Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AE91F80F8D811EF85760FB5762E951A.roa
File: 9AE91F80F8D811EF85760FB5762E951A.roa (raw, json)
Hash identifier: O4I2C/A0XnZ+thM9sl1DjwJw0EmH+LzMv+V0REX1TAo=
Subject key identifier: 5F:FA:71:ED:94:7A:AA:71:42:B3:D2:13:15:ED:21:B1:86:01:59:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AE91F80F8D811EF85760FB5762E951A.roa
Signing time: Tue 04 Mar 2025 09:11:07 +0000
ROA not before: Tue 04 Mar 2025 09:11:03 +0000
ROA not after: Fri 04 Apr 2025 09:11:03 +0000
asID: 200373
IP address blocks: 156.228.86.0/24 maxlen: 24
156.228.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82663 (0x142e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 09:11:03 2025 GMT
Not After : Apr 4 09:11:03 2025 GMT
Subject: CN=67c6c3ab-2d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f5:a0:ce:21:84:a3:4d:02:86:43:0b:70:c8:
00:9f:9d:af:1f:dc:4e:03:71:a4:88:f4:2c:eb:94:
af:f5:80:f5:2d:4d:c1:0d:f7:9f:73:fa:fd:2d:51:
d8:e1:a6:9e:43:44:ee:5b:31:30:72:4d:d5:94:1c:
b6:41:09:6b:d6:fa:e0:f9:2a:d9:ca:30:5a:2c:99:
b1:4a:67:7a:9a:ac:45:ac:c7:80:d0:8e:20:05:2e:
85:cf:73:b9:03:81:60:58:4c:59:23:9c:58:ee:55:
15:38:62:4c:ed:b8:fe:64:cc:77:20:f6:49:c4:40:
28:33:60:a8:63:a5:c1:e3:a6:d1:16:cd:08:e6:60:
61:0b:71:c9:22:4c:e1:b3:06:8c:17:fb:c8:f3:c7:
76:9c:bf:82:df:24:e7:13:22:70:af:b8:7f:c0:bb:
6a:32:54:90:3e:df:1f:21:57:32:16:0e:a0:39:c3:
92:f1:86:a8:33:60:68:a5:1c:a4:1d:cf:48:28:97:
cd:2c:18:77:72:74:1f:cf:49:d6:69:da:2e:a8:96:
a6:11:a7:84:20:e3:e0:b8:64:a3:ae:64:b8:c9:9f:
b2:0e:90:7e:b2:e5:9a:96:73:d5:ce:f6:62:75:7b:
bf:45:4a:1e:07:27:6a:66:c7:58:be:7c:18:e9:48:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FA:71:ED:94:7A:AA:71:42:B3:D2:13:15:ED:21:B1:86:01:59:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AE91F80F8D811EF85760FB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.86.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:57:b3:f9:c9:7a:25:57:fa:75:45:22:cd:6a:e1:2a:e4:27:
a2:f5:6c:18:0d:34:a2:17:d2:0f:32:92:43:a4:63:b0:13:e1:
63:ea:a6:dd:13:0c:00:1f:01:52:3f:18:57:fd:0b:99:2a:cd:
7e:b8:1c:78:f6:12:a3:93:40:46:ad:03:94:86:62:2b:e5:f0:
1e:dd:23:a5:0f:ee:3d:58:f6:e2:18:2d:ae:70:7a:20:7b:08:
3e:4b:c9:20:31:8d:7e:4d:bb:66:b3:29:19:7c:75:06:8e:a0:
75:b6:3e:78:ec:4d:4f:c1:e9:7b:dd:01:39:39:31:d6:6b:5e:
3f:cc:7d:f5:25:c0:7b:82:01:60:ab:b3:cc:2f:c9:61:4c:04:
11:23:0b:84:11:3e:51:13:33:c1:94:1c:fa:0d:f4:01:37:d6:
e9:37:d2:d8:c6:b1:4f:0e:d9:4d:41:61:21:c8:70:04:90:8c:
a5:29:87:41:ca:4b:f3:cf:5a:df:46:45:05:4a:80:e5:13:f4:
3f:f5:28:aa:65:97:3f:db:1a:06:c5:d7:61:68:6d:db:a4:98:
c5:c0:8c:c9:0e:33:a2:50:c5:cb:81:a3:08:45:11:06:56:6b:
e5:81:6f:b1:e0:29:5d:0f:15:7e:28:20:40:b2:e9:13:f5:0d:
06:23:78:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:16 2025 by rpki-client