Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1AFF1F8E89611EF91DF4C5B762E951A.roa
File: D1AFF1F8E89611EF91DF4C5B762E951A.roa (raw, json)
Hash identifier: SbhbP2jZTBW2h/HxlWIpneBV93R6QUzQbHIag/r6H4w=
Subject key identifier: EE:8B:27:35:C9:11:A4:44:D8:38:B1:6C:CF:81:9B:33:CF:90:58:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01213E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1AFF1F8E89611EF91DF4C5B762E951A.roa
Signing time: Tue 11 Feb 2025 16:39:53 +0000
ROA not before: Tue 11 Feb 2025 16:39:50 +0000
ROA not after: Tue 25 Feb 2025 16:39:50 +0000
asID: 395886
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74046 (0x1213e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 11 16:39:50 2025 GMT
Not After : Feb 25 16:39:50 2025 GMT
Subject: CN=67ab7d59-d9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:d1:42:13:22:74:0a:35:69:15:85:27:4e:
14:b8:11:53:8a:0f:2d:22:0e:8c:1d:05:87:37:4b:
bf:b4:a9:bd:ac:03:b5:d0:ca:a3:0c:70:1a:4a:8a:
32:34:e3:bf:10:b5:da:6d:3b:40:29:86:31:85:51:
62:d2:0f:0e:74:11:28:04:a3:f6:16:86:9e:24:43:
b3:a5:ec:d2:35:0d:8c:fe:9e:37:9e:06:d7:c0:a5:
86:fb:5d:63:07:8e:1b:72:db:92:40:64:42:96:e4:
44:ae:ec:5f:52:5a:59:73:02:ac:bb:a3:cd:63:72:
4e:b0:c9:e0:67:fc:3e:c2:f1:09:49:b3:39:c4:a5:
01:54:ad:b7:c1:b0:c1:07:8c:d2:e2:0e:25:6f:22:
f0:58:c1:93:a0:f2:9c:55:95:77:e6:45:10:c3:6d:
06:09:ca:e8:fa:84:ac:a6:8c:84:92:b6:72:40:16:
ee:86:ee:eb:40:3d:21:36:67:8b:5a:b0:bf:82:13:
a2:c1:ab:e5:91:6b:d7:c6:6e:5c:3b:cb:42:20:f8:
5f:cb:50:1f:a6:40:29:26:83:13:dc:2b:93:aa:43:
99:97:e2:01:19:69:c5:ea:b3:00:e0:5a:b1:b8:e6:
96:7a:95:6a:1f:04:32:c3:6e:be:2e:de:e3:ae:e1:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8B:27:35:C9:11:A4:44:D8:38:B1:6C:CF:81:9B:33:CF:90:58:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1AFF1F8E89611EF91DF4C5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
51:58:f7:b1:81:22:ea:47:48:2c:60:83:fb:aa:95:72:e3:a5:
ea:0f:dc:44:42:dc:b6:23:2e:e6:c7:3e:d1:e5:73:85:05:e4:
a3:a2:70:ba:87:0c:62:71:4c:38:91:0d:2c:7a:b2:94:30:37:
14:e4:86:ef:f0:8a:41:ff:b7:26:84:31:c6:cf:a1:5d:6a:94:
94:71:46:0c:11:f6:52:2d:0a:cf:af:fa:45:83:aa:3b:9c:52:
ea:40:f6:c2:1f:e3:59:4b:5d:e6:08:68:be:3f:c0:74:ad:3f:
c8:56:76:2e:2a:cb:70:d1:35:72:51:9d:cc:84:40:1f:0b:82:
b9:f9:68:f5:6e:42:da:b3:d8:b2:b3:5d:ca:28:22:71:44:ca:
11:e1:fb:78:07:3b:75:21:87:e6:77:f1:0a:27:8a:87:df:c1:
01:5c:91:35:b3:dd:e3:b8:9d:f7:11:4c:d0:8c:be:14:f6:12:
4b:8a:c3:02:3d:52:52:4e:4b:dd:1e:65:04:24:c5:92:e1:6d:
f1:a0:cb:9d:81:9b:fe:7f:d3:d9:89:df:64:49:c1:dd:99:d4:
6a:c6:94:77:c5:c7:c6:af:d4:03:93:13:d2:0f:b0:1e:fb:b1:
a0:14:37:9c:e6:69:7f:7b:8b:d2:af:5f:a2:72:a8:4e:7d:a4:
b4:27:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:11 2025 by rpki-client