Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA844AA6F48611EF92E083B2762E951A.roa
File: FA844AA6F48611EF92E083B2762E951A.roa (raw, json)
Hash identifier: 6uOtJBu0R767QqRf8Q0FE98dG5/FdH55YyB/LKMnpLA=
Subject key identifier: 94:B3:A4:88:A3:69:22:CA:84:97:68:9E:15:19:21:B6:03:A7:10:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0137C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA844AA6F48611EF92E083B2762E951A.roa
Signing time: Wed 26 Feb 2025 21:16:44 +0000
ROA not before: Wed 26 Feb 2025 21:16:40 +0000
ROA not after: Sat 19 Feb 2028 21:16:40 +0000
asID: 17561
IP address blocks: 156.240.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79814 (0x137c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 21:16:40 2025 GMT
Not After : Feb 19 21:16:40 2028 GMT
Subject: CN=67bf84bc-5b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a9:66:2e:5d:6e:f1:82:88:b3:06:e5:6b:94:
fe:88:b6:c5:e4:e3:79:81:41:97:31:d4:01:75:f5:
b1:b0:f3:48:1c:c7:43:7e:3c:ff:8d:00:d5:c0:ac:
e5:3f:ec:f8:ee:f0:87:c3:0e:ae:17:20:cc:d0:a4:
fe:d4:c5:b5:71:9b:a5:4a:5b:fe:a1:98:e9:db:8e:
dc:be:60:9f:22:18:29:56:de:3f:30:d6:81:b7:51:
e8:6f:c9:6a:ed:19:22:fe:26:e8:27:1d:06:ff:97:
53:61:38:69:ef:12:51:d3:43:b4:5f:9f:aa:af:94:
7e:d0:ad:63:0e:4d:33:0d:6d:69:90:dd:06:ab:18:
40:01:06:cc:9c:b4:6b:39:cc:b0:bd:d2:34:f3:52:
7c:4a:f6:e7:7e:77:c4:99:8e:24:e3:0f:b9:ea:4a:
04:a9:16:47:26:94:63:cc:fd:3e:58:45:7a:7d:01:
84:2e:99:b5:01:bf:81:0d:a8:eb:69:f0:17:ba:2f:
fc:30:1e:fe:1d:6b:8e:47:86:24:c2:37:8c:19:26:
69:56:74:17:23:b7:d0:42:95:66:89:8d:2d:f0:6f:
bc:9b:eb:ad:43:ae:b4:c9:85:61:7f:02:e8:d4:28:
5a:b2:46:e0:73:98:96:de:22:4b:82:95:e1:04:7c:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B3:A4:88:A3:69:22:CA:84:97:68:9E:15:19:21:B6:03:A7:10:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA844AA6F48611EF92E083B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.75.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f6:c5:c9:16:c8:60:6f:2e:65:4a:3e:cd:b1:51:71:f4:19:
21:6a:98:1f:8d:08:03:56:86:5b:3d:ea:ff:81:11:be:e6:a0:
1e:44:23:c9:f3:5a:51:85:23:76:18:8b:3f:6f:d1:0f:29:e8:
a1:30:51:5e:fc:34:dd:41:43:ad:2a:93:80:29:92:05:57:73:
8f:4e:2b:a7:90:7a:f1:c9:6f:b4:7e:70:06:72:57:29:26:24:
37:b8:fe:62:b6:fd:f2:55:1f:d0:40:0a:c7:ce:a5:4d:fe:87:
95:6d:1d:bd:3f:ff:d2:50:e1:0e:8c:ad:b0:4e:50:74:5b:f1:
51:f0:d7:6f:25:a6:fc:4d:f6:04:42:a5:36:c3:c3:dc:95:f4:
d7:46:f8:8a:54:c3:af:d0:b7:1a:ef:c0:e2:02:d3:41:92:88:
a8:0e:07:fe:62:eb:a2:4f:a5:22:ac:af:69:65:c8:f3:fa:05:
78:ec:7b:2f:72:8d:cd:37:34:cf:b5:f3:f4:52:f9:0b:af:c5:
b8:13:98:9d:f4:fc:4b:d3:10:3d:f1:c1:43:f1:4f:74:e2:e6:
91:cf:4b:4b:5c:2f:64:a6:f3:ae:f5:f8:3b:79:87:9a:a9:ac:
71:1e:63:a5:96:da:94:f1:e7:12:97:7b:b1:5e:d0:74:93:a6:
7c:f2:ec:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:40 2025 by rpki-client