Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0076C8CE53F11EFA85662A2762E951A.roa
File: D0076C8CE53F11EFA85662A2762E951A.roa (raw, json)
Hash identifier: 5b86bBECyZxcZ9vzNnhcos1MohoJmXP8VNWTNBzCUvc=
Subject key identifier: 5B:AE:99:FD:40:97:CF:30:C3:2C:07:D3:B5:68:70:3D:98:B5:1E:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0076C8CE53F11EFA85662A2762E951A.roa
Signing time: Fri 07 Feb 2025 10:39:31 +0000
ROA not before: Fri 07 Feb 2025 10:39:27 +0000
ROA not after: Mon 13 Dec 2027 10:39:27 +0000
asID: 17561
IP address blocks: 156.230.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72977 (0x11d11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 10:39:27 2025 GMT
Not After : Dec 13 10:39:27 2027 GMT
Subject: CN=67a5e2e3-beb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:67:17:8b:67:71:9b:8e:a6:92:5e:47:8f:83:
58:53:1b:20:00:59:3e:e9:b0:fd:a0:67:06:48:f8:
20:ad:d1:87:e9:62:47:43:33:a6:a0:76:84:5a:25:
26:bc:d2:be:95:b7:2a:2c:6d:f7:b7:44:3c:78:5b:
d5:30:05:3e:1b:8d:8b:a1:ba:5f:44:e1:5a:aa:71:
9c:db:1c:1b:d7:ae:37:ae:f9:20:c3:de:37:87:b6:
01:a2:ff:af:2c:9b:31:40:c2:94:d0:5e:6c:5a:b5:
91:53:d9:02:48:cd:36:52:9b:98:d4:45:be:0f:18:
a6:6a:1a:99:df:f6:7f:7f:ec:f9:05:eb:0f:f0:ee:
33:8b:16:df:c2:01:4c:db:59:33:29:cc:7a:0c:a6:
14:76:52:cb:dc:9c:68:a1:ea:b0:0f:e7:17:c5:52:
e0:83:0d:08:ff:b0:fc:59:31:11:f5:fa:88:60:a2:
b3:7b:3a:54:64:0a:34:49:01:b0:31:7a:f5:bb:a7:
75:dc:00:88:cb:26:64:88:71:6f:0f:8b:77:5d:11:
4a:ac:ef:5e:aa:ad:e6:9e:6f:25:49:c0:d3:17:11:
30:45:9f:0c:58:44:0a:ca:16:9e:92:bc:4f:5c:4e:
58:9a:66:e1:4f:4b:df:5d:bb:3c:03:9f:a5:3b:20:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AE:99:FD:40:97:CF:30:C3:2C:07:D3:B5:68:70:3D:98:B5:1E:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0076C8CE53F11EFA85662A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.162.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0b:4b:44:9e:98:3e:f8:c2:99:05:13:53:c4:65:b8:53:02:
0d:cc:df:4e:21:e4:87:3b:11:fe:97:f6:43:5d:8b:b0:62:29:
6d:fe:c6:87:49:ba:50:cc:33:c1:a1:04:bc:be:b7:be:b8:b9:
d3:ff:41:b2:3e:f2:78:d0:e4:e8:8f:56:09:e8:20:2d:74:8f:
93:f2:de:fb:2a:a0:bb:48:52:da:9d:70:89:bd:02:81:be:10:
1a:bc:82:c6:f6:a9:0d:ce:6e:bc:91:35:2f:4b:fb:59:f9:1b:
7e:e7:0b:d3:61:b3:3b:63:2d:9b:23:73:88:c7:5c:01:18:92:
c6:a7:cc:60:4c:83:c1:5c:8f:c7:75:fa:d1:45:36:85:4e:e3:
0e:0d:23:31:2c:fb:21:d3:49:56:f8:38:5f:f4:e4:9c:90:e1:
dc:bb:9d:b7:b2:f5:4a:e5:03:6b:55:94:16:15:18:7b:9e:96:
1d:85:a8:86:4a:38:87:13:07:a1:b6:c6:e2:b7:83:cb:b6:46:
9b:f2:bf:1b:fb:50:f5:1a:3f:eb:2e:36:58:7e:e5:99:d4:65:
5f:bd:df:45:a4:32:e0:52:e0:b8:61:62:3a:b9:23:32:f5:a9:
24:1a:cf:d5:2d:0f:15:8a:4e:e0:3a:08:22:5a:d8:c0:18:02:
8e:70:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:05 2025 by rpki-client