Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4705F1AF5DA11EF88F84059762E951A.roa
File: A4705F1AF5DA11EF88F84059762E951A.roa (raw, json)
Hash identifier: hvuiAdY1loSjnKA/1xfhAsK3FncWRUaWzEzFRvB84F4=
Subject key identifier: 4D:91:12:0B:32:CB:82:5E:8E:28:7C:EC:F3:8B:DF:AB:70:1E:DD:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4705F1AF5DA11EF88F84059762E951A.roa
Signing time: Fri 28 Feb 2025 13:48:08 +0000
ROA not before: Fri 28 Feb 2025 13:48:05 +0000
ROA not after: Sun 30 Mar 2025 13:48:05 +0000
asID: 203020
IP address blocks: 156.228.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81412 (0x13e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:48:05 2025 GMT
Not After : Mar 30 13:48:05 2025 GMT
Subject: CN=67c1be98-7b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:b5:51:bc:c2:c1:8c:96:4b:6d:be:8a:8e:
5f:3c:6e:6d:37:f4:82:6b:d4:5f:e3:92:f7:6e:61:
20:53:d0:58:72:69:2e:8f:d5:fa:6a:5c:19:42:20:
00:a6:de:fe:68:9c:cc:3c:f1:d9:47:db:d4:eb:4d:
75:d2:a6:e2:ba:57:71:a1:30:49:58:dd:d1:67:a8:
7b:e5:14:cc:46:0e:ca:ff:57:75:45:02:4c:9c:db:
96:c5:34:d2:6c:f6:7d:28:a8:b0:71:8e:69:34:ee:
26:64:fd:f0:c6:8b:fa:c9:f3:8a:d7:73:13:61:eb:
10:59:4b:c0:94:2f:46:c6:7f:1a:3a:45:41:17:f7:
64:d7:bb:4b:55:3f:86:2c:e1:fc:4b:0e:fd:d8:9b:
77:65:f5:d6:03:dc:96:03:8a:2a:82:ce:e3:61:7a:
7c:07:a3:f3:95:cd:5e:a6:c5:2a:76:5e:8d:26:c3:
64:88:d6:b3:7b:c3:aa:d8:ec:a0:26:89:de:87:87:
18:bc:12:72:65:f7:04:99:ad:4c:a0:5a:55:f2:56:
73:9e:96:4b:1d:79:44:bf:fd:ec:22:ce:ea:8e:2e:
84:b3:e3:8c:c0:ab:ee:25:90:12:93:ee:b4:b5:2f:
58:99:6f:5f:31:29:29:81:df:3d:ae:3e:3a:dc:36:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:91:12:0B:32:CB:82:5E:8E:28:7C:EC:F3:8B:DF:AB:70:1E:DD:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4705F1AF5DA11EF88F84059762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:34:b2:11:bb:09:b0:a9:19:08:5d:bf:4f:e6:04:e0:3f:0e:
ce:2d:5f:91:38:db:68:1f:14:42:51:51:40:ba:de:cc:e0:a3:
4f:8a:37:fd:38:07:91:17:5a:17:3b:e0:ca:e2:63:df:91:36:
e3:7c:4c:09:41:fa:e7:8f:af:62:66:d2:a8:18:3d:88:eb:70:
cf:45:ed:e7:22:98:d5:13:a9:6d:1e:3a:b3:47:0c:2a:4e:9e:
ec:e6:fe:f7:19:c8:d5:65:24:c4:b3:56:48:b0:15:1a:7c:7a:
05:9f:11:59:bf:e4:12:de:86:3e:bb:5e:6a:72:5a:f3:09:af:
26:76:64:39:bb:01:cf:c1:f2:01:f5:b8:ef:b1:f6:cd:5a:39:
4d:93:78:e8:a4:e0:c5:7e:af:1e:7c:28:d8:b8:d6:6b:6a:c8:
e8:6c:04:e9:61:bf:e5:eb:c6:d2:8e:95:69:a0:01:df:b0:ab:
db:ee:e2:b8:68:41:75:b2:66:c8:d9:a7:51:14:07:b6:3a:c7:
34:eb:56:e7:e4:9f:3f:e2:7a:0d:64:d5:ae:88:c6:73:37:53:
d3:bd:98:e6:87:d2:a9:0f:9e:47:fc:58:a5:40:90:77:f6:70:
7f:2e:63:1e:cb:b6:e4:3c:8d:1c:12:ec:c2:1f:8b:87:91:fb:
40:a9:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:09:25 2025 by rpki-client