Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2BF8E18070811F0B3E6A3B5762E951A.roa
File: A2BF8E18070811F0B3E6A3B5762E951A.roa (raw, json)
Hash identifier: IKQz6Ot04fue5EwUPGrCwGDxDb/I/Sb4xIngGkw7kEQ=
Subject key identifier: BA:3D:C1:3E:CF:44:36:ED:5E:E9:4F:1C:90:1C:A1:5B:4B:EC:EE:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014783
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2BF8E18070811F0B3E6A3B5762E951A.roa
Signing time: Sat 22 Mar 2025 10:30:12 +0000
ROA not before: Sat 22 Mar 2025 10:30:08 +0000
ROA not after: Thu 08 May 2025 10:30:08 +0000
asID: 5068
IP address blocks: 156.225.8.0/22 maxlen: 24
156.226.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83843 (0x14783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 22 10:30:08 2025 GMT
Not After : May 8 10:30:08 2025 GMT
Subject: CN=67de9134-4bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:5f:cb:d4:5a:f0:a0:6c:29:87:c8:29:37:
2d:79:5a:7c:06:7e:f2:9c:52:5d:d2:ad:0c:18:c8:
56:c9:31:bf:15:59:4f:e5:8b:7f:1e:b5:bc:b1:67:
9e:1d:19:fe:cc:90:5b:80:a4:01:24:84:8e:06:1f:
a0:6f:63:07:0c:c4:ae:4c:68:3b:3e:97:49:4b:21:
d0:a0:60:70:bc:da:9b:59:72:80:85:ad:a2:c0:e3:
7b:dc:b5:5d:7c:ab:a6:22:93:8b:78:fe:f0:10:2f:
d1:bd:80:fe:e8:96:20:d7:00:ad:de:cd:a2:d5:f4:
7a:62:b9:81:32:c1:9c:80:43:5b:45:cd:c9:3b:13:
94:e7:65:a6:37:77:d3:00:80:88:a9:84:cc:82:4b:
9f:6e:84:b4:a3:da:5d:c3:d1:f4:1b:c8:d2:96:0d:
80:ff:2a:e3:1c:49:71:c6:2d:81:61:e9:1b:05:aa:
42:41:a3:95:9e:ec:98:c4:dc:cd:6b:75:cc:10:89:
d3:a5:c2:aa:88:82:75:77:69:d9:90:fa:1f:6d:da:
09:15:86:24:12:c2:d2:0f:78:ae:3a:11:ae:a1:98:
6d:76:f2:d6:44:8b:53:2d:83:0f:b3:b4:a7:ed:b6:
53:5d:7c:fa:15:da:fa:69:2a:85:89:10:cf:a9:b2:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3D:C1:3E:CF:44:36:ED:5E:E9:4F:1C:90:1C:A1:5B:4B:EC:EE:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2BF8E18070811F0B3E6A3B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/22
156.226.164.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:7d:79:3b:6f:6a:2c:bd:3f:fa:cb:cd:b4:7c:3c:41:7e:a2:
64:bf:22:ff:68:c3:fd:97:95:ab:ca:23:75:0d:1c:1e:7a:5c:
33:e5:fe:dd:e2:92:07:12:6c:12:6f:ea:d2:dd:a6:a7:7a:bf:
0d:7d:c7:37:34:e2:b6:30:b4:5f:92:04:92:7f:c3:ca:4a:54:
a5:27:1d:0a:b3:88:d6:55:49:03:c6:cd:ee:44:68:c4:33:93:
fd:6d:13:17:b5:d3:6e:db:8d:2e:1c:7d:8d:65:22:ee:11:03:
ac:bf:28:29:7b:17:53:2a:41:af:26:35:ed:19:a5:24:37:77:
af:89:95:ef:73:5b:36:23:2d:7d:c3:47:5c:76:68:ee:06:e4:
74:ea:73:2d:35:9b:8c:57:64:68:85:a4:1f:83:e3:66:a8:2f:
7a:06:88:c7:a6:d8:48:e1:73:26:3e:42:61:3d:85:92:58:73:
41:c8:7c:42:4f:d8:96:76:9e:ea:7b:de:4d:34:2d:42:57:df:
a3:86:08:ae:76:1c:2a:a4:cd:60:55:e2:52:88:ea:12:40:b3:
c6:da:ad:8b:b4:99:5f:52:56:88:c8:8b:ce:38:20:7d:bc:08:
81:a5:ff:f0:ef:c8:51:c7:5e:38:2e:96:56:6d:0a:34:b9:92:
fd:c1:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:38 2025 by rpki-client