Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B87BD914E53911EF880B5D79762E951A.roa
File: B87BD914E53911EF880B5D79762E951A.roa (raw, json)
Hash identifier: 2XPg1aZKdd8P4sYraGaMU6m5o7eHWQvT5pQHNCjZ5/A=
Subject key identifier: B4:0F:E5:AA:CF:88:BC:60:FE:3E:07:9A:0B:E7:09:A3:D4:2A:FE:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CD7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B87BD914E53911EF880B5D79762E951A.roa
Signing time: Fri 07 Feb 2025 09:55:54 +0000
ROA not before: Fri 07 Feb 2025 09:55:51 +0000
ROA not after: Mon 13 Dec 2027 09:55:51 +0000
asID: 17561
IP address blocks: 156.230.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72919 (0x11cd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 09:55:51 2025 GMT
Not After : Dec 13 09:55:51 2027 GMT
Subject: CN=67a5d8aa-3aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:10:6f:00:1c:98:1c:a5:e7:83:49:c3:c9:
f9:67:6f:2d:71:84:e8:b6:43:1c:08:19:f2:c5:5d:
c4:b0:bf:3f:3e:cf:46:cf:64:ad:3c:86:1b:a4:00:
4e:98:ce:32:2d:14:46:83:b4:e8:c6:42:bf:92:94:
9a:a3:0f:ee:6f:f4:e9:a3:47:64:f1:98:00:fb:2a:
fd:66:eb:1f:7c:83:96:6c:d4:ce:18:88:42:f4:5d:
d4:86:b5:bd:9d:51:5c:a9:a8:76:1f:a7:c3:8c:15:
a4:0c:b7:2d:1a:2f:e9:2f:96:3b:4b:ca:99:35:da:
3c:5e:83:67:4f:7f:fe:8f:e3:92:d2:5c:32:1f:8d:
60:53:79:11:29:79:d8:37:b7:53:65:a6:1a:da:8b:
ce:20:fd:89:6d:5c:3a:14:ff:aa:b9:01:d5:90:11:
f6:ae:ab:2d:07:99:4d:75:bb:bc:20:cf:4a:89:a8:
62:46:1c:88:ae:b8:4b:52:c2:db:8e:0b:56:9b:76:
61:b0:dc:90:09:9b:58:48:4d:72:e1:9b:0c:b8:1d:
39:cf:49:8e:fe:66:9a:c4:1e:89:e0:57:ab:74:04:
11:a8:b1:92:d6:b8:cb:d3:85:77:68:2f:07:bf:6a:
02:f5:cf:98:55:33:91:57:34:57:a0:ea:5b:c3:7f:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0F:E5:AA:CF:88:BC:60:FE:3E:07:9A:0B:E7:09:A3:D4:2A:FE:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B87BD914E53911EF880B5D79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.141.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a0:ae:0a:87:97:01:f9:f2:5e:ec:d9:fd:cf:08:99:1a:fd:
54:83:b1:2d:f7:0c:9e:9a:2a:0f:a2:04:e6:38:20:ea:a5:a3:
3d:94:a9:7d:ef:b3:38:4c:54:75:6f:da:bc:3d:14:a8:bd:2c:
ae:76:c6:b8:73:0b:e5:7b:04:e2:aa:43:61:f0:b1:a8:96:2a:
17:d5:e5:05:e1:5b:8c:03:a2:61:9d:4f:a7:f9:f7:e6:7e:c0:
5a:2c:49:bc:5d:9a:b1:99:d0:dc:7f:1d:1b:14:c2:d4:2e:dd:
f7:42:f4:f5:ef:e5:96:1d:b3:f3:55:a6:d0:8a:00:0a:14:bb:
f7:7d:ac:1b:6a:bd:2d:9d:9b:61:d1:11:85:6a:88:b6:e8:54:
8f:41:e3:5a:35:b2:43:d1:96:99:f7:c4:55:a4:89:9d:71:84:
67:8c:ff:96:aa:73:4c:f8:d1:88:67:ff:5d:b2:03:9b:3f:c3:
ca:89:d4:9e:32:10:a8:34:f8:15:d8:e0:77:59:41:a1:ad:0c:
6d:0c:c8:ee:c6:be:a8:48:7a:99:ed:92:d6:6e:0f:07:f0:e2:
8c:69:b9:6b:9c:87:ef:0b:3f:78:99:39:b9:e6:d7:04:c4:e8:
52:c0:15:6a:88:ba:2a:21:3b:04:b0:33:9c:fc:db:6d:26:84:
5f:f6:fb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:57 2025 by rpki-client