Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C254B392057411F086391B92762E951A.roa
File: C254B392057411F086391B92762E951A.roa (raw, json)
Hash identifier: TRNElMxwKbc1q5pCJPrswoTDm5/seqmtbPAWJEjm0c8=
Subject key identifier: 42:A8:8B:5E:C6:86:61:66:90:D6:9E:6B:CA:08:96:7F:53:AD:BD:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01471A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C254B392057411F086391B92762E951A.roa
Signing time: Thu 20 Mar 2025 10:19:08 +0000
ROA not before: Thu 20 Mar 2025 10:19:05 +0000
ROA not after: Wed 09 Apr 2025 10:19:05 +0000
asID: 18013
IP address blocks: 156.241.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83738 (0x1471a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 10:19:05 2025 GMT
Not After : Apr 9 10:19:05 2025 GMT
Subject: CN=67dbeb9c-7a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:cf:0c:7f:3f:15:82:6e:cc:44:8a:e8:43:
3a:cc:9b:b9:b9:79:e8:25:52:93:a5:20:d3:b5:74:
96:6c:d1:af:1e:3d:7c:4e:5c:ac:61:eb:38:2e:04:
58:02:44:be:08:52:03:93:49:52:77:a5:75:cb:63:
19:2c:1b:67:75:b2:f5:bb:21:11:c2:7e:f4:b1:bb:
fc:3d:e7:70:09:a4:58:df:78:cf:84:c3:58:10:29:
87:9c:19:57:14:a8:46:63:83:f8:83:48:47:7b:26:
ac:a9:06:30:e0:7b:a6:06:49:05:2f:59:d7:4d:37:
4c:f9:f5:31:37:6b:3b:46:af:83:2d:3d:3d:9c:93:
f3:ad:db:ce:cf:6b:82:53:e4:96:d4:8c:a1:86:a0:
e2:5b:b3:11:82:24:6e:1d:8b:a0:18:33:81:54:83:
24:db:66:e9:e1:da:db:85:69:83:d9:c1:f2:7b:30:
a9:64:63:93:89:6d:9d:c7:8e:50:2f:8d:61:c3:78:
ad:f4:a6:af:63:e4:c0:28:23:1f:27:6c:89:87:03:
ef:17:66:24:34:90:02:2f:c1:bf:3a:6e:bd:76:00:
86:ff:ec:12:d2:ad:d3:d0:81:25:b2:ce:8d:e8:b5:
c9:82:e2:a9:58:51:e4:0a:ae:d7:89:a6:56:d2:ab:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A8:8B:5E:C6:86:61:66:90:D6:9E:6B:CA:08:96:7F:53:AD:BD:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C254B392057411F086391B92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.128.0/18
Signature Algorithm: sha256WithRSAEncryption
7c:9a:01:23:c5:89:38:94:14:26:fc:d6:ac:c1:a6:a3:de:d3:
40:b3:2b:db:7c:ad:01:fb:d4:5e:ab:e7:43:39:84:8a:94:31:
a2:77:73:9a:57:dc:7b:f4:f7:6f:a9:1f:5d:9c:09:35:ad:f8:
f6:7e:ad:7d:12:ab:b5:b4:bd:c0:07:de:4b:0e:19:86:d2:16:
ba:bb:e4:56:7e:f4:aa:2b:8b:03:a6:a4:b5:0b:59:c0:07:fa:
00:42:fc:e6:32:46:be:98:ce:d6:e2:16:cb:6e:f0:df:7d:03:
16:31:05:b2:c2:c7:ba:1a:68:22:9f:d2:78:e6:fa:72:00:6b:
00:34:93:e5:6f:17:7d:01:5d:ef:e1:c0:fa:71:91:f2:ba:48:
76:db:f6:a1:6b:b8:d4:48:0f:eb:82:1c:3b:d4:cf:7b:42:df:
d0:c2:62:5e:84:ba:2b:03:db:ce:7c:66:ec:cc:7f:cb:1c:f5:
72:34:cf:f3:04:5b:be:68:14:d7:7e:e8:07:ab:cb:50:4f:ab:
f6:7d:41:29:eb:78:4c:4e:af:0c:7f:af:92:fd:21:54:e4:27:
8b:6b:8d:30:03:b8:26:fa:63:2b:00:d3:dd:68:83:bf:4c:e6:
93:d7:7e:58:f4:de:42:0e:aa:6a:b5:1b:1f:2f:aa:ed:73:d6:
82:72:5f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:31 2025 by rpki-client