Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACCAC58C00C611F090FDCF6F762E951A.roa
File: ACCAC58C00C611F090FDCF6F762E951A.roa (raw, json)
Hash identifier: /EatuPC6zk9RehLhrAIRxhgfWclm5kpLENbo63dqDTc=
Subject key identifier: FA:CC:09:47:6C:A0:0B:77:31:82:AF:6E:40:FC:6D:86:D4:FD:04:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01460C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACCAC58C00C611F090FDCF6F762E951A.roa
Signing time: Fri 14 Mar 2025 11:22:55 +0000
ROA not before: Fri 14 Mar 2025 11:22:51 +0000
ROA not after: Sun 11 May 2025 11:22:51 +0000
asID: 135097
IP address blocks: 156.226.32.0/19 maxlen: 24
156.226.64.0/18 maxlen: 24
156.241.64.0/18 maxlen: 24
156.245.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83468 (0x1460c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 11:22:51 2025 GMT
Not After : May 11 11:22:51 2025 GMT
Subject: CN=67d4118f-73fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:53:1b:88:3e:b2:b8:b3:a1:45:26:8d:99:
33:6a:19:05:b4:e6:73:49:57:0f:e4:66:0c:61:6e:
37:7e:3b:aa:ae:77:95:fc:33:37:d1:37:00:3f:e4:
fd:48:52:1f:b0:ee:77:df:70:fd:73:d3:b5:4d:8f:
9a:35:30:ab:8d:4e:6c:0f:c0:bf:d6:20:98:8e:e0:
66:4a:1f:08:a2:fd:2d:03:c3:9b:d1:36:78:87:76:
aa:9c:38:6a:11:5b:1d:16:75:2e:9a:7d:71:80:08:
8f:0b:34:48:4d:75:a7:04:19:5a:c9:4c:26:62:50:
a8:15:a2:31:cb:e0:58:f8:30:45:7f:16:27:db:86:
62:02:bc:7a:72:48:7c:45:9a:10:6d:61:45:0a:fb:
ae:ab:74:05:3e:49:fd:98:6b:da:d9:0b:40:5f:c1:
69:ef:b7:ea:95:02:49:ff:f2:8a:80:89:a6:19:61:
5b:ad:4c:c4:54:ac:fc:e0:5c:56:96:44:93:e0:91:
03:00:e0:d2:73:76:69:76:8a:f6:66:1c:25:33:2a:
93:ab:0e:ab:5a:46:21:cb:90:c3:62:29:df:1f:fe:
88:98:c9:bb:09:24:4f:d6:02:4d:97:3e:61:b6:46:
22:8f:cf:1b:6e:99:c2:10:09:bb:e4:c7:74:17:08:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CC:09:47:6C:A0:0B:77:31:82:AF:6E:40:FC:6D:86:D4:FD:04:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACCAC58C00C611F090FDCF6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.32.0-156.226.127.255
156.241.64.0/18
156.245.32.0/19
Signature Algorithm: sha256WithRSAEncryption
64:cb:c1:6c:18:71:b2:4e:f0:e8:89:2b:86:19:9e:57:95:78:
7f:7b:3c:1d:ed:68:57:c1:d1:ef:cf:41:e7:10:31:30:91:c2:
d4:40:98:8b:15:b4:ad:98:38:fa:01:68:d5:78:d5:8e:47:76:
13:a2:4d:8e:25:80:28:c0:b2:33:61:95:42:d0:4e:34:e5:fd:
7b:be:24:10:b0:ce:83:a5:d9:b7:f2:4b:29:c0:c2:8c:01:ac:
6f:fe:77:73:a9:49:a0:ed:9b:87:da:83:08:09:5c:15:d0:e9:
15:f3:fd:dd:97:95:ba:9b:7b:ad:27:c0:0f:73:21:8a:05:38:
c1:84:d7:2c:e0:ed:fd:bb:e0:7f:17:2a:92:4f:d3:ff:fb:3a:
ca:49:18:f8:97:28:60:57:49:3e:fa:c8:00:fd:5f:4f:88:4a:
4b:04:8b:dd:9a:f7:8d:f2:d6:40:9d:d6:ab:64:c7:43:d6:e9:
c2:80:1a:ea:ca:de:09:ce:21:2b:1d:85:d2:e6:0d:8a:6a:c2:
01:96:4e:45:6d:29:85:61:9b:ff:58:db:5a:25:10:61:b5:72:
ab:d7:32:fe:c3:2b:ed:04:e6:20:c5:f5:a2:48:88:df:a6:5e:
89:bd:a7:b5:1c:cd:ab:58:35:8f:26:2f:1b:27:33:76:a4:de:
1d:84:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:49 2025 by rpki-client