Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC81AECC0ADA11F09FD81886762E951A.roa
File: CC81AECC0ADA11F09FD81886762E951A.roa (raw, json)
Hash identifier: TxAL+d6C4f0SroNtISFbqd+Cva1xitXivVOSrQzJU2M=
Subject key identifier: D4:9E:D1:B8:02:FA:8F:CC:11:93:FE:64:FA:30:EE:85:D7:0D:73:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014869
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC81AECC0ADA11F09FD81886762E951A.roa
Signing time: Thu 27 Mar 2025 07:12:10 +0000
ROA not before: Thu 27 Mar 2025 07:12:06 +0000
ROA not after: Tue 31 Mar 2026 07:12:06 +0000
asID: 136744
IP address blocks: 156.255.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84073 (0x14869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 27 07:12:06 2025 GMT
Not After : Mar 31 07:12:06 2026 GMT
Subject: CN=67e4fa4a-8d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:a6:ba:d1:ee:e3:28:e9:93:84:a5:77:f0:
be:6b:20:67:c7:4f:41:ff:70:c7:e0:2e:cd:f5:86:
35:38:89:e1:29:81:a2:aa:de:2a:21:8c:f0:64:b8:
87:33:6c:5a:c9:66:01:3e:ac:27:0a:e7:d7:13:43:
9b:63:33:fc:2a:1c:ff:9f:79:da:bf:6b:25:d4:bb:
c5:13:c0:e8:3c:1b:94:9e:a5:3c:2e:29:40:a1:55:
cb:25:5a:79:80:4b:f9:83:b6:3f:cd:f4:43:ed:10:
37:d6:2e:28:35:e3:a0:d2:e6:96:4a:e0:08:55:ea:
41:30:bd:d6:f8:80:74:7d:84:5d:f2:df:28:05:8c:
e7:fe:ed:fa:c2:a8:08:7c:05:61:03:c4:6e:c4:d5:
d5:e8:81:37:2e:53:51:93:14:d6:cd:8a:23:2b:25:
12:28:e3:44:f8:1b:9b:6d:0b:9a:d4:be:85:eb:3b:
ff:1e:76:aa:00:01:bc:df:18:01:2e:8c:78:e0:b0:
cd:33:f0:4f:db:6d:a7:a0:45:03:20:ab:34:6d:22:
b6:c2:da:d8:1d:0d:43:6e:05:0e:7e:7b:bd:38:25:
70:b9:cb:6f:6c:87:f8:cb:90:68:83:59:4f:4c:b7:
63:1a:72:a9:0b:fe:bb:a2:16:a4:5b:0a:8a:41:6c:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9E:D1:B8:02:FA:8F:CC:11:93:FE:64:FA:30:EE:85:D7:0D:73:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC81AECC0ADA11F09FD81886762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.35.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1c:3c:3f:85:45:e5:eb:aa:9b:d4:aa:a4:f1:03:3f:37:d4:
d1:24:be:a5:cc:00:f3:39:43:49:f6:73:eb:1b:33:83:e7:a3:
f8:eb:45:d0:d5:ba:b9:65:ad:2e:a0:27:77:58:03:33:bd:c0:
98:93:1a:10:0f:f3:15:b2:ad:39:d9:ef:3b:26:42:97:59:72:
1d:05:26:93:3f:f6:e6:f5:30:6a:3a:de:4c:a4:2f:c4:f5:02:
a5:d8:d4:fb:ad:11:ad:49:aa:50:0d:fe:c2:81:24:14:06:cb:
e1:41:96:b6:a6:a9:90:40:58:b2:dd:39:27:bf:1c:fe:eb:3b:
4a:05:0c:30:e6:2d:a4:a4:7a:fa:99:4c:27:4a:c9:d0:2c:fc:
8c:d4:8c:04:c8:41:99:84:d4:79:8a:61:4f:a6:dd:4f:31:68:
63:30:73:91:65:e0:07:0c:f0:e7:cc:00:f0:50:97:eb:6a:ba:
69:e5:46:84:6d:dc:14:7f:44:b0:7a:67:bd:e6:cb:94:66:72:
74:6c:a2:6a:7f:a4:38:c6:18:3d:53:7e:e1:df:a9:0a:ef:0f:
7c:d0:31:fe:c7:b9:0f:38:4e:da:82:b3:0d:dc:13:c4:2b:53:
72:bb:43:76:f9:cd:2f:a5:84:54:9c:a7:35:15:2e:44:30:fb:
d5:a5:4a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:08 2025 by rpki-client