Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDB5ED50F34811EF84DAE5A8762E951A.roa
File: EDB5ED50F34811EF84DAE5A8762E951A.roa (raw, json)
Hash identifier: nNYGm8YIso7nZN/9k73AfaLRTyKo39RgYpg6E3Q6qgU=
Subject key identifier: 23:64:19:AD:8C:42:A2:6B:6D:35:CB:B2:C1:94:41:62:96:36:FF:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDB5ED50F34811EF84DAE5A8762E951A.roa
Signing time: Tue 25 Feb 2025 07:20:02 +0000
ROA not before: Tue 25 Feb 2025 07:19:59 +0000
ROA not after: Sat 19 Feb 2028 07:19:59 +0000
asID: 17561
IP address blocks: 156.249.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77222 (0x12da6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 07:19:59 2025 GMT
Not After : Feb 19 07:19:59 2028 GMT
Subject: CN=67bd6f22-19ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:c0:df:91:22:b0:5e:dc:0d:09:23:bb:c8:
14:ff:f8:65:00:f9:1d:20:30:69:cd:f3:d9:ef:3f:
2d:46:f0:57:90:0b:fa:e8:e6:df:04:3f:16:73:fc:
bc:34:1b:f0:06:0c:d8:f2:8b:36:42:55:c4:82:49:
80:20:e5:9e:a1:9d:0e:90:1c:67:3c:66:43:60:a8:
99:07:76:dc:66:48:d3:9c:f9:28:c0:20:34:6e:f4:
74:ee:84:2a:fd:05:c2:fe:34:5e:58:a1:06:dc:5a:
9e:ea:27:2f:2c:10:1f:3d:2b:cd:5d:f6:4c:30:67:
72:91:62:b6:84:08:69:8c:2f:ec:6a:7d:be:ab:08:
a6:25:83:53:dd:a2:7c:68:d0:37:a3:8f:38:2f:d3:
59:c4:e7:a7:28:6c:bd:25:5c:73:9a:ea:a0:1a:7f:
09:ce:d4:67:36:d4:3a:08:c9:7d:2a:b6:c3:1a:21:
65:fe:59:a5:45:52:6c:16:f9:87:b8:51:51:31:74:
7d:d1:51:d7:83:21:8c:a3:e0:a5:d3:4a:1b:ae:f5:
dc:30:7c:0b:7d:53:f7:da:cf:63:f8:a3:42:b1:c2:
ee:4b:7c:af:6a:da:67:f0:f0:85:38:1b:85:3c:5f:
82:61:52:10:97:6f:1c:9f:cc:a6:f7:13:f7:a9:21:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:64:19:AD:8C:42:A2:6B:6D:35:CB:B2:C1:94:41:62:96:36:FF:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDB5ED50F34811EF84DAE5A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d6:49:79:64:ea:a4:c1:a2:da:77:94:a4:e5:39:6a:79:a4:
95:92:87:d3:bb:6c:a4:ee:11:87:a8:4e:b5:d4:a9:1c:41:1c:
be:07:1e:dd:0f:bc:59:64:0e:d2:d9:f7:29:1f:f7:5b:0c:08:
4b:1e:88:1c:52:5f:10:db:c4:69:06:08:bd:4b:ff:08:01:f3:
89:49:1e:8a:1e:30:07:47:49:62:7f:d6:b5:f8:b4:08:11:c8:
87:bb:08:8a:28:aa:a7:46:fd:45:a8:b1:c4:95:95:9a:46:ac:
71:09:15:99:b5:0c:53:d3:54:6c:d2:d5:a3:3d:ec:59:a5:a4:
4c:b5:a2:0e:ad:30:00:ef:ce:99:75:5b:47:b3:50:d5:a5:8b:
30:8f:63:a5:5b:2e:c8:78:5a:53:b1:fd:6e:ee:5b:dd:47:fb:
7a:d5:bc:b6:8d:36:ff:1a:f4:aa:1d:e3:c8:3a:b1:96:f3:47:
89:f8:9c:d0:c4:bb:1a:3f:a5:a9:b4:13:55:db:ca:8f:f6:bb:
38:3a:1a:7c:d8:8a:dd:1d:80:69:e1:6b:7b:38:02:12:31:91:
51:a2:12:8f:4f:7f:0d:c7:00:2f:02:7f:54:3f:71:33:7c:03:
33:90:a1:30:a9:43:bb:29:b0:69:5f:74:1b:27:5c:04:c1:81:
ad:ba:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:35 2025 by rpki-client