Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EC69A88E53711EF8FF88E6B762E951A.roa
File: 9EC69A88E53711EF8FF88E6B762E951A.roa (raw, json)
Hash identifier: WMbjlPPpXHiXg38RRK3XSB/FPE+msGxiAsPpzkUdj6w=
Subject key identifier: 28:CC:AF:37:00:F9:88:1A:BA:0D:FA:E1:66:09:DB:C0:BD:A8:11:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EC69A88E53711EF8FF88E6B762E951A.roa
Signing time: Fri 07 Feb 2025 09:40:52 +0000
ROA not before: Fri 07 Feb 2025 09:40:48 +0000
ROA not after: Mon 13 Dec 2027 09:40:48 +0000
asID: 17561
IP address blocks: 156.230.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72897 (0x11cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 09:40:48 2025 GMT
Not After : Dec 13 09:40:48 2027 GMT
Subject: CN=67a5d524-e69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:e1:04:7a:dc:ad:51:ab:f7:01:fd:03:70:
9a:0c:21:f1:83:51:93:63:52:de:70:4d:16:5e:5f:
22:f5:80:23:7e:d2:fe:88:36:13:06:23:1a:5e:d4:
9a:8e:84:c0:19:62:fc:1d:a5:20:b5:50:fa:83:7c:
72:6c:cb:0b:7a:a3:38:1e:ad:fa:ac:1d:1a:35:3c:
db:54:4d:ed:67:ab:73:cb:86:06:ac:d5:b5:86:3d:
0a:92:54:3f:98:e0:85:ef:7c:c5:09:dc:93:ec:e5:
a5:28:b9:25:f9:60:fe:f3:f1:45:03:88:c9:c6:05:
93:54:a8:81:f9:65:02:63:2f:9c:35:81:cd:83:27:
43:7f:83:88:b1:bb:6f:b7:9d:a7:20:45:0e:39:7a:
e4:7a:1b:48:51:19:d4:0f:7b:c1:ba:02:83:aa:67:
fb:2f:fc:e7:3a:66:b8:8c:e4:65:33:4d:fa:14:19:
8a:21:46:66:fb:ef:81:6f:c1:e7:11:86:77:21:9f:
80:2a:7f:e0:fb:be:07:29:12:1d:37:c3:08:bb:fc:
cd:95:48:e5:7b:b6:b7:5f:6e:4d:06:fa:d2:46:75:
04:f9:80:b4:63:9a:32:f5:54:5d:d5:20:60:ac:52:
f8:12:2e:9f:c3:fe:d5:f3:d9:54:d4:fc:f5:43:14:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CC:AF:37:00:F9:88:1A:BA:0D:FA:E1:66:09:DB:C0:BD:A8:11:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EC69A88E53711EF8FF88E6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.135.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:bd:4c:60:f9:94:34:d6:fd:0d:24:89:c5:f1:28:21:86:1e:
d6:66:c9:96:38:bb:52:9e:2d:3e:4f:ac:ad:ba:52:f5:1a:9d:
7c:4f:5d:14:6e:bb:da:08:3e:ab:8b:22:95:11:33:ee:61:43:
53:12:71:3c:2d:f0:42:5b:75:42:f4:95:8a:d2:ee:6f:e3:a4:
9e:a2:33:6b:9f:e9:3b:2b:a1:89:94:4c:44:55:47:50:ba:2b:
85:d0:06:3a:66:23:51:ca:1a:f7:c3:85:e4:0e:dd:58:be:af:
64:39:1e:aa:02:c1:cd:be:3c:92:5a:22:8a:77:89:1b:a6:3a:
51:3a:93:f4:f8:0c:71:6d:87:3a:1f:ca:16:52:16:a4:3b:7b:
76:b1:c5:47:69:2e:c5:8a:40:0f:a4:ef:e9:1a:52:d7:58:7b:
93:92:39:1b:74:5f:4a:4c:cd:33:92:c8:27:8e:f5:ae:32:8e:
b8:3b:ea:2e:07:66:30:a7:9a:74:c1:f7:86:91:e7:33:eb:b7:
ce:0d:6b:88:82:5f:d1:55:48:3a:fa:89:c5:f5:d3:d3:09:89:
22:8d:6e:5f:7a:28:e8:ae:de:35:11:6f:69:fb:2f:b1:82:8b:
ba:95:47:48:74:3e:7b:6e:35:a7:76:f7:e8:08:b3:5f:fc:fa:
85:39:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:55 2025 by rpki-client