Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98E4B0D404B111F09FF7826E762E951A.roa
File: 98E4B0D404B111F09FF7826E762E951A.roa (raw, json)
Hash identifier: iuXqjCDenZGvYZuzQpSkzlKzSHYVEzDW1NnSW9asGxs=
Subject key identifier: BE:A6:2A:B6:34:B7:B1:0C:2D:CC:D5:B0:57:0D:85:CF:B3:1B:D2:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98E4B0D404B111F09FF7826E762E951A.roa
Signing time: Wed 19 Mar 2025 11:02:07 +0000
ROA not before: Wed 19 Mar 2025 11:02:03 +0000
ROA not after: Sat 26 Apr 2025 11:02:03 +0000
asID: 395793
IP address blocks: 156.228.62.0/24 maxlen: 24
156.228.210.0/24 maxlen: 24
156.228.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83666 (0x146d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 19 11:02:03 2025 GMT
Not After : Apr 26 11:02:03 2025 GMT
Subject: CN=67daa42f-8900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0f:ff:1c:8e:c4:af:33:a3:35:48:4a:08:9c:
51:ae:61:6d:22:f6:33:a5:6a:47:a3:b5:93:64:fb:
eb:2a:aa:8b:a2:8d:ac:c3:62:af:02:bd:8b:b2:42:
26:e3:64:54:39:0e:1e:b6:95:65:d4:6e:f3:fe:ab:
ec:b6:86:b8:fe:d4:31:a0:30:f3:cb:56:4a:de:0f:
29:c6:19:80:16:45:51:ae:a2:f7:31:e6:ec:a6:7e:
97:29:e3:59:c0:ef:e0:98:c1:ef:6c:d8:f1:5e:49:
3c:6e:5f:cf:1a:d9:34:3a:64:b2:d2:e0:98:bb:b0:
cb:1c:7d:3e:54:ba:f6:aa:9d:2c:db:02:b4:9d:7d:
67:43:75:b7:b4:be:59:55:a0:e9:ed:cf:ec:9f:3d:
48:36:bf:da:3a:fb:e2:79:a9:96:2a:9c:26:d0:21:
e2:77:2a:fa:59:2e:19:1f:17:87:8e:98:ff:11:2f:
87:dd:79:58:9b:61:fa:0c:85:60:07:f8:5c:e2:c1:
ac:3a:1d:34:25:a2:79:13:30:69:0b:7a:4b:f2:45:
1a:80:ea:aa:99:6e:51:84:50:3b:7a:5d:95:a6:fd:
32:ea:39:7c:a8:96:82:cf:29:f9:a6:2a:73:a3:d0:
b3:7b:f7:c9:02:06:74:88:49:7a:49:52:8a:e0:c2:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A6:2A:B6:34:B7:B1:0C:2D:CC:D5:B0:57:0D:85:CF:B3:1B:D2:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98E4B0D404B111F09FF7826E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.62.0/24
156.228.210.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:01:c3:79:43:fc:43:16:01:19:4e:78:6c:c5:7f:e8:24:de:
93:d4:b1:87:11:c6:36:69:87:a4:be:80:b2:dd:65:09:59:34:
86:29:6c:e1:24:9f:94:08:a2:14:3a:21:f1:8a:48:8e:d1:1e:
c3:43:25:6c:f3:0f:6f:85:b1:f4:06:0c:22:7b:60:b5:ff:f6:
29:f4:31:88:7a:eb:90:a9:d5:33:81:57:2d:3a:cf:91:7d:a1:
43:6a:5e:5c:5b:f3:4e:f0:35:9a:f4:8a:22:1f:f0:0f:3a:57:
62:dc:27:97:f1:fe:d4:a0:d8:ba:f2:1c:03:82:cc:5d:b2:01:
26:7e:c7:39:94:41:92:d5:d6:10:2a:0c:95:79:7c:10:4a:af:
64:bf:e6:3d:3c:50:71:94:07:e0:a6:6e:1b:d5:90:2c:26:3e:
c0:c2:21:be:8d:d2:9d:64:7b:9e:0b:52:fd:db:82:e2:19:c6:
2e:30:05:ac:91:02:86:9b:27:52:4f:ac:cf:21:17:44:91:37:
e4:76:0d:3e:fb:c8:ab:df:97:8e:b2:f2:3b:23:51:26:ca:60:
75:62:bb:34:11:dc:71:94:ea:b5:62:a5:14:cf:96:18:fe:35:
fe:ca:a5:2e:55:87:d3:84:a4:6b:74:b7:80:e1:5d:48:7b:af:
73:85:37:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:44 2025 by rpki-client