Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1DFF732FE4D11EFB1D30C8B762E951A.roa
File: D1DFF732FE4D11EFB1D30C8B762E951A.roa (raw, json)
Hash identifier: 6bRPvjS974NxVq062Ig5D7NzVIZ54tj5yrvTc9wz47I=
Subject key identifier: 94:5D:7E:EB:52:A0:9D:9B:16:6E:DF:CB:9E:03:86:8D:46:67:B0:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1DFF732FE4D11EFB1D30C8B762E951A.roa
Signing time: Tue 11 Mar 2025 07:52:46 +0000
ROA not before: Tue 11 Mar 2025 07:52:42 +0000
ROA not after: Mon 14 Apr 2025 07:52:42 +0000
asID: 64267
IP address blocks: 156.227.11.0/24 maxlen: 24
156.227.12.0/24 maxlen: 24
156.239.60.0/24 maxlen: 24
156.248.100.0/23 maxlen: 24
156.248.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83165 (0x144dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 07:52:42 2025 GMT
Not After : Apr 14 07:52:42 2025 GMT
Subject: CN=67cfebce-0f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:8d:93:c4:23:76:17:d1:79:5a:9a:67:86:
32:23:f1:86:64:3a:52:7c:01:c2:03:d8:21:f7:f3:
45:4f:3c:0e:2f:4b:6e:1b:61:9c:70:c7:27:10:96:
a4:ab:ed:ab:54:a1:23:72:24:6f:86:67:19:8f:c9:
f4:7c:41:ed:c1:59:50:dd:eb:26:e0:f4:12:25:9b:
9a:a6:dd:c5:17:64:c3:c8:01:de:19:6c:c7:0e:25:
cd:64:9a:67:eb:74:63:23:69:a6:a0:da:c8:ec:a2:
4c:5e:33:91:95:bc:be:6f:db:07:13:b7:c5:2c:c7:
b5:40:08:03:4a:37:b5:35:96:96:25:6a:29:ad:c7:
bc:7d:70:31:82:89:73:d8:06:01:96:b3:69:bd:b9:
57:a3:75:1a:ee:b0:cc:e7:5f:41:8a:86:e3:6e:fa:
e3:b5:4b:ac:b7:cc:34:99:05:0c:04:a5:f0:e4:a0:
b3:13:eb:71:00:23:3c:37:36:b7:9a:14:3e:00:8f:
c4:66:2e:3c:b3:cb:39:5c:8d:db:51:3c:40:75:dd:
51:63:0a:d0:d2:5c:23:46:00:c1:ab:78:41:f4:29:
05:99:0e:5e:0a:8d:cd:51:82:21:2d:62:f0:14:ac:
91:bb:c9:06:20:a0:1b:e8:ab:eb:77:8b:e0:4f:66:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5D:7E:EB:52:A0:9D:9B:16:6E:DF:CB:9E:03:86:8D:46:67:B0:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1DFF732FE4D11EFB1D30C8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.11.0-156.227.12.255
156.239.60.0/24
156.248.100.0/22
Signature Algorithm: sha256WithRSAEncryption
09:72:cf:0d:46:5c:ef:dc:c9:3b:31:a5:5b:7f:37:45:80:e0:
e4:d5:40:01:e4:f6:39:56:77:70:8a:5e:49:9a:65:a4:3c:01:
1b:db:3b:f6:80:d9:9f:47:0d:60:37:ae:97:e0:02:ce:2b:c3:
dd:e8:fb:75:1f:c9:64:0e:a6:43:22:e3:3c:77:61:36:d2:54:
98:9b:d7:09:f0:a0:7f:5d:bc:72:48:41:8a:bf:a4:65:00:5c:
6b:8d:23:d3:04:6d:62:31:5f:ec:b1:27:eb:71:b7:67:cc:0b:
c0:25:fc:46:4d:56:b1:a9:b9:38:43:7d:bb:96:1e:c8:0b:f5:
b9:46:7d:53:02:3f:d1:37:49:49:d0:f8:c3:19:0e:26:46:cb:
a5:b9:12:17:ee:8e:17:09:af:f7:b0:01:48:e1:5a:c8:57:55:
19:65:78:9a:6f:97:8d:b1:c5:21:27:63:e8:f8:34:b7:fb:10:
88:59:53:e3:08:cd:01:bd:a8:4a:e5:8c:8c:48:d3:4d:08:66:
b9:4a:3e:88:87:e2:80:55:b9:8a:3c:14:92:5a:0b:e0:52:cc:
7b:de:08:d2:f6:60:d4:d6:be:1f:7e:00:33:55:cc:42:f9:61:
26:1e:6b:38:ea:eb:76:0f:c1:c3:f0:16:07:ca:10:2e:1a:b0:
83:48:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:54 2025 by rpki-client