Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F14EEC00042811F0A14B8691762E951A.roa
File: F14EEC00042811F0A14B8691762E951A.roa (raw, json)
Hash identifier: hyxi3NPi5IzZ330EBQq9cVWh/PSR6SGoPYEEB/eNvIc=
Subject key identifier: D3:3B:6D:8E:F3:AD:90:79:F6:5E:1F:7E:2E:91:30:1D:AE:F2:EB:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F14EEC00042811F0A14B8691762E951A.roa
Signing time: Tue 18 Mar 2025 18:43:54 +0000
ROA not before: Tue 18 Mar 2025 18:43:50 +0000
ROA not after: Mon 21 Apr 2025 18:43:50 +0000
asID: 139880
IP address blocks: 156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83657 (0x146c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 18:43:50 2025 GMT
Not After : Apr 21 18:43:50 2025 GMT
Subject: CN=67d9beea-c05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:a5:a2:09:d4:ec:df:61:0f:13:26:d5:e7:
06:41:86:21:3c:d0:95:e6:9f:fc:6c:48:83:fc:59:
ed:41:aa:db:63:1e:02:92:21:78:29:af:05:70:c9:
4b:0f:4f:e4:bd:42:3c:fa:24:3d:62:ff:64:38:6c:
f9:bd:20:8b:c7:51:55:0b:ab:b3:71:7a:3a:98:2a:
df:07:52:80:e0:9a:92:4a:18:7c:66:44:fb:84:1c:
b2:36:c8:86:d1:d5:83:0e:9b:34:e4:7c:15:88:30:
02:7e:de:84:60:d1:e5:d4:5f:9e:13:91:7a:65:56:
27:9f:3c:7a:1d:55:6d:1e:64:f7:01:e1:c6:db:45:
df:e8:04:f8:d7:04:5c:84:49:bc:54:88:f8:fd:46:
35:c9:77:0a:87:32:75:37:7e:78:d8:0b:3f:ba:8d:
9c:60:a2:64:d8:49:3d:d7:66:b9:23:75:46:ec:88:
ca:40:cc:8c:35:d3:e5:1c:50:05:42:1e:b8:21:18:
7a:f0:14:b8:c4:53:2f:b6:d8:b0:fe:e5:be:e9:58:
6c:63:b6:8c:f9:a3:12:be:22:01:c7:cf:e7:c6:1f:
c2:60:dc:5e:14:c6:56:c1:7a:5b:dd:e0:fd:21:df:
58:4e:0d:fa:c4:3d:74:06:1f:6b:e6:bf:1e:f0:d5:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:6D:8E:F3:AD:90:79:F6:5E:1F:7E:2E:91:30:1D:AE:F2:EB:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F14EEC00042811F0A14B8691762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
7c:c4:b7:7b:54:a8:27:ee:0f:72:f7:ad:d6:74:1e:30:c4:f4:
c1:d9:3d:d4:c8:fd:d5:a3:0a:95:12:97:2e:d0:6f:f1:c1:30:
9a:81:89:c3:00:21:5e:60:6c:86:ee:ac:f6:80:2d:d6:f2:01:
55:37:20:b7:16:23:d4:4e:11:c5:8b:44:c2:7b:5c:ad:d9:3b:
4a:4e:73:30:6f:bd:5d:aa:dc:31:d8:54:88:be:16:fe:c4:b7:
d6:ee:bb:05:2c:0e:83:a4:ee:58:25:42:fa:5d:e3:41:e5:6e:
17:8b:7f:2e:2c:e0:d1:5f:70:21:47:f2:a8:0d:2a:89:d6:e5:
a6:1a:e4:e2:6b:12:06:ce:0d:3e:62:a9:03:6c:aa:d1:31:38:
59:77:85:c9:68:33:db:b0:a3:61:48:dc:3d:f3:d6:76:90:94:
27:11:cf:bc:ce:9a:35:dc:8c:ec:d3:42:f1:ac:41:61:62:70:
d7:25:3b:94:46:02:ed:bd:2e:87:4a:2d:44:f1:27:52:34:a0:
06:83:49:8c:33:93:be:55:9d:93:7f:76:41:53:8e:0c:d2:b0:
88:63:f1:ce:e3:c3:c5:f6:9d:01:dc:05:b0:5a:e6:50:d9:39:
ab:95:75:7f:ee:6b:a2:41:9c:6b:90:ec:66:f0:c9:39:d2:74:
0c:84:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:04 2025 by rpki-client