Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0867D4D4B011EF811A2BA9762E951A.roa
File: 9F0867D4D4B011EF811A2BA9762E951A.roa (raw, json)
Hash identifier: un9x/FqPTUQzaoyRhKw94c+QL1HdIG2RuihLkao89Xc=
Subject key identifier: 68:41:81:3B:54:F0:B0:11:37:AD:87:5B:D0:E6:5A:97:6D:7A:19:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01094B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0867D4D4B011EF811A2BA9762E951A.roa
Signing time: Fri 17 Jan 2025 08:54:12 +0000
ROA not before: Fri 17 Jan 2025 08:54:08 +0000
ROA not after: Thu 17 Jul 2025 08:54:08 +0000
asID: 63199
IP address blocks: 156.241.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67915 (0x1094b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 08:54:08 2025 GMT
Not After : Jul 17 08:54:08 2025 GMT
Subject: CN=678a1ab4-2d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:db:d8:a8:a3:5c:2a:ce:7e:93:9c:73:2e:
7e:bd:48:03:b5:c8:ef:cd:ec:eb:f4:21:9e:13:8a:
91:36:b1:3a:e6:44:7f:25:be:22:5e:11:1d:95:3b:
71:ce:ce:3d:6c:8e:36:d9:e9:00:bd:12:2f:47:96:
03:33:b7:5f:9c:ea:b5:7b:46:28:ec:41:b5:1c:0a:
62:35:67:23:c4:dd:3c:df:8f:0a:0d:f0:ca:b6:c0:
2b:d9:bb:fa:6e:1a:05:af:1a:b3:a7:1b:a7:12:92:
cb:86:90:07:ff:54:26:97:03:ea:e3:1c:e8:fa:86:
fd:20:28:d7:2d:bb:0f:6e:56:26:31:22:87:84:90:
f3:7a:5e:9b:0c:3a:f3:ed:55:00:88:39:5e:8b:d1:
ff:4a:8b:37:2c:6d:c9:25:f1:ce:e9:34:3d:ec:0b:
48:bc:95:02:44:b2:03:ce:bb:41:c0:87:cf:ae:0d:
ac:ec:38:2b:59:5a:0e:62:d9:5d:ff:46:f3:f0:6e:
53:18:02:59:db:d3:35:b8:37:2d:6e:39:c4:9a:ce:
34:22:14:6c:b9:79:f0:84:b8:04:b0:a3:7d:94:8e:
09:54:96:07:41:89:13:97:a9:5d:ab:06:35:88:19:
16:b3:bc:cf:69:4a:d9:6d:69:a7:96:36:43:b2:c9:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:41:81:3B:54:F0:B0:11:37:AD:87:5B:D0:E6:5A:97:6D:7A:19:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0867D4D4B011EF811A2BA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.1.0/24
Signature Algorithm: sha256WithRSAEncryption
07:58:f6:fc:97:74:c1:fb:c3:3f:3e:e0:01:a8:ed:00:11:4f:
03:a7:0a:18:8e:a1:7b:b7:f9:06:26:42:2b:25:4c:44:15:98:
8e:f8:86:97:e0:cc:e2:ae:90:df:ac:fd:84:f9:e6:5c:94:30:
c2:1e:e4:bc:0d:55:07:29:95:fa:bf:85:57:91:64:91:dc:49:
f9:f8:17:69:00:79:4b:24:25:06:29:4e:57:8c:95:ba:94:c6:
56:96:d3:d9:d4:5d:8d:d5:e5:cf:d6:8e:39:9d:c8:fc:0a:c9:
d0:b5:9c:e6:d0:20:f5:8a:02:5c:e6:74:a2:bc:23:09:b4:3e:
a0:e3:9a:fe:aa:0a:8c:ee:36:9a:14:89:bd:4a:ef:98:66:ee:
c0:ad:17:7a:26:10:a1:a7:a7:c7:cf:a2:77:55:04:f3:9e:b2:
f1:49:e3:a6:0a:0f:0c:b6:bd:41:dd:d4:d5:b9:be:0a:76:4b:
e8:e2:ca:fa:82:f4:43:68:87:e0:b8:b7:36:fa:b4:2f:bc:02:
1c:84:24:9b:a0:b2:5c:90:3b:e5:64:be:72:e5:31:be:f5:b2:
9c:78:d3:98:16:ae:fd:16:c8:55:fd:78:64:cd:6b:30:21:82:
fb:69:b9:57:71:ad:f3:e9:31:09:1c:cc:b7:f7:af:7f:df:77:
21:f0:2d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:09 2025 by rpki-client