Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF7D01A2F8CA11EF90708D5D762E951A.roa
File: CF7D01A2F8CA11EF90708D5D762E951A.roa (raw, json)
Hash identifier: EOE4WzaArOwdNLgUn9aniCdl/spUL+A4aKvlBf8fi/g=
Subject key identifier: 69:D9:EE:57:57:8A:89:7A:A2:F4:E8:42:94:D3:CC:19:98:D6:14:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF7D01A2F8CA11EF90708D5D762E951A.roa
Signing time: Tue 04 Mar 2025 07:32:22 +0000
ROA not before: Tue 04 Mar 2025 07:32:18 +0000
ROA not after: Sun 11 May 2025 07:32:18 +0000
asID: 207023
IP address blocks: 156.255.24.0/22 maxlen: 24
156.255.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82629 (0x142c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 07:32:18 2025 GMT
Not After : May 11 07:32:18 2025 GMT
Subject: CN=67c6ac86-d090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:47:37:e9:c4:7b:dc:a3:0c:45:04:14:75:
c1:aa:a3:75:24:d6:46:74:e9:d0:83:07:54:2f:6b:
2d:ea:52:8e:89:c2:fc:b0:25:9a:db:be:21:b1:c9:
71:2a:cb:e9:6e:95:ef:7b:69:b1:13:ed:7b:ba:9c:
3f:85:7d:64:5c:c1:00:0b:f3:ba:6c:13:0c:1d:9a:
84:13:42:91:e4:23:d4:bb:30:36:dc:b0:80:47:17:
36:23:49:b1:ba:27:c4:db:75:a2:f4:ed:56:86:96:
4a:99:b7:03:2f:4a:f7:c6:d6:c3:dc:a1:b8:47:8b:
87:5f:b7:4d:ec:c8:a9:66:0f:81:89:bd:d3:36:b9:
72:0c:6f:4e:66:01:84:96:6e:bc:c4:98:6f:4d:4f:
37:a7:9d:b9:79:95:85:70:60:9c:99:08:48:f9:cc:
36:0d:89:85:4b:21:49:d3:ee:19:23:5d:99:12:d5:
3d:e9:80:34:ac:41:05:c9:5c:fa:90:47:5c:69:db:
48:f1:42:52:c0:84:b1:00:2f:90:ce:48:83:56:f2:
07:fe:93:96:a3:02:15:64:ea:af:f2:1e:e1:9f:37:
ca:4a:9a:ca:01:6b:8a:9a:12:49:fe:8e:8e:e8:34:
a7:e1:b1:e6:bd:a2:65:61:3d:68:f2:6d:1c:0b:02:
5d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D9:EE:57:57:8A:89:7A:A2:F4:E8:42:94:D3:CC:19:98:D6:14:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF7D01A2F8CA11EF90708D5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.24.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:f4:0d:1c:e9:af:5b:f9:94:68:3f:ab:d2:70:bf:65:3f:b3:
52:89:e6:04:35:53:14:ac:bc:e0:75:dc:c1:44:ee:60:5a:f9:
c3:c3:46:e4:c7:56:9b:d4:cc:40:35:8b:06:b5:e9:2c:40:53:
d8:85:ea:95:ba:47:a1:17:2e:9f:c7:ec:f1:31:d4:9e:4b:fb:
b0:23:b0:e1:03:4f:d8:f7:c0:21:39:23:f3:c7:ab:ed:29:db:
dc:46:0b:c6:be:81:fc:52:d7:ae:26:29:c0:b9:46:86:2d:9d:
c6:de:a8:57:d8:ca:a6:c4:b5:be:3d:48:77:69:8c:3a:8f:6e:
04:b4:e4:f2:2f:60:3b:a9:4e:17:5a:ff:49:4a:7d:3c:3d:e5:
e0:79:7c:fa:26:dd:7a:33:6c:b1:df:f6:b9:eb:84:c2:7a:f5:
6f:23:50:2b:06:da:17:5a:12:0d:5b:6d:e6:f6:89:52:69:cf:
e0:42:fd:bb:dd:ff:b4:6e:cf:b0:8a:69:7c:6b:cd:aa:94:22:
db:ac:03:73:c9:89:26:cb:c6:1c:db:5e:2e:cf:e5:79:7a:04:
1f:c2:7e:0e:35:ef:1b:bd:90:4b:0a:34:05:0e:6e:5b:19:9d:
96:d5:bf:e1:e8:d0:6a:28:12:72:67:38:08:43:9e:e4:56:c7:
22:ee:9d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:06 2025 by rpki-client