Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0EBF154F8C811EFBE51E34F762E951A.roa
File: C0EBF154F8C811EFBE51E34F762E951A.roa (raw, json)
Hash identifier: CL/hKJLyYzFO9lbGIZtfEOXZe6kOqtRtM+ED9iERoy4=
Subject key identifier: 07:3C:EE:8D:3E:CF:F4:56:54:97:92:FA:D1:5A:7E:88:46:83:2A:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0EBF154F8C811EFBE51E34F762E951A.roa
Signing time: Tue 04 Mar 2025 07:17:39 +0000
ROA not before: Tue 04 Mar 2025 07:17:35 +0000
ROA not after: Mon 21 Apr 2025 07:17:35 +0000
asID: 138915
IP address blocks: 156.225.117.0/24 maxlen: 24
156.229.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82619 (0x142bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 07:17:35 2025 GMT
Not After : Apr 21 07:17:35 2025 GMT
Subject: CN=67c6a912-d991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:1d:5d:7d:fd:2d:b1:55:27:60:9e:2e:2f:
72:d0:2c:f2:b8:c7:70:70:02:ac:41:5a:3e:61:92:
d4:9c:05:5d:b5:4c:49:88:ba:cc:53:7f:bc:78:f1:
0f:b2:0f:28:4b:93:c5:cd:1c:5c:55:8e:65:54:dc:
37:07:ac:db:6c:0d:55:34:eb:64:c5:ca:78:ca:d8:
c4:df:c1:fd:74:3d:c2:2a:59:26:25:f1:8d:87:24:
39:a7:c9:31:4d:da:9b:66:1b:0e:bf:77:95:e6:89:
24:f8:fd:7a:ae:52:3e:d6:34:a4:1f:a2:91:0c:2c:
66:40:eb:e1:14:a7:dc:68:46:50:83:ad:67:30:43:
3b:62:4a:11:ef:7c:0d:60:e8:f9:8b:93:15:c7:ba:
a9:b5:1d:3d:00:60:54:4b:b4:5d:4a:5f:d3:2f:f3:
a4:04:68:92:f6:51:92:94:06:6e:e1:ed:3d:c3:50:
e7:e0:c9:99:4b:a0:c0:45:3b:3a:36:fe:2b:cf:b7:
87:b2:26:54:1d:5b:04:43:4b:97:27:bc:b5:8a:93:
b9:f4:2f:ea:28:b8:5f:a7:87:fb:74:d7:86:b0:d4:
1b:a4:e2:ff:71:f4:05:ee:f6:f9:ea:a9:b0:3c:fb:
fd:13:89:af:ec:bb:05:20:82:d5:f5:1c:e8:84:d3:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3C:EE:8D:3E:CF:F4:56:54:97:92:FA:D1:5A:7E:88:46:83:2A:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0EBF154F8C811EFBE51E34F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.117.0/24
156.229.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:44:17:b6:1c:28:a7:7b:ce:8a:87:bf:94:19:e7:1d:39:78:
23:d0:37:cb:16:4a:ed:93:4b:69:7e:53:7d:5c:b8:5b:0c:62:
a2:b6:9f:3d:98:0a:6d:65:5f:b9:56:9b:c8:70:77:d0:27:c8:
bf:cd:3e:1a:fe:26:4a:c1:12:78:31:8e:7c:e4:06:60:7e:d6:
67:9b:9d:2e:16:fb:44:6a:84:ac:23:4c:59:57:2d:cb:39:d7:
5c:d3:9c:bd:e0:af:96:b9:60:b6:cf:09:0e:e2:57:a1:84:24:
07:29:43:74:4f:ae:a9:c2:d4:d3:0f:30:c6:63:59:d3:1a:d6:
57:47:a1:95:90:50:be:dc:a0:05:cb:0c:e3:89:9e:1a:e5:3a:
b1:b8:f1:f4:d8:d8:1e:35:71:b6:47:3a:43:dd:f8:77:d7:e2:
e2:96:ea:dc:3b:6a:e6:2f:c2:fe:78:7d:b2:3b:8f:7a:af:76:
2e:1c:5b:c0:08:6c:ee:63:99:d4:d2:a3:81:fd:3c:76:8b:34:
a8:53:d3:f7:f3:95:95:a0:f2:24:c1:a4:80:dc:9b:c4:4a:00:
3b:a1:27:7c:a9:26:2d:a9:26:d9:b9:6f:c1:f7:d8:e6:7e:3b:
19:9b:3d:12:3b:a6:e0:d8:42:d2:28:52:e1:2d:1a:82:c2:6f:
8f:f1:85:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:39 2025 by rpki-client