Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0501718FF3D11EFBF92C58F762E951A.roa
File: C0501718FF3D11EFBF92C58F762E951A.roa (raw, json)
Hash identifier: TRfjz4RiuFnCypblzMWEms8YJA1/TP10ZO7W6aJGFc0=
Subject key identifier: 35:06:50:49:5F:F9:6C:A1:C6:C9:FE:44:5D:EA:45:87:E5:CB:77:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014575
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0501718FF3D11EFBF92C58F762E951A.roa
Signing time: Wed 12 Mar 2025 12:30:16 +0000
ROA not before: Wed 12 Mar 2025 12:30:12 +0000
ROA not after: Mon 05 May 2025 12:30:12 +0000
asID: 36137
IP address blocks: 156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83317 (0x14575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 12:30:12 2025 GMT
Not After : May 5 12:30:12 2025 GMT
Subject: CN=67d17e58-6fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:1a:54:46:ae:ff:12:68:c9:92:6e:4a:88:
b0:c5:6d:ae:98:4e:47:62:76:ed:50:5e:d2:90:04:
ae:fe:89:dc:e9:fe:c1:2a:7b:d7:a9:3a:c1:f3:1a:
de:37:2c:f8:a3:a3:41:20:d1:30:5a:29:70:ea:5f:
b8:f4:d5:77:6b:a4:19:6a:47:db:ab:df:68:fc:b4:
02:26:23:56:90:0c:68:16:85:9e:cc:76:00:8a:b7:
ee:ce:64:7b:f2:7c:6d:2c:0c:ad:df:88:74:63:7a:
55:9c:3f:f6:f0:5a:64:d1:10:52:f2:70:26:9e:78:
58:bb:ff:df:9f:c0:03:d9:f6:90:28:27:0f:9f:bf:
b0:9e:81:36:4e:8d:e7:60:17:6f:bb:26:80:47:04:
d4:cd:ed:74:f7:6b:3a:39:38:4f:8d:7b:58:46:49:
36:2f:b3:b8:d6:f0:24:b9:a6:aa:54:71:6c:04:4b:
11:3c:20:e6:9d:87:f2:d4:ae:75:f3:13:f0:de:98:
22:94:0f:67:a3:d2:60:c9:58:5f:de:04:25:64:0c:
91:7f:d1:89:aa:49:ea:09:1b:cf:83:24:48:df:ec:
2c:21:32:64:e5:98:4f:ac:05:a5:c5:32:96:c5:37:
82:3a:35:5e:5e:c3:b5:bc:6b:86:c9:59:05:f8:c8:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:06:50:49:5F:F9:6C:A1:C6:C9:FE:44:5D:EA:45:87:E5:CB:77:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0501718FF3D11EFBF92C58F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
93:bd:1b:16:00:9f:78:62:9c:3a:f7:d6:36:1d:c2:99:50:21:
a7:40:de:f0:43:98:fc:52:fb:9f:14:26:2c:74:45:cc:51:e6:
ed:7d:6b:10:82:b4:f8:8e:fd:b4:5a:55:40:7b:da:73:59:f2:
a7:bc:f8:b3:95:51:03:7d:f5:6d:74:3c:0e:ea:c4:7d:31:7d:
ad:0e:1f:11:98:51:55:56:9a:30:c0:66:9c:af:ff:6e:b6:0f:
ab:75:b3:53:e2:fd:82:ec:bd:47:ba:88:16:03:6b:c5:5d:2f:
85:2a:25:9e:e8:eb:09:6e:5e:2c:53:1d:87:27:1e:f0:8b:ab:
9c:7e:d3:c5:85:37:5f:14:9f:66:45:ea:11:c2:ae:24:cc:d2:
f0:cb:2d:fd:f5:d2:52:7f:ef:f1:e6:59:fa:ee:d0:35:7d:57:
2c:0c:6b:df:2d:a2:96:80:22:ab:90:b2:4c:5c:00:63:97:1c:
7f:e4:c3:81:a4:fb:36:1b:06:e3:ae:01:55:17:12:32:72:cb:
4e:a5:57:9d:f3:72:6d:8b:29:02:87:e8:01:54:eb:04:dc:68:
10:ff:e8:b0:00:a7:b4:dc:f6:44:17:33:81:b1:03:17:53:97:
f4:0e:0b:78:ca:e3:0b:87:1b:fc:71:28:11:12:3c:69:ab:b3:
cd:dd:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:38 2025 by rpki-client