Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91214CF2F47311EF996E37AE762E951A.roa
File: 91214CF2F47311EF996E37AE762E951A.roa (raw, json)
Hash identifier: DV7D1XmiiG4miVESr4DRCJ6i7IYrNUA9BbTga1t2/ug=
Subject key identifier: 6A:17:3C:DF:68:7D:79:E5:A6:A6:FF:E7:03:79:A3:A6:EC:68:DE:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91214CF2F47311EF996E37AE762E951A.roa
Signing time: Wed 26 Feb 2025 18:57:47 +0000
ROA not before: Wed 26 Feb 2025 18:57:43 +0000
ROA not after: Sat 19 Feb 2028 18:57:43 +0000
asID: 17561
IP address blocks: 156.241.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79553 (0x136c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:57:43 2025 GMT
Not After : Feb 19 18:57:43 2028 GMT
Subject: CN=67bf642a-b2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:6f:92:03:5b:aa:da:ae:9f:3f:2b:ee:a7:
64:0b:6b:4d:b9:ce:87:51:53:4f:33:f3:5c:23:e4:
f9:4a:b1:c0:a0:69:d6:32:c4:cb:b9:22:b1:46:e6:
14:4a:62:d0:26:1e:de:c4:90:9a:d9:89:b0:bd:c4:
63:54:5e:67:84:d8:88:e6:09:da:ea:2e:c9:9a:93:
e7:78:49:6e:da:37:44:83:6c:d1:21:70:44:6e:1c:
b1:8e:26:0a:45:8d:2f:9a:31:4b:bb:ef:f5:60:e2:
9c:3e:d9:ca:0c:87:b2:7b:80:bf:01:83:06:1b:15:
dc:35:6f:2a:8a:65:36:81:10:83:8f:e6:5e:ad:7b:
1d:9e:36:a2:67:96:14:92:60:a1:4d:8e:72:c9:a4:
04:e0:fc:91:80:86:62:7c:05:ad:54:da:62:a5:1e:
d0:30:47:98:e4:ae:13:e2:63:37:98:fa:f9:f9:0c:
c1:ef:32:6a:6b:5e:2f:86:43:a9:9e:56:0c:c2:15:
6d:4d:4a:cf:5d:c9:a1:df:91:ba:ea:89:d1:ed:94:
62:f1:54:54:d2:ee:6a:f9:cb:93:ad:02:95:21:5d:
1f:40:3e:3d:50:ac:99:0d:bc:67:b3:23:52:a6:5d:
85:f1:12:87:16:e2:06:5e:13:73:40:45:12:11:30:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:17:3C:DF:68:7D:79:E5:A6:A6:FF:E7:03:79:A3:A6:EC:68:DE:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91214CF2F47311EF996E37AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.42.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6c:e5:07:83:b5:fb:14:ba:69:56:e1:6f:03:d6:1e:d3:89:
1b:85:3f:06:4b:4d:3f:0f:f3:f8:6f:58:60:40:f4:79:5d:61:
99:74:51:b3:0e:7b:a3:5a:34:ab:71:f8:72:6b:55:a4:36:19:
cd:57:e9:e5:0c:cd:32:d5:53:9e:45:e8:ae:2e:70:88:b9:30:
3b:c8:36:e2:75:b4:9d:0c:ba:75:a3:86:c0:b3:d2:8b:ae:5e:
ab:db:57:7b:4f:8d:a4:b9:6a:ff:f4:df:08:31:81:63:e6:ee:
21:04:5d:f0:59:81:26:49:e9:67:7a:ca:13:fa:d0:1c:25:39:
5f:c8:e0:a4:56:26:f9:60:a0:8d:ac:49:97:b1:0d:d7:05:ca:
85:0a:02:f0:fc:ab:32:e3:79:35:c0:4a:a2:7c:38:cb:27:a4:
47:cd:25:5e:4e:31:e8:e0:ec:79:4b:a8:28:70:23:f8:a1:5c:
eb:f6:88:01:15:f3:6c:bb:3c:1a:bd:8b:d2:13:78:1f:d9:67:
a3:b2:2d:cd:0e:58:3a:38:ee:ed:c9:55:7c:da:dc:5d:05:76:
0e:b2:7d:ba:9b:62:9a:4c:c8:1f:fb:85:ef:ea:3b:67:fd:9f:
29:49:0a:a2:c1:1a:62:a3:52:eb:b3:ed:21:de:94:a3:41:30:
a1:07:22:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:22 2025 by rpki-client