Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD697A6EF8D111EFAAEF658B762E951A.roa
File: DD697A6EF8D111EFAAEF658B762E951A.roa (raw, json)
Hash identifier: eizFnSTdtV3iOCxeNhlpLBjnWOaFkapj5JeGZre1NSg=
Subject key identifier: 24:65:02:12:FF:A4:E5:D9:06:8F:C8:24:44:70:14:03:48:A0:50:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD697A6EF8D111EFAAEF658B762E951A.roa
Signing time: Tue 04 Mar 2025 08:22:52 +0000
ROA not before: Tue 04 Mar 2025 08:22:48 +0000
ROA not after: Sun 11 May 2025 08:22:48 +0000
asID: 22773
IP address blocks: 156.238.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82641 (0x142d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 08:22:48 2025 GMT
Not After : May 11 08:22:48 2025 GMT
Subject: CN=67c6b85c-4079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:4f:80:b5:45:e2:77:c4:ea:04:84:5c:83:
07:dc:34:08:50:30:4d:c9:86:ae:70:e8:2a:99:77:
ee:f4:63:be:96:1a:90:b8:1f:6c:50:70:64:2d:75:
08:a2:07:a2:84:6e:94:e3:70:c7:a4:1c:1a:15:8d:
ee:eb:3f:c4:29:98:3c:15:57:6b:58:4b:1a:6a:c2:
b3:fc:2c:ee:92:97:32:89:56:35:b1:3d:85:7e:81:
2b:0c:23:fa:9c:75:4d:e8:24:da:bd:f3:a6:86:c7:
02:3c:2e:a8:b3:89:12:57:83:0a:c6:15:3a:18:a2:
6d:9f:db:b4:ae:5c:0f:55:78:ae:a4:61:d5:2a:49:
9e:9f:08:bc:35:c3:cb:da:4c:60:f1:ec:52:7d:0a:
9d:1a:f8:50:ec:76:87:d7:30:d6:a4:09:42:54:ed:
b8:6d:0f:4b:af:24:e0:5d:92:34:d9:08:dc:a5:55:
fa:83:7e:6d:31:7c:32:63:ef:42:23:d1:40:a8:e6:
ed:7a:18:d1:b3:0b:9a:dd:71:ac:dc:24:63:c0:53:
95:01:12:38:9b:f9:8a:37:f2:b9:d5:12:4a:a1:99:
62:71:f3:99:1e:e3:2c:f8:0f:2b:10:da:21:0e:00:
6e:3b:77:12:99:94:04:94:b3:0a:16:53:09:0d:c1:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:65:02:12:FF:A4:E5:D9:06:8F:C8:24:44:70:14:03:48:A0:50:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD697A6EF8D111EFAAEF658B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
Signature Algorithm: sha256WithRSAEncryption
24:d5:59:78:53:ac:35:d2:ad:62:5e:22:00:0a:3e:bc:a9:4e:
c6:37:db:34:3e:1f:92:1b:58:60:6e:56:fd:0b:c6:7c:a7:e0:
03:12:ff:ba:a6:d3:3a:9e:85:a7:28:f3:7d:30:44:a0:cc:32:
0b:88:6c:ef:60:0c:5c:29:3c:fd:c2:b2:e9:e9:48:42:b1:00:
1a:66:22:fc:45:f1:7f:5b:81:8f:73:77:5b:b0:de:cd:c8:d7:
53:6f:4e:dd:76:7e:bd:53:0c:4f:01:94:09:ab:81:2f:fb:33:
4d:48:a8:29:3e:36:2d:ff:ec:e7:f4:4d:5a:af:5f:d0:04:19:
e8:0c:39:87:f8:83:36:4c:59:36:ce:81:b5:3e:77:e8:d2:ff:
06:e1:70:91:08:de:4f:be:c4:2d:2d:42:e4:ca:cc:08:f5:e4:
e7:97:91:17:cd:a6:22:9b:35:d1:58:76:19:5b:99:ac:6e:69:
f6:f9:41:43:59:d6:11:8d:e8:6f:8c:97:cb:f0:09:05:25:4d:
fd:f1:b0:4f:d0:73:10:5f:7e:4a:62:3e:17:70:b2:49:2a:51:
af:69:ad:04:e7:57:72:bf:ca:89:eb:c1:38:e8:d1:38:02:f0:
16:b9:ce:e5:95:2a:f9:fe:d7:33:98:e0:6f:76:a8:fe:fc:90:
c1:a9:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:07 2025 by rpki-client