Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDFCE976F5CF11EFBAF34F8C762E951A.roa
File: CDFCE976F5CF11EFBAF34F8C762E951A.roa (raw, json)
Hash identifier: UT1CmwgtxGqMJg5/moXS02E/0EMwCc9+u0U/TDtmKo0=
Subject key identifier: 1D:E8:DD:9E:A4:CA:F1:B8:62:EC:D6:B0:9C:F5:0D:8D:18:06:F1:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDFCE976F5CF11EFBAF34F8C762E951A.roa
Signing time: Fri 28 Feb 2025 12:30:33 +0000
ROA not before: Fri 28 Feb 2025 12:30:30 +0000
ROA not after: Sun 30 Mar 2025 12:30:30 +0000
asID: 203020
IP address blocks: 156.228.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81298 (0x13d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 12:30:30 2025 GMT
Not After : Mar 30 12:30:30 2025 GMT
Subject: CN=67c1ac69-f0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:76:45:b1:d2:8a:35:3a:97:ac:ec:86:d1:
e6:a4:0e:4c:2a:18:0d:95:f4:9b:20:9d:52:6b:ee:
a7:c8:2e:44:e8:f7:59:0b:1c:7f:4a:78:6a:e7:10:
d2:ae:03:e6:38:c1:57:47:de:1f:19:fc:27:01:4e:
4c:6d:54:73:2e:bc:c9:e5:f1:62:6d:91:e3:41:a4:
7e:ca:e5:92:ab:8f:29:01:99:67:f8:89:49:ef:06:
0f:2c:34:06:64:91:83:68:78:98:31:65:13:8c:96:
cd:e2:c4:b0:bc:17:c4:ac:40:26:e6:ad:75:35:b6:
d0:6b:2c:e7:3e:35:6e:1f:c9:b4:f7:6b:81:7a:e1:
58:f1:8a:d9:42:5b:19:ee:1f:98:a0:35:85:b3:68:
99:8d:cf:94:e9:1a:df:05:79:ea:e4:6f:01:b0:76:
3f:a0:96:8c:d0:13:06:1a:18:dc:62:b2:28:12:f9:
88:a0:f2:69:c3:33:fa:e0:07:a7:cd:9a:a6:9f:a5:
5d:1f:72:f9:f1:c5:27:f3:09:93:47:57:6f:53:be:
7a:34:49:48:28:8b:6c:f0:be:a7:63:62:13:6f:bc:
a7:ae:5b:fc:09:72:ea:93:9a:8a:b0:6f:45:6d:cf:
a2:c2:fc:6f:81:b6:5d:be:45:d5:da:a4:ae:ea:59:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E8:DD:9E:A4:CA:F1:B8:62:EC:D6:B0:9C:F5:0D:8D:18:06:F1:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDFCE976F5CF11EFBAF34F8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:dd:29:b1:28:28:92:c0:9d:b8:41:92:00:b8:a9:4a:dc:6b:
98:1b:34:dc:6b:e0:6c:96:55:32:73:ea:85:98:03:cd:5a:63:
8e:58:5b:93:04:7d:e0:72:58:e9:72:43:14:2f:3c:1f:62:12:
6d:1c:9f:56:cb:83:92:2b:68:2e:d4:15:ad:90:11:7d:14:af:
c4:be:9a:33:96:a7:8c:fb:52:77:f2:3a:3b:9a:b5:81:6c:94:
53:65:3b:73:1d:f1:74:1c:f5:8e:76:b2:1f:43:3a:9e:f5:0a:
71:9a:d0:9d:18:32:09:a3:62:15:4c:c5:60:42:3f:a6:9e:83:
25:86:c8:56:96:4f:3e:9c:fb:58:0c:ac:67:0e:d2:6b:70:7c:
9d:75:71:dc:9e:53:89:4c:26:05:36:25:4f:38:d3:64:2d:a4:
98:23:07:64:ab:83:5a:4d:70:bb:90:91:03:89:98:9f:c7:57:
55:38:b0:f0:3f:a8:8a:f4:92:d2:00:00:30:f8:8b:94:78:df:
d6:fb:75:9c:28:1d:23:3e:e9:e7:c0:bd:63:28:75:60:c4:4c:
17:5b:5c:e0:e9:7b:b6:5f:de:62:36:c4:38:7e:e5:e3:e9:d5:
1d:db:9d:db:99:2e:8a:f4:3c:85:4b:ad:ea:67:a4:f7:5c:93:
07:bb:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:05:42 2025 by rpki-client