Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1473136EC8D11EF90EE00A6762E951A.roa
File: D1473136EC8D11EF90EE00A6762E951A.roa (raw, json)
Hash identifier: geJTQtPzZXssW+wWFrbP30uGzJxG/XbFgmzT9Btj/Zc=
Subject key identifier: 8F:24:C8:14:BE:FB:28:CC:D6:36:38:92:D0:2A:E0:E2:A9:FB:0C:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012458
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1473136EC8D11EF90EE00A6762E951A.roa
Signing time: Sun 16 Feb 2025 17:45:32 +0000
ROA not before: Sun 16 Feb 2025 17:45:28 +0000
ROA not after: Mon 13 Dec 2027 17:45:28 +0000
asID: 17561
IP address blocks: 156.230.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74840 (0x12458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 16 17:45:28 2025 GMT
Not After : Dec 13 17:45:28 2027 GMT
Subject: CN=67b2243c-c9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:a9:20:25:23:d4:4b:b3:cf:01:fa:5e:4b:
2c:a3:a6:35:1e:13:fb:e7:4c:c9:5f:82:5e:1c:52:
47:be:fe:6c:c7:65:88:a1:b9:f8:a8:0d:6d:f0:5a:
1e:80:05:90:83:23:35:22:a8:2f:92:f6:98:8e:f8:
6b:3b:30:d4:51:cc:d5:10:92:08:06:20:d2:fe:94:
6f:c4:e1:f2:24:18:60:6f:49:66:a5:30:74:08:1f:
a9:a2:2b:ec:38:97:34:8a:c7:1f:f8:4e:fb:ea:4f:
b7:64:74:97:29:0d:7b:d5:7d:41:40:6f:8e:5d:86:
4b:46:9b:fb:1f:91:81:77:8c:23:48:61:e3:ad:f5:
b5:55:4c:87:3b:a2:8b:cf:1e:a8:3f:1f:0e:d2:8b:
86:d5:b9:c1:ea:28:10:5a:20:17:0c:a4:d7:cf:b0:
93:5d:4f:29:21:9a:69:fd:aa:16:7b:4b:e5:e6:50:
ae:0b:d7:2d:1c:f7:4f:ad:b2:23:aa:9e:60:d4:0c:
43:c4:3e:f0:1d:dc:98:17:2b:be:ae:8f:3c:d6:bf:
c3:bf:f2:14:0a:d7:4b:18:5a:95:3d:39:49:c2:5e:
40:ad:00:29:28:66:ef:13:08:ff:91:c4:65:07:a3:
09:d5:ee:76:fc:a9:50:54:a0:64:f9:e4:a0:71:83:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:C8:14:BE:FB:28:CC:D6:36:38:92:D0:2A:E0:E2:A9:FB:0C:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1473136EC8D11EF90EE00A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.149.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:eb:dc:f4:65:58:7e:96:fb:e7:03:2a:e6:2e:30:6f:ab:e7:
ec:68:41:ce:f0:cb:9a:10:8a:d2:66:f2:f6:00:a0:27:82:3b:
2f:d1:3c:a1:12:5c:1b:11:c0:a7:da:4d:3c:b0:62:9f:6b:d4:
10:1f:6e:b5:40:e7:c7:e2:6a:a6:c4:5e:94:f7:f9:9c:53:1a:
e7:0a:9f:32:4c:46:b2:f6:06:26:9a:e7:de:c0:1a:a7:a1:75:
d9:58:47:b2:09:a8:4d:c6:96:f2:05:f3:e0:9c:63:7b:fe:ae:
c2:53:a9:82:7e:b0:93:a2:43:af:16:d8:d0:fc:0e:35:7b:b3:
97:b7:ef:49:fe:3c:b6:20:87:be:0f:34:75:34:c2:aa:23:58:
ee:eb:0d:44:74:58:97:0f:e8:1d:48:18:38:fb:4d:ee:38:91:
93:5e:62:1b:81:8e:a8:77:1c:a5:27:5a:33:9c:a6:9a:3e:d4:
34:30:5f:79:d2:6b:b2:9c:f7:6c:7f:0d:86:60:f6:36:4c:66:
f1:bc:a0:9f:37:6f:b4:70:83:4e:e5:77:74:bd:d5:5c:11:5f:
6c:af:04:0d:d3:9d:16:48:0a:41:18:2d:8e:d1:9b:12:d1:8d:
fc:9a:2d:73:51:96:6d:03:ac:94:e3:e6:58:7b:09:11:5b:df:
f5:d1:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:49 2025 by rpki-client