Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3CA5F00E00111EFA4D5F5BA762E951A.roa
File: A3CA5F00E00111EFA4D5F5BA762E951A.roa (raw, json)
Hash identifier: 1P5UXMo0Sh9bzcG3y1Ioc/7/3BpZZ58O71Fhi7e67HU=
Subject key identifier: 52:56:14:22:E2:89:EC:55:24:AD:D5:D4:F9:99:E6:C2:B2:6C:D1:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3CA5F00E00111EFA4D5F5BA762E951A.roa
Signing time: Fri 31 Jan 2025 18:31:52 +0000
ROA not before: Fri 31 Jan 2025 18:31:48 +0000
ROA not after: Sun 11 Jan 2026 18:31:48 +0000
asID: 399077
IP address blocks: 156.248.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71407 (0x116ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 18:31:48 2025 GMT
Not After : Jan 11 18:31:48 2026 GMT
Subject: CN=679d1718-a8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:d2:af:1b:5d:57:2e:3a:87:37:65:23:d7:
9f:19:44:c5:2a:52:f8:be:ad:d2:86:5a:11:55:8a:
d4:0d:fc:d1:b1:e1:48:f0:0c:86:49:d6:05:e9:a6:
59:48:f6:53:89:db:88:29:9f:39:df:8d:b0:75:9b:
8c:e1:fb:c1:43:be:0b:df:4f:1b:af:e8:4b:d7:44:
d2:37:f8:0d:31:ac:b3:7b:e8:17:fc:84:d1:49:2d:
b1:20:36:7b:77:da:70:bc:cf:31:08:50:10:37:fb:
8a:c7:3a:ea:23:2c:11:b9:fe:8f:c1:bf:17:34:cc:
73:56:56:1e:bb:eb:90:e1:d3:b5:42:1d:2c:e6:19:
d0:30:5f:4d:f9:76:d4:f5:70:8c:8a:c0:42:d5:88:
f4:00:bc:a2:b7:e8:29:e5:80:60:5b:eb:cc:d2:ed:
75:39:60:17:dc:a5:1d:e6:c4:e2:3e:be:db:de:9f:
17:13:21:28:b3:e1:fb:77:ea:ad:1e:02:e9:51:1b:
e5:67:e2:50:9b:ec:24:ed:a4:af:a0:ef:1f:1c:55:
a6:98:50:09:77:79:d7:25:43:74:80:58:12:34:be:
44:74:da:e9:cc:5c:65:fa:2a:80:23:85:16:e1:24:
f7:51:9f:06:f9:79:3e:b1:a8:2e:22:4a:40:a9:34:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:14:22:E2:89:EC:55:24:AD:D5:D4:F9:99:E6:C2:B2:6C:D1:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3CA5F00E00111EFA4D5F5BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1b:00:9f:10:8b:69:3c:86:59:be:ee:dd:40:41:ba:75:8a:
49:2e:2a:33:a7:57:c8:8b:5d:d9:d4:4d:10:08:49:54:b6:43:
2d:ad:fc:c9:95:1a:93:34:57:f2:ea:50:c0:34:b2:62:24:10:
05:ca:a6:ee:29:be:0a:4f:a0:b5:ae:19:e3:d9:e9:e3:9c:05:
f5:4f:c7:5a:75:bb:e3:73:04:f0:ef:e2:5e:49:05:81:63:81:
13:38:6f:1b:cb:0b:05:cd:7c:d7:13:6f:55:3e:49:f1:90:2b:
ad:ce:1a:e6:67:84:54:75:01:93:07:ae:56:7a:6a:27:65:03:
42:ba:03:ce:2d:d5:42:58:15:8d:d4:99:55:41:16:6b:2f:49:
c3:a1:be:29:7e:30:91:16:2c:33:73:a2:c9:c2:6f:89:88:9d:
79:a8:c9:4f:e7:52:e0:2a:26:a0:6b:3e:75:d5:ce:8d:58:b4:
f1:a7:b5:71:ea:ac:7a:6f:cf:66:9a:c5:4b:0a:f6:d3:14:68:
6f:90:24:4a:c8:d4:ef:08:96:17:14:ec:e1:d4:5c:5e:a9:44:
3b:c0:b3:39:70:ee:eb:c9:0d:19:38:17:3b:3a:a0:ba:55:4c:
15:4c:85:97:1f:4e:d8:d9:3e:05:2b:f3:61:be:2b:7c:4e:58:
91:b3:c9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:50 2025 by rpki-client