Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/D4B109C4B0AF11EF94AB2EA4762E951A.roa
File: D4B109C4B0AF11EF94AB2EA4762E951A.roa (raw, json)
Hash identifier: Dru2mYr5BfjKlr8vM+NaW5CnYd2mn2FHYHVMnOlP6ow=
Subject key identifier: 3B:9E:72:70:4F:41:C6:35:48:8E:E8:62:FB:47:3F:76:B2:FF:30:5B
Certificate issuer: /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial: 082B
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Authority info access: rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/D4B109C4B0AF11EF94AB2EA4762E951A.roa
Signing time: Mon 02 Dec 2024 13:17:51 +0000
ROA not before: Mon 02 Dec 2024 13:17:47 +0000
ROA not after: Sun 31 Dec 2034 13:17:47 +0000
asID: 327908
IP address blocks: 168.253.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091 (0x82b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369FA36AR
Validity
Not Before: Dec 2 13:17:47 2024 GMT
Not After : Dec 31 13:17:47 2034 GMT
Subject: CN=674db37e-fd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:91:8b:4d:35:8d:18:01:d0:5d:b1:15:1d:b0:
17:27:da:22:07:22:25:5f:1e:f4:b8:6b:eb:72:6c:
42:70:be:d3:66:74:d9:e3:a9:d3:2a:47:aa:80:af:
36:44:e5:c5:17:bd:64:08:52:af:b5:81:ce:61:25:
28:29:30:21:77:53:74:0a:59:69:36:99:12:6c:73:
0c:ee:e1:70:8c:f3:ac:59:b7:46:b6:15:15:04:3c:
a9:3d:b2:75:b1:15:00:3c:9c:dc:9d:e5:00:03:ef:
04:72:21:a9:9a:45:1a:16:8e:dc:69:d1:25:9a:b2:
8c:6e:5f:b1:33:1c:6b:3e:aa:c2:01:3a:73:c9:98:
57:53:2c:b9:1e:66:3e:fe:50:d6:9c:9c:b7:65:f2:
12:5d:48:1e:d8:b8:62:72:c6:51:b5:a9:99:82:33:
f1:9c:dd:25:d1:bd:17:68:fc:17:11:69:d8:b3:49:
ec:64:72:f7:bb:22:09:cc:90:59:fa:37:86:4a:67:
20:b5:b5:c0:d6:b9:1a:85:c4:35:0b:6c:db:fd:8d:
d6:d9:ec:46:69:89:b2:ca:f6:d9:8e:82:5e:2b:5d:
5c:4f:50:4a:27:d1:1a:fd:0d:12:51:d3:a9:a5:0f:
7e:9a:20:89:2e:48:67:9e:4c:ca:bc:7c:e7:c0:4f:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9E:72:70:4F:41:C6:35:48:8E:E8:62:FB:47:3F:76:B2:FF:30:5B
X509v3 Authority Key Identifier:
keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/D4B109C4B0AF11EF94AB2EA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.253.120.0/21
Signature Algorithm: sha256WithRSAEncryption
66:b3:bc:d2:95:25:ec:2a:b9:72:7d:75:67:23:d7:b0:9e:10:
81:c1:a6:a9:16:9c:bb:37:9a:6f:3c:e7:26:af:6a:ee:a5:2f:
98:70:37:0d:f4:8f:8a:ef:e8:a8:17:ec:2f:27:8d:82:04:dd:
3e:2d:a4:0a:04:bc:6f:0f:1b:71:4f:12:16:e6:e5:4e:19:d8:
98:bc:38:3f:ec:1f:c2:6b:05:9a:49:ac:5d:8e:af:56:09:5c:
5a:2f:a5:c7:ab:63:e8:16:23:70:e7:45:01:82:6b:82:d0:e2:
8f:1d:34:37:3f:25:b0:a2:3e:3f:73:98:b4:77:91:6f:54:49:
81:7e:1e:ba:fc:a0:93:52:15:2f:92:bd:57:4a:27:f3:4d:e9:
a6:1e:8c:b5:e2:97:aa:0f:63:fb:f1:90:16:f6:20:c0:e6:23:
1e:1d:e3:ca:7b:2a:92:5a:60:49:2b:00:01:69:19:31:7f:18:
44:26:67:5b:ea:eb:57:a3:48:9d:13:8e:9b:5d:13:03:27:30:
20:33:cd:b1:98:01:a8:c4:ad:45:ec:cd:5b:6c:47:e5:8e:8f:
e1:40:2f:c0:5b:02:86:3d:5d:c0:ac:29:92:1c:07:13:b1:1d:
69:16:71:0b:ed:70:a4:8f:1e:72:b7:d7:78:15:99:23:b7:97:
73:d9:3f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:53 2025 by rpki-client