Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE45CC5AF5DA11EF9DCF015A762E951A.roa
File: FE45CC5AF5DA11EF9DCF015A762E951A.roa (raw, json)
Hash identifier: fUVH1MJez5MqQ/r6jDbrtUOsmK0FRtqKerOU162Bzwo=
Subject key identifier: BA:D5:F1:61:A4:6F:9F:C2:87:F0:A1:2C:78:F7:35:0B:C3:9C:7D:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE45CC5AF5DA11EF9DCF015A762E951A.roa
Signing time: Fri 28 Feb 2025 13:50:39 +0000
ROA not before: Fri 28 Feb 2025 13:50:35 +0000
ROA not after: Sun 13 Apr 2025 13:50:35 +0000
asID: 138915
IP address blocks: 156.244.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81414 (0x13e06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:50:35 2025 GMT
Not After : Apr 13 13:50:35 2025 GMT
Subject: CN=67c1bf2f-a0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:a2:5d:6d:e7:e8:17:71:6e:ef:fe:c5:a0:
dc:a4:3a:9a:50:d4:be:48:62:ac:08:89:dd:22:d8:
d6:90:4a:c3:3e:eb:d9:e8:d6:4e:94:98:2d:0c:29:
37:63:f3:8f:87:a5:67:5f:b4:60:34:92:98:a0:fd:
92:0c:a4:43:10:55:ac:cb:5a:da:cc:c8:17:3a:57:
ce:96:b8:d3:5d:45:a4:6e:e4:ec:f4:ca:9e:49:56:
64:c9:c4:b9:bb:e0:4a:26:dc:6b:6c:e3:40:16:b5:
ad:30:ac:a1:7a:4c:21:78:c0:f1:81:5b:ec:fe:e5:
7e:53:91:ab:f2:3b:f6:48:96:7b:03:d3:c0:d0:61:
e8:c1:0c:b9:71:2d:d9:92:ca:71:af:2f:45:c4:0b:
8d:ee:e9:2a:6f:6f:09:c4:e2:a4:cc:f5:17:ba:e5:
ed:4b:d8:34:aa:9d:bf:0c:ee:a1:69:3f:70:d6:fe:
38:f1:57:c6:f0:47:b4:36:a3:b1:6d:d2:28:1d:54:
b0:9d:75:bb:89:e0:eb:bc:a8:dd:24:e9:c0:1d:9e:
7e:8c:4d:31:0e:a9:a9:e7:11:59:ee:a6:ff:86:f6:
6b:47:b0:d2:3c:68:7e:eb:eb:f4:f6:41:e2:68:05:
0b:1c:3a:4c:8e:fd:a2:78:ab:1e:b5:3f:e0:eb:57:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:F1:61:A4:6F:9F:C2:87:F0:A1:2C:78:F7:35:0B:C3:9C:7D:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE45CC5AF5DA11EF9DCF015A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:00:cb:ad:34:d1:69:06:0b:3c:3b:25:5e:fc:9e:91:34:29:
56:ce:9d:8c:62:c5:a7:d9:30:bb:8c:50:a5:17:3a:7f:4b:8e:
08:5e:40:e7:dc:db:d6:3d:d2:51:4c:45:4b:ca:48:e5:40:67:
ce:b0:da:01:52:73:bd:40:9c:34:9c:89:e9:65:ae:73:27:70:
03:ce:95:09:12:d2:19:38:2e:84:af:54:81:08:c9:94:42:55:
b3:52:73:09:b7:0a:a5:d7:fd:b8:d2:41:5c:ee:a0:27:10:a0:
6f:76:f1:53:b2:4b:41:5e:c2:8a:9a:0f:c0:b6:99:1b:4d:95:
07:03:6d:1d:dd:b1:a9:2c:5d:30:73:b8:de:70:df:eb:39:ea:
3f:af:87:71:a7:0a:38:01:e2:62:58:16:5b:9f:0c:09:25:55:
40:49:9b:31:1f:f0:00:50:18:4e:09:09:8f:de:31:ce:98:84:
59:de:de:c1:3f:f8:65:7e:ff:55:20:65:e1:cd:47:c2:65:02:
3b:21:c5:4e:9e:32:c2:a2:45:04:47:49:f5:7d:47:e1:84:43:
bc:37:77:b1:7d:e8:6e:94:ed:9d:ad:cf:a5:6c:fb:c1:bb:a2:
03:4e:13:3d:db:06:55:1a:f4:ac:dc:65:ce:0f:9d:99:31:44:
42:51:ee:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:21 2025 by rpki-client