Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AFC5C7800B511F0B6797582762E951A.roa
File: 9AFC5C7800B511F0B6797582762E951A.roa (raw, json)
Hash identifier: MoVmhkVsAB8igEno6uAdR91cyeJz4cL4E8phiy3bZ54=
Subject key identifier: 0A:BA:DF:B6:75:2F:03:46:94:F1:5F:34:4C:44:E3:1A:75:1C:35:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AFC5C7800B511F0B6797582762E951A.roa
Signing time: Fri 14 Mar 2025 09:20:44 +0000
ROA not before: Fri 14 Mar 2025 09:20:40 +0000
ROA not after: Fri 11 Apr 2025 09:20:40 +0000
asID: 60223
IP address blocks: 156.228.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83392 (0x145c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 09:20:40 2025 GMT
Not After : Apr 11 09:20:40 2025 GMT
Subject: CN=67d3f4ec-1505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b1:fa:60:66:d0:2f:63:5f:a7:86:dc:28:a3:
7e:53:c2:b4:f2:a0:e0:58:e2:2c:9d:1b:80:2e:84:
af:d3:f8:e3:36:16:41:a4:b5:74:5b:57:c2:05:f8:
7a:03:1e:66:b8:69:6a:0f:c8:88:ca:2b:ae:42:bb:
04:2b:b2:d7:3d:8e:6f:f1:d5:af:d9:71:e6:b2:ea:
4f:54:4e:2d:30:eb:84:af:cc:72:d9:8a:89:95:9d:
41:55:8f:41:5e:74:61:50:bb:da:73:e4:98:74:30:
af:ac:27:81:9e:c0:74:63:41:9c:42:26:bd:e1:b3:
b2:7a:a4:14:40:c5:78:62:8f:e1:88:bf:41:f4:29:
7e:00:91:d5:d9:e2:d9:fc:f9:0d:0c:1c:20:f0:84:
5f:59:49:38:9d:d2:34:c4:8f:07:20:b4:1d:c4:74:
c1:a2:0e:de:37:c9:87:e6:e0:20:49:b3:2f:7e:3c:
55:82:58:55:7f:b1:09:33:4c:48:86:39:ba:bd:95:
8d:96:d6:46:ec:7c:6f:1b:0f:ce:ea:01:4d:96:1b:
b1:e7:75:bc:05:0e:2d:c1:eb:df:a8:b5:06:c0:7a:
41:2c:27:1b:3d:89:c2:15:08:71:5a:a7:f8:d1:f7:
c5:c5:4b:1d:32:c0:f6:9e:c3:d6:34:2b:a2:89:cf:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BA:DF:B6:75:2F:03:46:94:F1:5F:34:4C:44:E3:1A:75:1C:35:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AFC5C7800B511F0B6797582762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.202.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:c6:f9:bb:33:97:d0:07:84:3e:4c:20:45:81:9e:74:e5:96:
43:43:4a:1d:b8:08:df:b9:7a:73:ea:d2:61:cb:1d:28:3a:0e:
c7:20:e0:8a:d5:98:2c:74:12:5a:30:46:6b:78:40:63:41:3f:
e2:45:42:3c:e1:ce:45:9e:a5:e4:d5:18:d0:0e:b1:0e:5a:8a:
13:20:e3:ec:c3:02:50:ad:42:a3:2b:e2:f0:f8:9a:56:cd:2b:
d8:4b:d9:21:59:6e:33:a2:d9:51:05:9f:6d:b0:81:22:9b:65:
c7:64:6a:7b:fc:be:ca:00:0b:ad:ea:04:3a:1a:34:40:8c:22:
c6:c6:41:36:68:1c:48:25:a1:d4:0d:20:7d:6b:6c:ea:43:e3:
53:13:5d:f6:7e:37:c5:3c:c7:c1:f5:c5:73:96:d0:d6:29:a7:
cb:ce:ff:2f:db:1f:14:78:f9:57:ac:b4:36:98:d2:fa:5d:7e:
99:38:ca:2c:2f:5a:c4:14:a8:18:02:8f:b0:75:6f:e9:e0:85:
c2:3d:1c:48:fb:35:e7:cf:aa:99:99:44:bf:35:13:1d:6a:d8:
f8:c9:a8:57:15:37:3b:cb:44:09:07:58:1b:99:b8:fe:08:1b:
2c:fc:b8:eb:93:2c:b8:15:55:cb:d8:4f:85:46:51:b6:5f:e7:
f4:d5:61:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:28:43 2025 by rpki-client