Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D96EFC0A058711F08F73EA87762E951A.roa
File: D96EFC0A058711F08F73EA87762E951A.roa (raw, json)
Hash identifier: KsprnpcIULSgAjKkAkjbLnmtVxTNB/I/HlcA7HqQyeg=
Subject key identifier: 0B:92:3E:BF:F0:A5:A1:8D:DC:81:20:69:A2:A4:84:6F:EB:EE:1A:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01475D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D96EFC0A058711F08F73EA87762E951A.roa
Signing time: Thu 20 Mar 2025 12:35:47 +0000
ROA not before: Thu 20 Mar 2025 12:35:44 +0000
ROA not after: Fri 01 Aug 2025 12:35:44 +0000
asID: 62610
IP address blocks: 156.241.129.0/24 maxlen: 24
156.241.133.0/24 maxlen: 24
156.241.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83805 (0x1475d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 12:35:44 2025 GMT
Not After : Aug 1 12:35:44 2025 GMT
Subject: CN=67dc0ba3-4128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:53:b5:5b:98:12:91:ab:1f:a7:76:64:11:
31:2c:07:a9:00:9d:e7:5b:73:f6:7e:19:31:cd:40:
4e:63:eb:3e:c4:a9:72:5b:74:02:dc:73:29:35:f2:
cb:19:57:9f:ed:68:33:4d:02:2c:44:34:c0:dd:45:
56:68:55:af:d1:52:7a:ed:91:3d:5f:71:1b:6d:74:
5b:27:f8:5f:7d:08:14:38:22:4b:04:68:0e:a9:db:
b4:26:a1:27:3d:43:27:07:c4:08:d6:0a:58:48:f6:
30:1a:a1:a3:fb:8e:89:5b:d1:55:2e:27:85:77:4e:
a8:4f:fe:9e:c0:0c:a5:18:d9:65:55:53:4f:d7:c7:
8c:fb:c5:66:08:19:fa:b4:a9:26:1d:71:63:fd:3b:
f1:ca:46:cd:2e:83:b2:1f:d6:60:ce:05:82:41:8e:
8f:13:a5:58:17:af:72:8a:1f:61:5a:62:1b:70:d2:
a8:ea:d9:a5:41:fe:02:3c:c1:19:75:be:58:8e:b0:
f1:75:4d:55:4b:c2:af:65:f3:a2:36:0e:8e:91:ec:
2b:98:5c:26:28:4a:97:6a:e5:5f:db:df:49:c2:93:
5f:f1:03:90:19:95:ac:8f:d4:66:0e:81:c9:b3:8b:
26:46:4c:00:aa:f3:88:53:ac:61:7c:de:5a:a4:b1:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:92:3E:BF:F0:A5:A1:8D:DC:81:20:69:A2:A4:84:6F:EB:EE:1A:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D96EFC0A058711F08F73EA87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.129.0/24
156.241.133.0/24
156.241.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fe:f2:6b:b3:9f:53:9f:f5:82:05:fe:91:d5:b6:42:99:51:
4a:e9:f7:e7:d7:be:b3:5f:63:e2:14:eb:09:09:62:90:66:25:
91:c6:1b:f0:2b:69:4f:38:0c:81:21:5c:42:f2:ad:5e:62:11:
27:e7:bd:cf:f4:36:b8:7a:09:20:f6:23:4c:bb:a7:83:0a:b0:
95:e6:0a:b0:9d:4c:77:05:23:5a:11:07:31:90:08:f7:bd:1d:
c3:b2:52:d0:c2:b7:d6:10:bf:fe:15:a8:0c:bd:50:57:c2:0a:
37:e4:d1:62:ed:e2:9c:97:bb:df:9e:02:1f:eb:36:b8:aa:f9:
c7:2e:de:66:c3:a7:b5:1d:48:60:89:7b:28:98:59:dc:08:a4:
0a:cf:83:44:48:7d:d4:83:23:90:56:bc:6a:fd:9b:e8:2a:6c:
7d:ff:c6:84:90:f9:e8:47:2c:12:71:04:38:08:22:0e:5e:4d:
00:63:bc:61:c1:73:fe:f5:2a:9e:4c:f9:b5:b9:b5:65:f9:83:
14:d2:69:b1:f2:dd:34:9b:2b:64:70:9f:01:d9:c2:23:4e:5a:
a5:c6:87:e4:c6:31:49:39:d6:d4:3a:b0:dd:37:a3:e9:58:a9:
96:d6:7d:c8:6b:7d:2b:18:e7:bb:73:c2:3a:da:e9:29:78:d7:
e1:49:f7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:34 2025 by rpki-client