Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDBC65DC03DB11F09540B8BB762E951A.roa
File: FDBC65DC03DB11F09540B8BB762E951A.roa (raw, json)
Hash identifier: IMgT5VNmfgYJhdnIB7t0oIAcytZQ8sPWSDYMVxsUjk4=
Subject key identifier: D7:82:F7:0A:91:6C:CD:8A:27:0C:DB:9E:6A:F6:54:6D:70:B3:99:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014689
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDBC65DC03DB11F09540B8BB762E951A.roa
Signing time: Tue 18 Mar 2025 09:33:04 +0000
ROA not before: Tue 18 Mar 2025 09:33:00 +0000
ROA not after: Thu 24 Apr 2025 09:33:00 +0000
asID: 54801
IP address blocks: 156.229.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83593 (0x14689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 09:33:00 2025 GMT
Not After : Apr 24 09:33:00 2025 GMT
Subject: CN=67d93dd0-f3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:ea:75:6f:75:99:0f:1f:b4:64:97:39:1a:
b4:b6:df:c8:38:a6:05:cc:1e:d8:83:e2:5a:9c:62:
7a:a5:fd:cd:5a:bb:a5:0a:3a:91:8f:85:57:ec:82:
da:86:db:04:6f:fd:fc:41:12:d0:d3:1a:40:94:c9:
83:78:a1:fa:cd:ba:19:01:32:ec:8a:84:77:cf:7f:
0d:12:4a:de:24:ec:63:b6:08:ec:1d:6c:fd:e7:f3:
40:40:39:ce:c1:c4:c8:1e:94:2c:b8:7a:e4:c8:c2:
cf:3b:83:fc:a0:cc:ff:36:dd:aa:b9:f4:2a:69:15:
d1:34:2a:c4:d1:76:64:54:32:70:33:dc:7f:6e:87:
e2:9b:bf:7e:66:ac:c5:91:72:7c:d8:e4:0d:66:18:
b7:f3:32:d1:9e:a1:1a:ff:55:6a:ba:e7:77:2c:85:
44:2c:e1:5d:52:2c:23:05:c0:d5:0d:42:24:22:0a:
34:6c:36:91:b8:b1:2d:fb:9c:fc:2e:b4:c1:61:45:
52:01:26:00:ce:65:e0:9f:e9:00:f8:16:1a:f9:f5:
7a:10:1f:0a:d8:a4:f6:08:2f:9c:ee:0a:63:58:dd:
f5:3b:91:5f:f5:fa:55:17:c0:ee:0e:39:7e:6c:d4:
46:c7:63:b1:3e:de:a0:18:ef:73:c3:12:9c:c0:03:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:82:F7:0A:91:6C:CD:8A:27:0C:DB:9E:6A:F6:54:6D:70:B3:99:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDBC65DC03DB11F09540B8BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:26:ff:ed:a7:d1:7f:b9:57:c0:54:34:2c:ca:ad:ee:3b:40:
d9:42:26:22:cb:82:5d:5e:a3:18:f8:e9:2a:2f:ca:2e:b1:5c:
d2:85:d7:00:91:8a:03:67:ad:0f:92:eb:17:98:ce:fa:a8:9e:
b2:b1:50:8a:47:5d:73:83:de:b0:51:d9:44:1d:a6:cd:ac:84:
b3:22:d8:a8:5d:8a:a5:29:96:21:36:78:33:28:a3:65:c2:a3:
a5:b7:dd:18:2d:bf:99:ac:95:9f:44:9f:bd:74:19:5b:ce:df:
fa:91:3a:63:5c:c6:cc:9d:b0:31:3d:45:b8:c8:03:45:ea:7e:
51:f9:96:59:bb:a8:2c:d5:20:1b:43:b6:b0:e9:f3:c6:e7:e2:
82:6b:22:f0:6f:64:ab:11:23:fb:94:a9:b7:0b:90:3e:47:de:
3b:fa:69:ef:a5:11:a6:99:96:3b:4f:11:59:1e:49:b0:7a:b6:
69:51:de:93:39:1f:cc:49:14:72:ba:61:32:c6:d9:74:0c:d6:
1a:87:6f:75:57:64:c7:38:22:a5:56:04:ee:4b:4c:25:06:73:
c0:23:11:47:91:b8:9b:41:e1:fb:19:41:38:3f:f8:9a:20:3b:
5b:9b:e0:3a:0f:67:ea:d6:21:a4:b8:ab:52:b7:86:6e:30:ff:
fb:95:e5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:38 2025 by rpki-client