Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A313CBCF17111EFB08F8A7A762E951A.roa
File: 9A313CBCF17111EFB08F8A7A762E951A.roa (raw, json)
Hash identifier: g8a3RYpshH6iWoCCwjonYeXRQjEXUlhOFXHELreC5Dw=
Subject key identifier: 62:6F:5D:12:EF:BF:DC:12:95:28:34:0E:3B:C6:0D:45:53:5A:DB:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0129C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A313CBCF17111EFB08F8A7A762E951A.roa
Signing time: Sat 22 Feb 2025 23:06:09 +0000
ROA not before: Sat 22 Feb 2025 23:06:05 +0000
ROA not after: Fri 04 Apr 2025 23:06:05 +0000
asID: 21859
IP address blocks: 156.226.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76232 (0x129c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 22 23:06:05 2025 GMT
Not After : Apr 4 23:06:05 2025 GMT
Subject: CN=67ba5861-f8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:7c:26:bb:9e:df:16:a2:49:bf:fd:ca:ff:
7d:b0:75:19:fa:73:14:dd:2d:aa:e5:a1:7d:8a:fb:
c4:3d:73:e8:42:25:dc:20:67:e2:70:3f:58:32:bf:
1c:03:32:ff:65:45:97:c1:bf:02:2a:1e:bf:cc:a1:
01:fc:b2:7f:a4:01:25:66:3a:e5:7f:d3:3c:99:d6:
d0:1d:7d:99:a8:b9:20:1a:78:c1:c8:5e:8a:e7:6e:
a4:f6:f0:d7:94:f1:dc:4b:84:6a:d0:6c:df:99:b6:
c6:6b:15:77:e4:85:11:36:5a:8a:56:1a:85:cc:03:
b9:d2:6b:39:ae:7f:ff:4a:8f:3e:da:19:9f:ad:8a:
20:25:33:c8:7a:86:a1:6f:3d:53:46:1e:72:67:4c:
e3:00:6f:57:60:81:a0:7b:40:16:54:cf:81:2a:0c:
43:28:d1:b0:a6:21:8e:0b:c1:af:08:42:82:ca:2f:
3b:fb:16:5e:26:a0:5d:fc:74:0e:16:82:5e:f0:5c:
5b:07:c8:95:1a:c5:48:5c:d1:f9:5f:f6:fb:7d:97:
44:8c:a9:7d:ea:0b:09:26:52:9f:bf:29:72:ad:e9:
bb:e6:3d:9b:44:70:de:eb:7c:7c:ef:f2:8c:77:32:
83:53:de:c8:15:6a:80:6e:36:e7:b9:c8:c2:ec:fb:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6F:5D:12:EF:BF:DC:12:95:28:34:0E:3B:C6:0D:45:53:5A:DB:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A313CBCF17111EFB08F8A7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b7:af:ba:e7:9d:ae:53:e8:ce:d6:9d:78:e6:b8:e9:89:3f:
46:2b:76:3d:5b:4a:be:63:b7:a7:82:91:e5:84:e3:4e:11:75:
92:e6:e3:63:f8:08:bc:f3:f6:3a:2f:2a:9c:f5:37:a5:af:fc:
83:c6:0e:ac:f7:d5:9a:19:b4:59:2d:97:f3:ef:62:1b:14:56:
ec:a6:01:1a:13:bc:0f:de:c1:c9:75:8f:c3:b5:8b:a6:d1:dd:
03:80:b2:ce:94:f3:8c:fa:fa:77:90:71:b9:f8:73:98:de:4e:
e0:53:2a:35:79:b3:00:33:3b:03:29:b8:a1:79:ff:3a:e1:1b:
4e:c8:12:2d:03:21:0e:ab:01:29:53:e3:a2:1e:8e:1c:b9:68:
b2:63:98:51:99:45:89:ca:91:1d:7f:86:95:3c:00:8a:b1:52:
ac:91:cf:3d:44:ff:17:65:c7:1c:83:a6:88:8c:33:c3:d8:42:
f4:60:e2:b0:df:7c:86:a2:fe:ce:56:4a:b6:20:7f:94:53:ce:
8a:75:64:88:66:8c:2b:f0:66:b2:ef:19:91:e4:4a:03:33:52:
48:76:8c:d8:95:50:d8:96:62:91:d7:4b:14:f8:2d:5a:b0:0f:
ba:68:7b:84:ef:ee:91:17:14:a7:f0:b3:6e:b7:23:2c:a0:27:
ea:4f:b8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:00 2025 by rpki-client