Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6C78918F47311EFAA92FBAE762E951A.roa
File: F6C78918F47311EFAA92FBAE762E951A.roa (raw, json)
Hash identifier: M2BIrg/IS5jCOFGNN5D8LwP8NSFQOP7vsatib/asr74=
Subject key identifier: 4E:F7:02:2D:78:CE:48:F0:E9:53:6C:20:DF:01:0B:B4:C2:54:7D:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6C78918F47311EFAA92FBAE762E951A.roa
Signing time: Wed 26 Feb 2025 19:00:37 +0000
ROA not before: Wed 26 Feb 2025 19:00:33 +0000
ROA not after: Sat 19 Feb 2028 19:00:33 +0000
asID: 17561
IP address blocks: 156.241.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79561 (0x136c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:00:33 2025 GMT
Not After : Feb 19 19:00:33 2028 GMT
Subject: CN=67bf64d5-6ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:4a:33:39:21:d9:dc:f3:86:00:a0:3b:65:
7e:cb:5e:6e:8e:13:dd:0b:80:d7:70:d6:84:33:ff:
80:a8:2e:d0:27:ec:54:ad:d3:b4:15:f1:5e:84:b1:
89:ab:08:4b:c6:9a:28:d2:64:ad:ad:0a:ed:27:0d:
10:98:96:d7:91:09:5c:68:b4:1f:47:84:91:6c:14:
68:4e:48:75:c8:2b:bc:43:6b:7a:d2:93:e5:9f:34:
0d:cd:13:c7:34:a4:60:8b:91:e7:cb:d8:2a:88:1d:
17:6d:40:d1:29:40:56:7f:2f:2c:42:84:9b:c1:39:
94:e9:4f:af:b1:51:3c:38:1e:5a:66:b5:18:ec:12:
aa:f3:87:65:58:d3:33:58:63:6d:f9:59:1b:2b:d4:
01:48:94:94:58:ae:67:60:36:47:1a:35:7c:86:88:
10:02:22:55:ef:34:2f:7f:a1:e3:77:b8:1f:7a:33:
32:59:ae:e1:60:ab:7d:c0:75:7c:ff:7c:9d:67:1d:
62:a9:fb:3b:10:9a:14:ce:ad:19:ad:18:4f:69:71:
2f:1e:b4:da:a7:45:38:ba:c3:f9:c3:81:d5:80:02:
27:63:10:a9:da:9f:51:23:06:f3:34:fa:a1:2b:1d:
fb:db:f4:b0:33:f7:a4:53:e0:f5:fe:23:54:89:3a:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F7:02:2D:78:CE:48:F0:E9:53:6C:20:DF:01:0B:B4:C2:54:7D:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6C78918F47311EFAA92FBAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.49.0/24
Signature Algorithm: sha256WithRSAEncryption
67:cb:fe:21:b2:9b:f4:e9:bf:e5:69:f8:b1:91:59:66:57:67:
9d:b4:ae:69:fe:cd:bc:e1:e5:29:f0:6a:61:d5:1a:45:c9:f5:
97:0b:50:d5:24:56:e5:97:2d:cf:40:a1:ab:1c:69:57:1e:26:
46:54:95:a2:51:fa:0a:66:78:1d:87:ef:21:fa:88:d0:38:f5:
a0:2d:49:72:b3:d1:f5:0d:4d:4b:7b:ee:3b:a8:45:c1:5c:4e:
58:d3:9a:5f:e1:79:20:5e:07:df:4b:72:fe:18:0a:26:16:96:
a9:bc:69:4f:9a:8b:80:e4:84:24:05:b8:ae:c4:5d:fd:45:17:
c9:bf:9a:bf:20:eb:03:f0:e7:7e:e9:1c:52:27:41:2b:7f:a2:
e0:bd:63:5b:22:88:33:85:7a:10:37:68:87:f6:32:a7:ec:ea:
5a:73:4f:ab:84:cb:45:e5:4a:ca:82:c3:83:70:3b:16:da:a1:
b6:ac:56:47:51:65:a7:c5:50:ff:29:bd:45:91:82:08:3b:3e:
46:ee:8d:c2:27:a9:b5:e7:c3:3b:c1:67:ee:b1:75:02:b8:29:
45:74:4e:ae:ac:ad:ff:88:a3:10:b2:b4:00:c3:d8:88:39:2b:
bf:29:c4:01:b1:71:be:7c:cf:a6:d8:7c:1f:5e:3d:9b:d2:81:
42:e7:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:09 2025 by rpki-client