Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D370A78CF5E611EFBEB121AA762E951A.roa
File: D370A78CF5E611EFBEB121AA762E951A.roa (raw, json)
Hash identifier: sHRnNsYymgQvfhy+FDhJUxdmlkaCdZHxdJyTqgpNW+E=
Subject key identifier: C2:72:A8:E3:EB:ED:F3:6F:70:2D:7A:C8:01:01:B0:51:F5:E8:A9:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D370A78CF5E611EFBEB121AA762E951A.roa
Signing time: Fri 28 Feb 2025 15:15:21 +0000
ROA not before: Fri 28 Feb 2025 15:15:17 +0000
ROA not after: Sun 13 Apr 2025 15:15:17 +0000
asID: 138915
IP address blocks: 156.244.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81547 (0x13e8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 15:15:17 2025 GMT
Not After : Apr 13 15:15:17 2025 GMT
Subject: CN=67c1d309-8935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:a9:8e:81:87:d7:97:b5:a8:e6:d3:8e:48:
ac:5b:37:56:dc:12:c1:35:f5:de:02:46:73:47:d8:
c3:52:98:89:4e:b7:4d:90:02:27:33:c7:8e:04:d0:
04:17:a3:e2:ac:d8:dc:9e:8e:2a:c2:65:50:df:b9:
86:59:b9:49:54:43:ea:aa:d9:46:51:99:fa:a0:11:
bb:c8:de:56:71:f5:18:49:39:78:b3:be:61:bf:fa:
c9:45:a6:28:2f:b6:b1:e9:42:64:7f:e8:c3:1c:85:
10:5b:bb:45:42:88:3f:4d:32:3d:f5:3e:40:3f:4f:
55:08:c5:6d:d8:84:1f:d3:51:d8:c3:f4:77:2a:ef:
37:80:32:54:3d:f9:44:41:cd:f6:d7:79:dd:4a:4f:
b6:4d:04:fc:fd:6f:e8:bd:b3:c9:5b:4a:2b:19:72:
fc:ad:74:39:2e:c4:ac:90:ad:2f:b0:12:8b:32:9a:
76:2c:a3:aa:05:b4:20:7c:60:7e:6b:58:45:19:54:
a4:e4:e8:23:80:b0:48:45:7b:47:5b:71:cf:43:ba:
d3:da:2e:ab:b3:e1:ed:01:7e:a6:b5:07:dc:a3:2d:
8c:06:43:76:9c:4d:80:10:1b:aa:57:d4:6d:17:c6:
e8:d6:d3:85:7d:57:9c:72:dc:50:8e:0f:6d:55:13:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:A8:E3:EB:ED:F3:6F:70:2D:7A:C8:01:01:B0:51:F5:E8:A9:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D370A78CF5E611EFBEB121AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.10.0/24
Signature Algorithm: sha256WithRSAEncryption
08:1c:4c:11:93:ae:f4:73:45:99:86:5f:e6:4c:d8:c8:3b:dc:
b1:7c:4c:79:5e:d6:df:86:2d:db:64:04:92:90:67:b6:9f:79:
a2:25:62:cc:65:cb:d6:67:97:e0:f6:c6:e8:70:60:51:a1:25:
10:3f:c5:56:a6:10:74:d5:1d:80:fa:7e:c4:c4:5c:e0:47:df:
c1:68:83:f9:a2:58:60:0c:c7:fe:ea:f1:e2:5a:bf:6a:66:9b:
9a:a9:f1:4a:29:d4:f4:a4:d8:5e:41:e2:66:a4:f1:a8:15:9a:
51:2a:d3:2a:1f:b9:a4:6e:36:06:35:b5:0f:41:aa:00:9c:48:
77:7d:e4:4b:09:ae:f1:94:c3:aa:b1:d9:b7:74:80:e2:4a:eb:
8f:31:4e:fc:34:75:0f:3c:66:ff:73:3f:2e:ee:e2:38:0c:f1:
0f:8b:b5:80:8e:f8:f9:83:80:9e:21:58:61:8b:41:a9:c2:8f:
95:fa:2d:74:74:d8:de:6c:47:03:07:74:d3:c5:ec:13:c9:1b:
49:98:88:2b:9e:5b:85:85:2d:ae:ff:c3:1d:7d:f4:7f:c4:a0:
b5:92:10:fa:1a:e9:f9:1a:8f:e9:91:60:a1:f7:70:df:ed:32:
f3:9d:78:93:4e:84:c8:fa:19:e5:06:a5:75:33:38:f8:b1:02:
9c:dc:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:44 2025 by rpki-client