Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF5B8188F5D911EF96753D54762E951A.roa
File: CF5B8188F5D911EF96753D54762E951A.roa (raw, json)
Hash identifier: tprx5dMwd+eH05t90zu494fLYuyxTWdCzyflKAu57K8=
Subject key identifier: DF:60:FA:06:1E:E1:5E:AD:37:00:80:C1:8B:0C:04:D3:EB:00:EE:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013DFA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF5B8188F5D911EF96753D54762E951A.roa
Signing time: Fri 28 Feb 2025 13:42:11 +0000
ROA not before: Fri 28 Feb 2025 13:42:07 +0000
ROA not after: Sun 30 Mar 2025 13:42:07 +0000
asID: 203020
IP address blocks: 156.243.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81402 (0x13dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:42:07 2025 GMT
Not After : Mar 30 13:42:07 2025 GMT
Subject: CN=67c1bd33-ffa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:50:03:60:fd:b8:62:86:64:ec:cd:36:91:d8:
28:5c:91:65:71:d2:c4:74:cc:aa:09:7a:99:4e:dc:
4e:8b:73:c4:c4:7f:1e:a7:a1:81:cc:0d:a1:c4:97:
10:80:fd:f1:1a:41:62:9d:59:df:9b:24:61:9f:27:
a2:23:49:d0:f7:44:7f:51:72:e9:56:45:1d:43:95:
ab:8e:21:81:39:fe:ce:4a:38:4e:24:50:94:3d:79:
c7:da:71:30:e9:8c:0f:be:ad:74:78:1b:46:69:82:
9c:85:25:0c:69:29:cd:d4:dd:a1:29:58:2c:cf:76:
84:8b:73:a2:57:e4:e7:c1:06:5e:f8:d3:e4:e3:5e:
bb:42:37:09:94:79:9d:b3:27:d2:df:7d:e7:4e:cc:
28:18:ce:f2:d1:e7:3a:83:1a:0c:86:ef:b2:d1:a1:
28:7b:61:7b:b4:fe:9e:37:f7:d6:24:5f:11:3f:0c:
f5:ce:36:35:ae:0d:82:bc:d0:be:e4:47:16:c9:9a:
77:77:e1:9b:7e:ee:15:28:39:33:30:91:61:28:f3:
aa:ff:59:8c:e8:91:6e:9e:bf:5a:d8:b1:8d:a5:bc:
a6:ea:aa:8c:99:26:32:b1:57:3b:76:0b:fd:a5:1a:
bd:68:7f:81:9c:82:f1:29:23:76:21:bb:d6:62:33:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:60:FA:06:1E:E1:5E:AD:37:00:80:C1:8B:0C:04:D3:EB:00:EE:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF5B8188F5D911EF96753D54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.247.0/24
Signature Algorithm: sha256WithRSAEncryption
49:53:79:5b:6d:d8:83:6f:7c:a0:cf:66:c8:eb:c6:d9:f0:3e:
d3:b3:e5:c0:f9:04:93:95:42:fc:88:a9:63:d6:8a:ce:10:11:
23:e0:fa:8e:ab:7b:cb:04:39:80:58:c1:81:76:77:a8:cc:b3:
b2:1a:6e:bc:c1:3f:30:ae:6b:95:73:db:e1:5c:67:ed:51:77:
57:8d:3d:94:c0:a4:e0:56:4f:1d:41:61:ec:97:05:bc:e1:c7:
f6:14:e3:9e:12:0b:62:c7:dd:2f:9d:a0:b8:88:b0:e3:f7:e3:
54:15:8a:16:f1:fb:1f:38:a6:d4:70:5d:af:70:97:c6:c9:21:
58:8d:e6:cd:dc:96:1b:c5:58:2c:31:5c:85:39:0e:9b:a3:d5:
c9:e1:04:f5:19:05:f4:5d:80:05:b4:88:b6:62:ed:83:2d:6d:
59:7d:b9:21:f6:8f:bb:22:08:db:19:3d:3f:90:e4:71:e3:bd:
dc:4d:7e:3a:c4:b6:98:3d:b5:56:0a:59:c0:5f:99:bf:b4:13:
88:3d:16:f1:a0:db:f9:f3:a0:bd:7e:e5:97:a2:b6:8d:07:ed:
d8:02:5e:a4:6d:a1:86:c7:f0:40:3e:cc:cc:bb:06:81:e1:e7:
7f:1f:41:74:e8:fb:f0:b5:3f:6c:a6:84:70:14:8e:60:c6:7e:
88:44:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:10:15 2025 by rpki-client