Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E28600CAF4CC11EFB2DDAFA0762E951A.roa
File: E28600CAF4CC11EFB2DDAFA0762E951A.roa (raw, json)
Hash identifier: kIGggxxnVrwXNWw4cpTI8z8bWUgpR6dsFqMEPHrLbws=
Subject key identifier: 46:7B:08:B7:0A:E2:56:C0:38:B7:FF:74:C8:BB:05:BC:D6:AC:AA:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E28600CAF4CC11EFB2DDAFA0762E951A.roa
Signing time: Thu 27 Feb 2025 05:37:08 +0000
ROA not before: Thu 27 Feb 2025 05:37:05 +0000
ROA not after: Thu 19 Feb 2026 05:37:05 +0000
asID: 984
IP address blocks: 156.236.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80091 (0x138db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 05:37:05 2025 GMT
Not After : Feb 19 05:37:05 2026 GMT
Subject: CN=67bffa04-00ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b4:dc:44:44:93:a0:8c:ca:53:54:8a:28:f6:
af:56:2d:78:69:b1:ec:79:e6:9a:79:f5:e9:fb:ca:
de:b2:ff:4e:cb:da:30:1b:56:0e:95:fd:ce:3b:3b:
f1:da:43:1d:0b:9c:03:02:ae:1b:cf:66:24:81:97:
e7:00:8f:b3:e3:c8:c5:39:86:30:a1:55:da:cb:dd:
1c:0e:ea:56:20:fb:58:3d:f6:43:96:bc:af:8e:f3:
8f:57:75:c5:a5:cd:68:71:ba:1a:06:a6:6b:5d:63:
2c:1d:68:74:43:51:a2:5d:2c:06:1f:d0:e5:58:1b:
21:93:ba:14:1b:b0:26:61:cf:74:fc:9d:d6:b0:26:
2b:de:83:be:ce:8c:6f:88:55:ca:d4:82:4d:fd:0f:
b8:fb:b1:80:ed:20:90:4d:26:be:94:5e:be:45:fb:
99:c1:86:d5:f6:08:a1:92:af:fd:5e:0d:72:9b:8b:
08:7d:2a:86:84:d5:e8:91:ef:f7:fd:4f:24:07:ff:
52:f2:a7:ee:76:23:c7:ff:b2:56:fe:27:81:a4:fd:
fb:62:83:f7:5a:e1:60:f3:d5:ec:b6:76:47:d6:a0:
2e:fe:44:f3:50:52:a8:7e:10:5c:3f:e7:5c:6c:59:
14:36:da:53:9c:b7:14:e7:63:4f:25:57:90:4c:a6:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7B:08:B7:0A:E2:56:C0:38:B7:FF:74:C8:BB:05:BC:D6:AC:AA:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E28600CAF4CC11EFB2DDAFA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.30.0/24
Signature Algorithm: sha256WithRSAEncryption
55:25:99:80:d6:e8:91:35:15:7f:79:54:4a:90:33:cf:33:71:
86:d8:16:d4:c3:8a:5c:2d:f8:ff:50:85:7e:35:05:20:15:24:
62:8a:b8:5d:a2:1f:41:a1:46:b6:e8:10:7c:43:fe:37:fd:7d:
50:93:69:8d:b9:43:be:6f:44:24:79:16:cb:08:96:6e:4b:df:
a5:b5:d2:62:85:41:ea:cc:a9:e8:d9:3c:80:f1:4a:62:07:ad:
8d:bc:6d:b8:5e:3b:c8:b6:b3:c7:de:6d:33:38:d1:52:f8:7a:
c8:a3:9b:42:cf:05:f7:5e:ad:0d:60:2f:4b:95:6d:05:48:3e:
96:5e:7c:9a:56:67:cb:c1:06:c4:9e:10:52:83:67:1e:2b:bc:
60:d6:62:ab:58:88:cf:3a:b7:dd:be:62:c5:c3:41:d9:ae:68:
32:5d:6d:0a:df:5d:8c:7a:e4:6a:03:1b:33:d0:a2:ab:f8:b9:
2f:fd:d7:49:48:6a:07:2c:f6:3d:d7:e8:d7:ef:6d:50:3b:6c:
08:97:2c:1b:ce:f4:6c:7f:45:70:10:eb:93:ba:7d:76:11:f6:
b2:26:0f:b6:ec:42:4a:98:a7:61:97:19:f9:9e:1c:eb:24:49:
81:c5:2a:d3:ce:6b:a9:07:21:13:c6:72:95:e7:98:8c:f0:ed:
2d:54:47:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:03 2025 by rpki-client