Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD53FF66F42911EFB22D31A8762E951A.roa
File: CD53FF66F42911EFB22D31A8762E951A.roa (raw, json)
Hash identifier: F8RHvS2UfK9/a/tlj7wZaFXYPTJU/kk5+w/dMLp3xgc=
Subject key identifier: E1:EC:0A:B4:F9:8B:96:81:A0:D6:E3:30:6A:9F:B7:33:21:9A:E0:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD53FF66F42911EFB22D31A8762E951A.roa
Signing time: Wed 26 Feb 2025 10:09:45 +0000
ROA not before: Wed 26 Feb 2025 10:09:41 +0000
ROA not after: Thu 19 Feb 2026 10:09:41 +0000
asID: 328608
IP address blocks: 156.255.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78034 (0x130d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:09:41 2025 GMT
Not After : Feb 19 10:09:41 2026 GMT
Subject: CN=67bee869-e80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:01:43:6f:15:c3:3c:72:af:3d:db:95:27:
af:8b:a4:e6:20:1f:2e:02:91:22:3c:1f:24:46:9e:
c9:a6:25:5e:bf:a1:6e:5a:35:c0:b1:36:45:e7:26:
c6:43:f1:ef:b0:6e:12:39:28:7d:c5:75:c8:fc:07:
96:26:8e:b3:bd:39:84:05:d4:99:f7:7e:05:d3:4a:
dd:61:50:a9:93:cb:d5:d0:cb:57:52:73:7c:c9:ef:
78:01:86:d7:37:21:cc:a8:b4:92:d7:70:86:39:ce:
4e:66:e8:51:62:55:74:fe:0f:4f:dd:04:2f:a2:7c:
23:ed:50:04:57:d7:e4:03:7d:23:05:2b:0b:50:fd:
5c:19:84:bd:d2:84:58:1d:97:c3:90:6f:e8:3f:21:
17:4a:34:98:49:8c:e7:7f:bd:c7:b9:b3:bc:cf:a1:
ba:1e:f2:bd:6b:73:16:dd:68:a0:60:87:61:9c:1e:
6f:d4:69:12:73:a9:8d:55:aa:a4:65:ca:44:f5:47:
5a:6b:5a:ed:20:82:90:35:97:93:c7:40:be:69:dc:
89:b3:8e:12:83:65:13:3a:7c:08:cb:c8:0a:e5:26:
47:c0:f4:21:20:75:6e:9e:a2:f3:01:0e:4f:4e:68:
39:fe:1d:8f:be:96:c1:0c:5e:6d:e0:06:c7:97:a3:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EC:0A:B4:F9:8B:96:81:A0:D6:E3:30:6A:9F:B7:33:21:9A:E0:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD53FF66F42911EFB22D31A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.73.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6f:ca:10:a8:b2:0d:6d:07:37:b0:b8:b0:ed:de:ad:9a:18:
31:72:2e:98:9d:70:91:e4:76:8f:e3:55:65:49:4f:86:89:6e:
fe:ba:92:77:47:1d:47:bd:d7:03:33:bc:91:38:e7:06:c5:da:
69:da:4a:02:4e:7a:b0:71:de:7b:cc:b9:af:3b:6f:c3:57:35:
40:84:3b:5a:68:0f:a8:54:11:cb:fe:8e:8b:e8:25:42:db:19:
df:ba:5d:17:e0:10:76:9a:b6:6d:36:fa:85:72:7c:89:10:9f:
2d:ac:61:aa:23:0d:1b:a6:6a:0f:b0:c6:7b:e1:10:7c:5f:94:
50:7c:87:34:4e:01:ed:9b:ca:f9:95:f9:f9:c5:39:d8:3e:75:
bf:8b:07:58:ea:3f:e3:30:a4:f7:c6:9e:30:21:bb:76:44:e3:
df:3a:4b:4b:6f:8a:a9:ad:43:a6:7c:a6:24:9b:c7:34:87:81:
3b:ac:e2:55:5c:bb:c7:31:c0:96:5f:17:48:37:76:22:fb:d9:
be:1e:f6:fa:81:d9:50:a5:97:15:19:40:a9:0b:4c:39:7f:7f:
4f:37:44:94:af:0a:9f:7a:87:e3:0b:2f:f9:5e:b0:fd:51:0e:
53:07:cf:cb:89:ca:34:34:ac:99:88:a3:49:46:84:21:39:34:
3a:52:00:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:32 2025 by rpki-client