Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C1D5AAF46A11EF878DC96F762E951A.roa
File: C2C1D5AAF46A11EF878DC96F762E951A.roa (raw, json)
Hash identifier: aCgZuqdf9by/Dd4mV8U/WazEGqT24b9X42SvA7pcV2I=
Subject key identifier: 91:31:7B:0D:F4:EF:55:CE:B2:44:39:3F:77:D5:7D:89:19:57:26:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C1D5AAF46A11EF878DC96F762E951A.roa
Signing time: Wed 26 Feb 2025 17:54:44 +0000
ROA not before: Wed 26 Feb 2025 17:54:41 +0000
ROA not after: Thu 19 Feb 2026 17:54:41 +0000
asID: 984
IP address blocks: 156.228.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79351 (0x135f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:54:41 2025 GMT
Not After : Feb 19 17:54:41 2026 GMT
Subject: CN=67bf5564-e1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:db:72:45:9c:7f:83:69:19:d2:d9:01:ec:
3c:09:28:2d:c6:06:24:75:63:18:44:68:f1:34:ff:
51:86:c8:16:00:a2:d6:94:61:65:b0:a4:59:97:7e:
e7:c9:7f:4d:45:29:38:15:21:87:9e:19:5e:0d:38:
3e:23:b2:a5:a1:65:ca:8b:ec:13:1e:5e:10:18:64:
f2:ca:91:85:0e:a2:a3:77:b0:d3:05:2e:a6:63:f6:
36:a2:51:9b:81:b0:8d:98:b3:0f:01:21:98:8f:68:
a8:0c:ae:f4:b4:3c:66:78:0f:4d:8b:db:0d:e8:9c:
01:42:a3:6b:96:4a:63:20:35:f4:57:82:54:86:c1:
51:7b:bf:90:70:a7:6e:66:1b:a5:74:67:79:c2:4f:
65:ae:44:35:09:fa:16:ba:2f:52:f2:34:b7:e8:5a:
2a:65:2c:86:45:6c:a1:63:86:63:1f:92:e7:e9:51:
fe:0d:67:3f:a6:00:89:f4:f5:42:b8:50:22:33:bb:
91:72:3b:50:e7:47:1b:27:af:a0:10:bf:b9:33:19:
20:75:c3:56:6b:24:ac:23:5e:d8:13:f9:21:01:e8:
78:6e:c1:30:bf:73:ae:12:bd:95:b9:6d:0d:94:54:
45:20:1f:f1:71:eb:86:e7:03:54:61:cf:12:d7:dc:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:31:7B:0D:F4:EF:55:CE:B2:44:39:3F:77:D5:7D:89:19:57:26:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C1D5AAF46A11EF878DC96F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.135.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4a:5e:c5:d7:d6:57:15:c8:54:30:45:5f:13:8b:d7:6c:56:
5e:66:59:fa:93:28:65:63:3c:44:de:57:9b:f4:40:4a:85:ae:
1a:82:52:46:46:ed:f5:ba:4c:19:98:39:77:e7:b4:38:c8:d7:
71:e2:f8:05:53:38:3d:9d:9b:ec:8c:70:6f:cd:30:5e:d2:a3:
23:04:46:b3:ee:01:54:41:9d:5f:e0:be:ad:9e:2f:cd:15:07:
be:ac:46:57:bc:3c:0c:19:11:4c:a4:54:1f:79:b2:53:33:78:
c6:fd:bc:4a:dc:ed:17:ed:21:4b:ef:67:d8:9c:82:16:3d:2a:
c5:4f:bb:0a:7c:5d:c7:cc:d1:8c:5f:bf:9b:9e:99:85:ce:78:
13:04:56:02:45:b7:33:99:6d:f7:7e:e7:13:87:5e:f6:c8:7a:
1d:1e:c3:dc:0d:c1:61:99:10:26:8d:d0:f3:9d:72:9f:fb:22:
4c:4c:b6:14:eb:4e:cc:26:c8:20:a7:30:68:09:d9:1d:f5:70:
c5:d8:f6:11:ca:99:a8:43:fc:bc:c6:3e:8e:28:55:87:fa:da:
d9:f0:35:3e:82:4a:25:e2:27:90:83:f0:20:67:11:b9:3b:c7:
cb:28:9a:7f:34:1e:08:11:38:cc:65:d8:05:68:c4:87:b8:10:
eb:6b:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:56 2025 by rpki-client