Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA0109D2070511F09CB82CA3762E951A.roa
File: CA0109D2070511F09CB82CA3762E951A.roa (raw, json)
Hash identifier: Ra/kmF8kaUoM4dfFn4LjNXmYuO8FJ5VCRJMBBFPJGnw=
Subject key identifier: F6:73:B9:CC:56:42:4C:5D:DF:58:FB:D6:9F:74:EC:83:1F:BA:D1:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01477F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA0109D2070511F09CB82CA3762E951A.roa
Signing time: Sat 22 Mar 2025 10:09:49 +0000
ROA not before: Sat 22 Mar 2025 10:09:46 +0000
ROA not after: Thu 01 May 2025 10:09:46 +0000
asID: 44509
IP address blocks: 156.231.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83839 (0x1477f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 22 10:09:46 2025 GMT
Not After : May 1 10:09:46 2025 GMT
Subject: CN=67de8c6d-270f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:67:6c:a1:ed:15:1b:8a:10:b8:ef:e7:92:
42:85:28:1d:41:7c:bb:b8:e3:43:1f:ae:b1:65:38:
49:2f:04:01:6e:7d:18:60:ac:2e:2d:6a:2d:76:57:
48:d4:3d:ed:3a:1e:b6:c5:d2:f8:3e:33:69:29:f2:
f6:8a:b3:a6:bc:2b:9a:df:bd:61:a3:1a:83:e5:7a:
f8:22:eb:df:6d:b8:50:4b:16:22:27:ae:f6:e0:f7:
b6:71:16:ee:a5:84:d6:ff:41:93:20:9a:3a:00:b9:
57:17:23:b5:56:a1:be:b5:79:54:ad:d4:af:72:2f:
11:15:61:3d:1f:21:d0:fd:9d:31:d9:19:b6:86:fa:
4d:05:21:ff:0b:59:de:75:e1:af:76:f6:4c:56:f9:
d9:69:71:a4:12:8c:ed:e1:f6:b9:5f:c6:42:19:8a:
d4:bd:aa:f7:ef:25:5c:e8:fd:b9:2a:ad:72:dd:26:
6d:ee:42:c3:a7:37:31:b7:5d:f3:5c:a4:48:8b:5d:
6d:d0:9a:6d:ec:da:e1:2c:2f:4f:92:d5:09:15:10:
b8:af:f8:17:a8:c9:d8:b1:7b:a7:27:b9:30:08:fa:
ad:6c:21:8c:fa:9c:a0:91:46:9b:30:d7:53:69:be:
d8:95:cf:e9:fc:30:d1:68:70:b5:37:58:b9:88:8a:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:73:B9:CC:56:42:4C:5D:DF:58:FB:D6:9F:74:EC:83:1F:BA:D1:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA0109D2070511F09CB82CA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:03:cc:c9:b0:69:da:ef:ef:2e:13:07:c5:68:f9:32:a0:6a:
df:42:50:99:ae:2b:ff:2d:68:35:c0:a2:45:de:63:70:e0:88:
49:ab:91:82:33:4f:d2:fb:b1:a2:14:45:10:6b:71:93:09:4e:
49:f7:c8:e8:2c:a9:08:1c:e1:0a:21:7e:92:c6:81:b1:46:e4:
b6:e3:51:ed:10:fa:cd:c4:7e:90:c4:b3:83:6f:bd:d4:24:f4:
a0:63:c8:10:9f:1e:63:35:45:94:05:6e:9a:ba:09:97:46:01:
8b:f3:eb:dd:bd:07:2c:f6:41:4e:47:19:63:c3:d9:93:2b:91:
7d:8a:a5:15:e3:c5:93:97:81:f4:08:7e:fb:51:3b:8c:9a:c6:
a7:2f:2e:71:59:0c:de:13:5c:31:e0:b0:b4:03:64:72:f3:f1:
d1:82:22:df:fc:c7:46:f4:68:90:87:48:41:72:8d:85:96:5e:
84:dc:a3:37:d5:1f:e7:62:2b:87:42:f1:7a:1e:8f:a5:58:00:
f5:d1:45:ca:fe:fc:d2:9f:98:a1:9e:31:d4:42:6c:8e:a9:d0:
a7:4e:1d:f8:05:d4:ef:7e:2a:3a:90:42:c3:51:9c:8a:e0:ee:
63:0b:93:55:94:14:0b:8e:92:c5:72:d6:c3:0d:f1:1b:6b:88:
09:63:b7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:02 2025 by rpki-client