Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8754192096D11F092742158762E951A.roa
File: F8754192096D11F092742158762E951A.roa (raw, json)
Hash identifier: t43omY8BbH9SU1InsuxEK63t7rRKN5FjnAjtdt8rZqE=
Subject key identifier: EF:CE:B8:41:78:6F:B0:AC:BB:E0:CD:18:40:C6:AE:AF:70:FB:47:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014815
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8754192096D11F092742158762E951A.roa
Signing time: Tue 25 Mar 2025 11:40:37 +0000
ROA not before: Tue 25 Mar 2025 11:40:34 +0000
ROA not after: Sun 25 May 2025 11:40:34 +0000
asID: 138915
IP address blocks: 156.225.117.0/24 maxlen: 24
156.227.193.0/24 maxlen: 24
156.229.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83989 (0x14815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 11:40:34 2025 GMT
Not After : May 25 11:40:34 2025 GMT
Subject: CN=67e29635-e481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:07:a3:23:35:fb:d6:c5:e7:e9:60:5d:e2:
f4:4e:ad:7c:ac:b2:44:07:f2:47:9e:19:51:09:74:
da:73:e4:d5:66:ee:73:94:93:72:60:22:e6:cb:45:
e7:a3:56:0a:0d:74:e6:7d:21:3d:39:d0:01:9f:09:
03:96:bb:2b:76:c7:2a:32:c1:91:2a:4a:02:c3:ce:
bd:25:12:62:c6:e0:f4:b5:4c:21:a0:f6:12:36:37:
da:0f:85:37:59:08:8c:49:21:9e:54:db:b6:05:a0:
d7:ff:3a:99:b3:2d:0c:c4:24:83:a3:09:dc:70:fa:
ee:bb:d1:b0:df:96:80:84:73:c7:da:31:c9:0d:c4:
34:bb:4b:38:42:2d:26:73:7d:d8:71:20:7d:cd:22:
7e:a5:68:1d:30:31:77:75:a0:72:b4:35:22:cb:59:
f5:2b:df:91:86:e4:80:25:35:0b:7f:3c:eb:3c:d6:
16:ec:b9:60:d9:cf:21:a0:84:b0:34:8f:fa:ed:69:
00:ff:76:4f:f6:63:2c:ff:ea:78:a2:1a:2e:cf:08:
7d:17:be:80:34:f7:e5:e6:c6:56:61:e3:6f:d5:34:
5b:e7:c1:08:4d:33:8f:9d:1c:30:2e:83:5d:b0:77:
51:8e:22:9a:58:d5:9c:85:17:ad:26:3d:fa:2a:0d:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CE:B8:41:78:6F:B0:AC:BB:E0:CD:18:40:C6:AE:AF:70:FB:47:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8754192096D11F092742158762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.117.0/24
156.227.193.0/24
156.229.51.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ae:3b:f6:f1:e5:79:06:79:55:b7:1e:96:38:f6:05:31:a2:
a5:2c:d9:81:c6:7a:67:59:91:1b:03:02:ca:2c:c6:10:61:ad:
76:03:14:8d:d8:bb:b9:cb:c2:83:1e:b0:e1:5d:df:a3:57:50:
c8:74:54:05:61:b3:43:3a:ed:f6:04:c3:50:05:9c:69:27:93:
48:9f:4e:78:54:77:e4:c2:ba:34:6e:db:19:f7:fa:8c:c9:18:
d9:0f:6a:56:6f:88:2f:58:58:4c:5d:21:40:b2:0b:54:76:3d:
8f:d8:04:89:d1:53:c2:5b:69:95:22:dc:82:a3:d7:6f:da:f9:
b3:22:69:a3:17:0b:82:77:cd:08:44:30:0f:eb:58:6c:2c:23:
95:29:6e:00:5b:47:76:2f:69:b1:dd:64:9c:de:42:4d:bf:57:
ea:15:cc:13:04:09:f2:86:c6:59:ce:b1:3f:a7:07:8f:ab:ab:
d2:65:63:51:ca:5d:57:70:ed:81:00:23:4a:a6:e8:96:39:48:
f1:80:64:d2:4f:90:d7:46:6f:39:ae:4a:37:5b:05:c3:d1:dd:
f6:0e:19:1c:84:59:a2:f4:61:46:89:08:8d:41:11:2b:95:61:
92:ab:59:41:68:2c:de:7a:4b:8b:e9:15:32:38:0b:04:c4:5a:
f8:a2:68:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:42 2025 by rpki-client