Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0D828A8F47411EFA5CFCEB3762E951A.roa
File: B0D828A8F47411EFA5CFCEB3762E951A.roa (raw, json)
Hash identifier: XPbEydm8uOwNd4ex3XA0y6LOhrVrUxvgAedIVA0MRcU=
Subject key identifier: 79:99:68:7F:D5:04:4E:8C:8A:1A:5D:AC:CC:2E:11:96:DC:80:D1:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0D828A8F47411EFA5CFCEB3762E951A.roa
Signing time: Wed 26 Feb 2025 19:05:49 +0000
ROA not before: Wed 26 Feb 2025 19:05:45 +0000
ROA not after: Sat 19 Feb 2028 19:05:45 +0000
asID: 17561
IP address blocks: 156.241.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79575 (0x136d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:05:45 2025 GMT
Not After : Feb 19 19:05:45 2028 GMT
Subject: CN=67bf660d-7a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:a8:34:19:bf:79:74:37:be:a6:3c:41:a9:
94:59:4b:7a:d0:b9:46:aa:89:ab:40:3b:80:5e:20:
cc:9d:da:72:bc:a8:72:f4:09:10:2d:12:18:0b:10:
76:a1:6e:36:1c:ce:f7:3f:d7:85:61:c2:04:f8:ea:
8f:89:db:c2:a2:d7:52:c9:04:fe:3d:8e:ff:bd:a3:
93:96:a7:b5:a9:ef:ff:f0:cc:71:c9:2f:2b:15:74:
e3:c7:d7:d4:a0:89:fe:ac:b2:d8:e9:ea:36:53:7d:
5e:75:f1:f7:62:00:88:d8:f8:1d:a6:65:69:50:e8:
44:ed:26:4e:e6:5a:d4:46:bf:07:13:70:33:35:4b:
41:76:77:8c:6f:83:5f:56:02:8f:d9:fa:c6:69:be:
09:22:78:4e:70:29:f8:e1:da:35:95:f1:c7:3e:2f:
b1:50:df:ab:0b:50:81:d3:30:c7:87:2c:ac:e3:e6:
d3:df:27:68:0d:c4:da:09:52:d2:17:80:a7:a1:71:
54:4a:82:51:4d:04:ff:74:bf:d7:94:e5:ac:25:5d:
b3:f0:f0:a6:5a:40:9b:fd:68:68:6d:81:69:be:a6:
05:f5:d3:70:a4:32:4a:d0:2f:a6:9e:a1:ff:1d:a4:
45:ef:ac:e0:a5:e7:33:6d:f5:18:30:e7:bd:ee:0a:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:99:68:7F:D5:04:4E:8C:8A:1A:5D:AC:CC:2E:11:96:DC:80:D1:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0D828A8F47411EFA5CFCEB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.51.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:d6:4a:64:83:03:8f:62:f1:76:23:a4:6c:de:09:d1:1a:2c:
27:c6:e6:90:77:8b:62:80:8d:a6:c4:e4:ed:43:11:4c:6c:f4:
58:94:a9:67:00:cb:a2:34:86:b3:74:21:87:a1:9b:7e:de:ea:
5c:73:64:6e:db:e4:ec:2c:26:9d:72:e8:d9:4a:52:51:c4:cc:
d4:43:db:25:98:5a:74:78:71:a9:a1:0d:a0:7e:81:09:9a:73:
ca:59:2a:48:3d:04:3b:32:c1:31:37:79:6d:d8:59:b3:7a:0f:
4a:b0:79:86:87:db:db:0f:42:2d:11:a0:3d:a6:66:e0:d7:89:
25:31:0a:b8:66:f5:ef:6b:f1:19:e6:c0:6b:9e:78:73:93:7e:
32:3b:bd:d0:16:86:6b:9b:de:d9:21:62:63:75:ee:11:cd:1b:
f0:09:ac:db:f2:a3:3e:73:ee:24:1c:e2:cf:17:a5:18:9b:3b:
71:15:ce:c1:7e:69:5b:f3:25:12:ad:2f:48:b3:f8:fd:ce:c3:
c2:93:7c:34:e7:eb:08:fb:e3:5b:4e:04:9b:64:a9:ad:5d:13:
7c:a8:cc:d4:de:3d:da:6b:39:26:b5:49:dd:54:60:56:69:d8:
5d:eb:59:0a:e1:e3:9f:c9:5f:2e:d2:63:ee:2e:48:11:f3:05:
e4:c6:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:05 2025 by rpki-client