Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FED19CF4A411EF9EF6E67A762E951A.roa
File: A8FED19CF4A411EF9EF6E67A762E951A.roa (raw, json)
Hash identifier: Jagokm5h1wrRgpEpOQQON7iMaZGOmGggWaaICJBEn20=
Subject key identifier: 79:57:5A:B3:89:30:67:62:18:7E:01:45:31:BD:4F:DD:14:33:89:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01388F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FED19CF4A411EF9EF6E67A762E951A.roa
Signing time: Thu 27 Feb 2025 00:49:12 +0000
ROA not before: Thu 27 Feb 2025 00:00:08 +0000
ROA not after: Sat 19 Feb 2028 00:00:08 +0000
asID: 17561
IP address blocks: 156.229.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80015 (0x1388f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:08 2025 GMT
Not After : Feb 19 00:00:08 2028 GMT
Subject: CN=67bfb688-997e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:53:6f:a2:38:3e:40:5b:ee:34:0a:3c:4c:
f8:19:8d:bc:81:17:30:2a:a4:e1:ca:d9:8a:b5:12:
c8:f6:03:d7:bc:c1:38:6b:ac:c5:cb:e1:31:a3:eb:
fe:16:7a:95:cd:92:86:6f:bc:bd:cb:4f:bb:4e:c1:
27:58:ea:33:4f:ce:38:13:57:56:d5:50:d6:4d:9b:
fb:50:67:a5:30:99:3b:aa:77:b5:13:ff:61:94:65:
52:3e:91:ab:22:d4:b1:53:10:aa:3b:dc:8c:16:a3:
fd:a4:c2:df:9e:d5:35:1d:a1:25:99:57:04:9b:4e:
22:42:84:4e:01:11:80:a4:27:f2:7a:26:db:d0:39:
da:3a:ac:6f:b3:9a:53:ae:05:9a:f5:09:53:74:5c:
6c:71:fd:5c:a9:de:59:39:86:02:6a:fc:5f:13:e0:
3b:a7:18:b8:a7:85:a1:25:9c:d5:60:35:b4:7f:d4:
88:9e:a6:d6:8e:17:6c:84:77:ed:94:75:e0:69:dd:
f7:79:a8:c4:c2:25:56:83:5d:65:9d:a7:dd:1a:64:
f2:8d:7a:f9:23:d2:d4:62:11:2f:e8:ce:c6:87:dd:
b4:14:17:29:3c:4b:ce:5d:11:2a:be:b7:71:d7:37:
b9:4b:38:e7:4a:2a:c8:ee:63:06:a5:84:88:67:5a:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:5A:B3:89:30:67:62:18:7E:01:45:31:BD:4F:DD:14:33:89:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FED19CF4A411EF9EF6E67A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.121.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0f:63:55:84:dc:0a:3f:43:0c:71:88:5f:ba:32:ff:04:3f:
2b:13:59:63:11:e6:e0:fc:69:8e:7a:cf:d6:19:75:26:fd:8a:
8a:11:01:1b:ca:4c:f4:54:ba:e7:2d:58:81:99:33:8a:0d:54:
0a:6c:dc:ec:c8:03:a7:9b:7b:8c:29:55:c2:2f:42:bb:f1:2a:
76:46:5c:76:58:26:b3:26:18:8e:b2:98:f8:24:30:f1:e5:f2:
63:e6:fd:48:64:cf:09:72:2c:da:8a:e2:e7:80:0f:28:f6:96:
d0:2b:ac:80:c4:b2:49:88:0c:2f:fe:6f:09:33:28:72:27:95:
2f:3e:1e:ed:62:98:dc:4e:1e:8f:99:cd:55:29:8e:a9:eb:96:
30:73:c4:fe:ad:3d:e5:1d:d5:72:81:84:e4:4d:d2:f2:86:36:
b8:95:17:3e:99:dd:f9:52:08:42:84:2a:83:4d:74:fd:37:65:
c4:1b:00:be:ba:79:d7:64:ff:df:a1:eb:11:af:ab:2f:9a:4a:
bf:63:43:08:29:6b:ac:8a:1c:05:48:10:02:12:89:9f:55:64:
17:be:f0:fe:20:ef:43:5b:49:64:72:b7:cd:07:1a:ad:5b:bb:
23:b6:fc:c7:7d:36:94:4a:f8:fb:0a:62:cb:67:0d:00:0f:c0:
b0:34:7f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:40 2025 by rpki-client