Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C505841AFFE111EF8FB281B0762E951A.roa
File: C505841AFFE111EF8FB281B0762E951A.roa (raw, json)
Hash identifier: nWrSo+uTDUAjVnQycBSgn1xKQAju7NPUS7y0EUKfXOE=
Subject key identifier: 3E:F4:94:04:F9:F7:4C:8A:DF:C5:AE:18:3E:69:FC:84:D4:75:78:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014591
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C505841AFFE111EF8FB281B0762E951A.roa
Signing time: Thu 13 Mar 2025 08:04:21 +0000
ROA not before: Thu 13 Mar 2025 08:04:17 +0000
ROA not after: Sun 20 Apr 2025 08:04:17 +0000
asID: 203020
IP address blocks: 156.251.96.0/20 maxlen: 24
156.251.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83345 (0x14591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 13 08:04:17 2025 GMT
Not After : Apr 20 08:04:17 2025 GMT
Subject: CN=67d29185-fc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:bf:4b:0a:12:28:51:31:0b:bd:7f:b5:ca:
1a:a8:96:08:03:56:f8:e5:66:a8:4c:ea:2d:63:c3:
4b:b0:93:e3:c2:15:28:54:d8:4d:07:c1:f0:46:50:
91:2e:cb:33:7f:29:e5:0d:b2:88:aa:cb:04:bf:6f:
c0:91:dd:c2:33:8a:57:b9:95:b8:14:fd:8a:a4:ba:
84:7c:5e:cf:0c:5f:db:6e:da:0e:eb:a7:b0:2f:b9:
08:b6:cb:93:7d:74:14:bb:f2:c6:4d:38:00:1c:c7:
0f:0f:ee:77:a1:80:99:0b:37:3d:1c:0b:51:48:d9:
8b:44:5d:57:9e:0b:59:3e:42:57:53:45:76:c3:2a:
99:cf:96:e5:51:d1:5d:4f:46:78:dc:35:2e:ff:df:
86:86:69:17:85:f5:6e:75:10:6b:92:33:3b:2e:2c:
9c:f2:9e:28:ee:86:12:8e:2a:db:9f:02:3b:93:ba:
71:ab:7a:3d:b6:0b:5d:30:99:37:93:8b:d4:e7:b5:
fe:5c:41:5c:10:5a:6d:85:56:00:00:21:c6:fd:13:
95:10:6f:82:4d:09:69:69:ba:8f:1d:f2:40:30:9a:
c0:a5:c2:7c:64:4d:34:9a:2e:23:50:8e:ec:b3:1c:
30:b0:1b:2e:25:d4:8d:67:b3:cd:4c:63:e9:89:d6:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:94:04:F9:F7:4C:8A:DF:C5:AE:18:3E:69:FC:84:D4:75:78:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C505841AFFE111EF8FB281B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.96.0-156.251.119.255
Signature Algorithm: sha256WithRSAEncryption
71:82:9e:70:8e:ef:65:dc:3a:22:08:a8:e9:bb:41:ef:2a:49:
2c:f2:e0:b3:e5:8d:3c:2e:5e:ee:4e:d1:da:ed:82:09:78:52:
79:73:23:1a:9b:29:1e:20:e0:60:5c:3b:e3:37:9e:02:72:1c:
92:ac:11:ac:cb:78:0a:6a:7d:8e:1a:4b:ad:7f:28:8b:c9:87:
5f:c6:66:9b:86:38:de:d7:09:e0:25:6c:42:12:f4:5e:90:4f:
ec:8d:1d:ea:6c:a8:a9:b7:f1:2b:24:08:6e:46:f9:d6:0a:6c:
74:20:d8:8e:59:63:9d:21:b2:86:b4:f3:8c:35:95:d4:f9:73:
41:2c:9a:ec:88:b3:38:eb:4b:4f:83:e1:18:55:6b:0a:e0:04:
3a:0f:4e:be:c6:e7:fa:84:28:23:8b:fa:d7:95:cc:ee:ed:b0:
5e:56:44:6d:ff:7b:26:d3:9d:a8:4f:34:44:b3:f1:ff:82:21:
c2:70:59:cd:90:4f:09:5b:ac:06:0a:48:14:f5:8b:bf:e0:6b:
24:7a:a2:1f:c2:eb:09:40:43:b2:24:d9:53:fb:0a:f8:88:9b:
07:f4:a8:81:89:eb:0a:c0:02:15:e4:22:51:6a:07:15:89:d1:
ac:3e:9d:98:86:c4:5d:a8:0c:8d:58:97:b9:b9:fc:2b:df:eb:
c2:65:5e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:49 2025 by rpki-client