Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB6C7CBC058511F0AD399B7B762E951A.roa
File: FB6C7CBC058511F0AD399B7B762E951A.roa (raw, json)
Hash identifier: XvfftsXbr5w31mjXKNPxBzoIaAnDAo72ZSWj3RC+aYQ=
Subject key identifier: 6E:60:EA:42:67:14:DB:85:5A:BE:38:D0:D5:14:7B:5D:9F:9A:30:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01475B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB6C7CBC058511F0AD399B7B762E951A.roa
Signing time: Thu 20 Mar 2025 12:22:26 +0000
ROA not before: Thu 20 Mar 2025 12:22:22 +0000
ROA not after: Fri 11 Apr 2025 12:22:22 +0000
asID: 57043
IP address blocks: 156.229.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83803 (0x1475b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 12:22:22 2025 GMT
Not After : Apr 11 12:22:22 2025 GMT
Subject: CN=67dc0881-5fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:62:bd:89:18:2d:0e:10:e9:1a:26:9d:54:d0:
de:25:d2:0f:4b:d7:14:5c:1b:91:0c:c1:f3:d0:65:
74:5d:b6:71:70:a6:a3:5a:6e:bd:4e:01:97:6d:02:
99:34:95:75:4c:1f:59:2b:78:f9:f7:1f:a0:02:22:
0c:04:8f:db:8d:ac:c2:b6:69:14:79:c9:5c:a2:0c:
4c:bb:b4:35:c1:d3:82:0f:87:80:e7:9c:23:a6:48:
64:9e:b2:9a:c0:fe:61:7a:92:e6:8c:b6:4d:cb:bf:
cb:6b:af:de:a8:38:84:1c:4b:29:73:2e:44:b0:e4:
91:77:81:4b:3d:cf:1b:f5:fb:eb:2c:d2:50:04:6b:
98:6f:06:07:89:70:bb:9d:0c:48:ee:9f:6f:9e:cf:
a5:f8:cb:e3:d9:2d:3a:31:8c:2b:ca:4e:e0:03:10:
b5:46:d1:1f:9c:e2:2e:83:73:e3:28:ce:eb:64:c0:
fc:98:59:25:35:bc:ce:39:7a:b2:0e:21:c7:48:a8:
ed:f3:23:7b:ae:3a:a6:e0:10:87:b0:a7:c1:92:31:
85:e2:e0:e9:39:58:26:8a:57:60:21:75:ce:d1:32:
ca:76:31:d5:a2:0b:b9:88:3d:5d:96:64:da:d3:88:
9d:d1:56:e1:f9:08:02:2e:d6:b6:d0:61:77:3e:19:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:60:EA:42:67:14:DB:85:5A:BE:38:D0:D5:14:7B:5D:9F:9A:30:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB6C7CBC058511F0AD399B7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.120.0/24
Signature Algorithm: sha256WithRSAEncryption
66:32:d4:8a:5b:40:80:bd:bf:8f:b1:5f:e5:07:f8:07:ef:f7:
ce:c2:53:4d:bd:4a:57:f4:73:ad:6e:8b:27:15:19:d8:b3:03:
62:5d:0e:44:a0:87:f3:97:55:69:46:6c:e7:4c:cb:01:5c:60:
f5:42:bf:9d:f5:6f:85:37:1e:56:93:a2:e0:1e:a0:b7:30:46:
4d:e0:bc:a2:3c:ef:4c:fe:51:b7:d7:21:1a:14:49:08:0c:a9:
50:b3:f2:d4:2e:01:10:86:80:7e:06:65:b9:a6:4d:3c:20:ff:
d6:ac:5d:fd:08:f3:0e:9c:69:2e:8f:b5:5a:f8:18:4a:a1:71:
ee:3c:e4:38:83:36:6b:c2:31:18:cc:25:47:eb:c0:44:75:4d:
5d:15:32:ae:5a:4c:0f:10:19:66:3e:be:8d:71:14:a6:3a:af:
4f:ce:94:94:94:75:de:5e:ae:7e:48:67:92:db:d7:b2:2c:df:
00:f5:96:e5:0b:b9:a6:a3:6a:a1:a8:ad:13:70:5d:89:79:cc:
5a:a4:e9:c3:05:ee:34:f5:0a:41:5f:e2:a4:18:e3:7e:69:11:
e1:b6:46:b9:49:66:17:85:d0:09:34:4b:67:f8:a2:0b:0c:20:
38:29:c6:2c:c4:0b:34:cc:b4:3d:31:7c:2b:61:34:49:c2:22:
34:41:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:22 2025 by rpki-client