:
45:ca:7a:8f:35:32:74:96:b9:b5:23:44:0b:e2:a2:
f6:37:6d:d0:71:90:12:fb:5b:04:9b:10:4d:c9:e7:
2e:af:9e:b2:b6:8d:b8:c3:1a:51:26:26:55:c1:fd:
f4:98:38:2e:fe:34:26:31:9c:79:04:2e:ff:6d:3d:
ec:61:40:6b:2d:2d:f9:10:6a:f2:a0:00:24:5e:9c:
5e:d2:f1:7f:b6:23:25:3e:15:57:15:84:c2:4a:b7:
41:e5:7e:cc:ad:29:1b:5f:fd:83:21:bb:8b:c5:8a:
0a:f8:0f:df:48:87:a1:1a:09:b8:b0:9e:49:e0:bf:
10:b4:fd:25:49:cd:57:19:77:6e:73:ae:cb:37:2d:
81:61:57:9f:8e:4e:ac:83:d5:de:58:44:7d:59:43:
fe:b4:05:e9:f0:87:59:82:a2:78:7c:f1:f8:11:ea:
f0:61:03:96:32:83:e2:4e:cd:e7:af:8a:37:f9:9a:
46:c4:5b:95:82:c3:39:24:cf:ea:9b:7b:1c:9a:72:
71:fc:21:6b:9b:15:18:e8:bc:10:33:04:6e:7e:2b:
f6:ae:f3:45:d7:6f:65:e4:99:30:47:49:52:ba:f0:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:95:CE:2A:42:D6:A9:D2:F1:E3:06:46:9D:D5:FC:A7:AB:97:C3:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B01B6CEF34A11EFBA1F2BB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.228.0/24
Signature Algorithm: sha256WithRSAEncryption
84:dd:e1:7b:ef:29:5e:bc:c5:2e:b7:bc:88:c9:51:e5:8c:5f:
52:1b:f2:2c:66:3b:43:60:a9:4f:66:81:75:4c:93:e0:56:07:
a1:5d:bc:80:14:8f:d9:2a:49:92:03:4e:15:9a:ce:eb:35:e6:
a4:73:82:9a:94:5c:2b:58:c7:9a:b3:ac:fe:6a:3e:d0:32:08:
42:ae:a5:f3:3d:02:35:8d:be:15:f1:83:db:46:47:5c:d7:3d:
f3:4d:77:ac:94:94:ac:ca:8d:11:df:e1:d8:5f:36:92:ab:6f:
f9:e7:82:04:ad:e0:4a:6b:db:0a:58:6e:08:ce:f8:e4:d5:0c:
d0:a8:92:20:6e:d7:b8:10:10:ab:d6:dd:26:e0:fd:94:07:4d:
c8:61:fb:1d:ee:57:cb:f5:70:d9:77:84:8b:f5:32:8e:83:52:
e4:f6:0b:a7:3e:76:86:43:9a:0a:b8:fe:64:63:4e:47:38:e9:
e2:92:d6:29:86:a0:17:59:2b:1a:ac:c8:ab:26:5b:a4:6b:06:
35:cd:20:a2:f4:8f:5e:0c:af:32:7f:ca:85:32:17:c0:d2:09:
6d:63:6a:43:74:bd:9a:8d:1d:a4:c2:ac:05:62:ce:27:14:9d:
7d:aa:9f:26:cf:0b:d8:96:86:71:5b:de:fe:8b:75:cd:f8:c8:
a6:1f:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:27 2025 by rpki-client