Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D34600DEF33B11EF874D8452762E951A.roa
File: D34600DEF33B11EF874D8452762E951A.roa (raw, json)
Hash identifier: KVlD7ig9P+4GP8abTd7IHdinVRjUq2HRNIIXdr9oPK4=
Subject key identifier: 76:F9:D0:3E:09:3F:76:54:74:50:AF:B1:4F:11:6E:73:7D:72:3C:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D34600DEF33B11EF874D8452762E951A.roa
Signing time: Tue 25 Feb 2025 05:46:15 +0000
ROA not before: Tue 25 Feb 2025 05:46:10 +0000
ROA not after: Sat 19 Feb 2028 05:46:10 +0000
asID: 17561
IP address blocks: 156.249.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77182 (0x12d7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 05:46:10 2025 GMT
Not After : Feb 19 05:46:10 2028 GMT
Subject: CN=67bd5927-9b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:cd:47:e7:59:20:0c:fa:9b:57:8b:a6:0e:
51:7e:4f:aa:46:4f:77:2d:07:fa:0e:c4:4b:89:c5:
29:80:08:43:9d:74:d3:83:64:c4:fb:0c:0c:d8:d5:
82:80:b8:1a:39:e6:8d:71:97:a0:9d:52:5b:98:bf:
2a:18:1c:38:f2:87:2c:12:0e:79:16:ee:3f:68:0a:
d3:31:42:f0:62:ea:03:55:fb:86:c1:1b:5e:a1:17:
0f:09:18:0b:f6:84:84:08:78:6a:3f:0c:dd:29:bb:
d0:9f:d9:1b:14:23:bd:3f:aa:9e:26:d9:d8:2a:29:
eb:6e:4d:01:ac:6a:b2:52:a5:38:88:0c:86:c0:56:
42:9a:a4:1f:96:82:6d:e2:a5:81:5a:bd:90:b9:71:
42:21:cb:7f:8f:2e:89:05:41:36:2b:a2:14:5a:0e:
35:78:e3:cd:aa:8c:34:50:8a:53:19:06:e3:b4:7a:
c8:f3:f7:f8:84:c6:a4:90:1f:3b:74:28:fa:72:a0:
54:55:60:4b:10:b7:19:a6:19:5f:98:b5:46:f7:c5:
ef:49:c1:1a:79:39:8a:32:12:70:5f:27:f6:c1:13:
10:db:61:5d:d9:64:09:56:e2:73:a0:84:72:32:47:
64:b3:aa:78:66:b1:e3:b3:38:1d:75:16:e0:24:dc:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F9:D0:3E:09:3F:76:54:74:50:AF:B1:4F:11:6E:73:7D:72:3C:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D34600DEF33B11EF874D8452762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.178.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a4:1f:88:96:41:f7:55:59:a4:c8:ad:9a:06:6d:77:d7:21:
42:5a:59:83:f5:28:ca:5c:df:2d:9c:8a:a4:21:53:19:6d:a6:
69:24:83:6f:d4:24:1c:66:57:f9:e6:1c:de:f0:5b:6e:79:ad:
d6:d7:ab:2b:b1:6b:8f:00:a6:19:8a:2e:ce:45:22:97:1e:04:
f4:e9:b8:cf:02:c1:71:a4:de:60:98:dc:a4:e2:9c:6e:ab:22:
2b:ca:9c:fd:c6:0e:53:a6:a6:b1:75:78:e6:03:3d:e8:fc:a0:
d1:de:fd:8a:b8:f4:a8:05:5e:de:21:f7:14:f8:83:75:80:69:
aa:33:b4:2e:d0:f4:b2:d8:cc:cb:34:9d:c1:cf:3d:cf:a0:df:
db:6f:45:84:65:8c:28:c5:39:d4:92:00:e4:61:60:bf:fd:6a:
b4:20:3c:da:99:29:8c:6e:64:56:70:05:da:b9:be:9f:a9:91:
e4:27:36:db:b4:85:55:6b:af:e4:49:1a:e1:07:80:23:ba:ae:
d6:59:30:50:f7:50:d2:25:6e:4e:ec:90:1b:14:7b:64:b4:29:
d9:fe:29:7c:19:e2:f7:93:b0:4f:54:c0:c9:50:89:fd:92:f5:
b9:ed:fe:a0:3d:23:03:59:bf:19:5b:f2:f8:c9:e0:1b:16:e9:
ee:d0:2b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:00 2025 by rpki-client