Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B45FE628E9B611EF9BD0CDB2762E951A.roa
File: B45FE628E9B611EF9BD0CDB2762E951A.roa (raw, json)
Hash identifier: cd0zhmfznlLu0B//qG9di5ly4iBcbzy5XJv+MM4N0Os=
Subject key identifier: F1:75:28:E1:80:D0:52:C9:AD:30:BF:50:3D:1C:C7:F4:B5:9A:39:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0121C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B45FE628E9B611EF9BD0CDB2762E951A.roa
Signing time: Thu 13 Feb 2025 03:00:39 +0000
ROA not before: Thu 13 Feb 2025 03:00:35 +0000
ROA not after: Wed 31 Dec 2025 03:00:35 +0000
asID: 17561
IP address blocks: 156.236.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74180 (0x121c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 03:00:35 2025 GMT
Not After : Dec 31 03:00:35 2025 GMT
Subject: CN=67ad6057-26d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:88:ed:21:bc:e0:13:2a:80:b8:9b:07:0a:
34:2d:a2:54:1c:be:d3:15:b2:2f:91:5c:2b:d1:65:
e7:51:27:34:90:5f:2a:86:2e:1c:d4:df:81:09:4f:
d0:a6:6b:28:91:30:e4:62:1a:53:2b:95:97:7d:54:
e3:6c:09:56:69:20:a9:66:28:ca:65:92:aa:61:50:
aa:fc:7a:96:0b:63:db:c8:f9:2b:f3:fa:ee:92:54:
71:89:6e:85:2a:1f:79:ef:82:a9:a3:10:08:75:7b:
1c:c1:26:67:cc:81:e1:30:80:e0:9b:e5:b2:c4:b1:
da:50:07:6c:ce:06:9a:28:9e:3a:e2:a9:cb:a0:fd:
de:fe:d9:0b:dd:ec:06:b9:e6:ea:34:2e:4e:be:1d:
44:ec:dc:e7:9f:0c:6f:c8:bb:3c:87:1f:12:17:37:
ab:66:63:75:ae:4b:c4:98:8e:23:0c:52:d3:b5:b1:
fa:f0:0c:af:18:6d:ee:86:51:5c:cf:52:c9:75:8f:
73:c7:7b:6c:37:8e:86:78:9b:f4:fa:4d:ef:a5:30:
ba:3e:fb:98:69:78:40:ef:fe:c0:22:aa:cd:d3:21:
8c:38:20:4d:dd:5c:7a:8e:69:54:20:7b:64:f5:bd:
84:b6:b7:2c:f2:c9:4d:5d:6e:55:65:eb:5d:a2:86:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:75:28:E1:80:D0:52:C9:AD:30:BF:50:3D:1C:C7:F4:B5:9A:39:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B45FE628E9B611EF9BD0CDB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.57.0/24
Signature Algorithm: sha256WithRSAEncryption
05:52:aa:80:6b:62:10:91:7b:59:a0:aa:35:46:6e:c2:0c:f6:
bf:bd:62:5a:0f:20:14:6b:42:c6:cd:03:f7:f1:52:5c:c0:8b:
38:1d:a2:9a:a7:52:ff:fc:1a:1c:d9:fc:05:fc:d0:58:dd:c0:
6b:b2:4d:1e:e0:9f:cb:60:ca:9d:e8:6e:b1:74:a8:89:fd:4a:
99:12:b4:1e:24:44:09:df:4d:ab:16:e3:e1:35:be:42:d0:2c:
3a:60:aa:f8:b8:9d:ad:bd:fb:f8:10:af:e6:a0:55:ef:2b:7d:
ea:a4:03:0f:89:d7:26:44:e9:06:55:78:62:94:a6:14:17:ad:
dd:66:ac:6b:91:ba:5a:62:ac:2f:d4:4c:6c:89:fe:ea:81:1e:
d3:72:a4:db:68:22:62:9b:bf:6b:2c:31:a0:57:5b:6b:e5:76:
29:f9:d1:d0:a6:fc:07:a4:67:57:1f:9e:a5:0f:43:fb:31:9e:
7c:7c:55:ac:35:a6:f0:aa:33:40:40:da:14:08:43:8f:0b:99:
a2:c8:1e:80:a5:d7:84:0c:4b:ff:a4:81:5f:43:b9:b8:50:a2:
9e:68:b1:ee:3a:15:58:1e:0e:d1:9e:b7:76:d0:99:3a:e3:dd:
a8:80:e7:14:6f:de:ea:1d:58:f4:03:eb:0d:9f:61:23:f8:cc:
01:c9:57:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:41 2025 by rpki-client