Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCC0CEDA057611F084F07B9E762E951A.roa
File: DCC0CEDA057611F084F07B9E762E951A.roa (raw, json)
Hash identifier: xoyMIOcIrfFVE8BTUMx//CU+Y8TRzsmQja2p4kwnSAo=
Subject key identifier: 00:DD:45:18:2D:97:28:43:AA:D2:A7:A7:0C:A8:CE:0A:D2:EB:E3:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014722
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCC0CEDA057611F084F07B9E762E951A.roa
Signing time: Thu 20 Mar 2025 10:34:12 +0000
ROA not before: Thu 20 Mar 2025 10:34:07 +0000
ROA not after: Wed 09 Apr 2025 10:34:07 +0000
asID: 38082
IP address blocks: 156.241.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83746 (0x14722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 10:34:07 2025 GMT
Not After : Apr 9 10:34:07 2025 GMT
Subject: CN=67dbef24-4360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:6f:52:f1:da:7b:2a:f7:10:ca:1f:3c:18:
c3:05:60:1a:3d:aa:42:e9:ad:97:90:77:de:c1:2c:
e7:ae:e3:1d:52:3f:65:31:d3:7b:88:16:01:17:ba:
c5:57:4e:75:ed:05:fd:4b:48:cf:bb:08:da:e4:24:
3d:22:04:9f:c0:c5:46:2d:39:19:c5:a9:6d:6d:a6:
90:b7:54:26:94:fa:cc:3a:1b:52:98:54:e0:8b:2f:
3f:08:31:96:3e:ae:f8:53:ea:7c:25:21:ba:fc:a8:
c5:a0:40:48:a9:db:c0:c9:fb:b6:89:4a:40:f8:40:
f6:f4:40:d8:f2:1c:ff:aa:3f:65:68:c5:65:22:98:
0b:72:01:23:7d:48:9e:30:62:0a:5a:5d:eb:12:c5:
7a:37:1b:92:19:f7:bd:08:7d:e6:f4:8d:5a:50:26:
7c:fc:81:0d:a6:0e:3a:67:bc:29:dc:13:bd:4d:da:
bd:a3:37:d5:a4:94:d2:f1:af:52:bd:54:d9:a5:89:
96:65:36:8c:7d:45:09:d9:56:b9:11:31:23:c8:14:
b6:da:c8:74:03:9b:20:23:59:5a:de:bf:a5:cd:07:
23:69:f9:37:3c:88:80:e0:a3:5c:7c:be:9f:4b:09:
a8:b3:4e:96:e9:ca:8f:95:cd:f3:76:50:a6:9c:92:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DD:45:18:2D:97:28:43:AA:D2:A7:A7:0C:A8:CE:0A:D2:EB:E3:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCC0CEDA057611F084F07B9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.139.0/24
Signature Algorithm: sha256WithRSAEncryption
77:82:e1:58:8d:bf:5c:df:81:99:92:d8:0a:a8:df:b1:56:93:
20:f5:42:f4:dc:9d:c8:72:41:90:7a:27:43:dd:11:eb:46:35:
19:ef:c4:3b:fa:bd:c2:bf:ce:49:1e:a0:af:0f:87:bd:b2:b0:
a2:84:00:14:9a:bb:aa:69:0f:9c:22:91:59:df:47:21:42:3f:
76:26:ba:ca:bc:46:a5:2e:48:d4:a3:be:b6:62:2f:1c:31:de:
65:7f:1e:32:ac:6e:f7:17:71:c6:28:22:32:6e:08:2e:63:a0:
69:da:63:d2:5d:6c:ff:d0:c9:4f:f8:53:bd:3a:9a:cf:4a:91:
4d:b5:57:1c:51:f4:81:1e:99:7e:7c:a1:90:81:00:20:5b:83:
ca:4d:00:68:67:96:be:ba:dd:1f:58:72:09:36:a6:04:39:8b:
10:29:2e:ac:ad:6b:82:90:08:ac:0b:a8:0f:21:c6:16:eb:37:
60:23:b7:48:ce:90:de:f1:3c:ad:02:d1:cb:91:66:b8:f1:e9:
32:20:dd:a9:31:bd:d7:ea:a7:a0:42:0d:21:c2:9f:a3:cc:3d:
f1:b7:ec:d3:44:11:19:d4:2d:fb:d8:cd:a3:46:ea:71:80:1e:
86:07:2e:cf:5b:67:0d:77:ed:38:c8:1e:cf:a9:3b:49:5d:01:
5e:e8:78:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:06 2025 by rpki-client