Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/215ECB6ACD2C11EFB04E4FBE762E951A.roa
File: 215ECB6ACD2C11EFB04E4FBE762E951A.roa (raw, json)
Hash identifier: CblL36Oge/QVvItRAxId1zmrldg8FFJT1k3vshJKmAQ=
Subject key identifier: 1E:6D:B5:D4:25:D1:B4:0B:08:4F:84:47:DA:80:EC:72:B3:03:C7:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/215ECB6ACD2C11EFB04E4FBE762E951A.roa
Signing time: Tue 07 Jan 2025 19:18:09 +0000
ROA not before: Tue 07 Jan 2025 19:18:05 +0000
ROA not after: Sat 13 Dec 2025 19:18:05 +0000
asID: 984
IP address blocks: 156.241.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64971 (0xfdcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 19:18:05 2025 GMT
Not After : Dec 13 19:18:05 2025 GMT
Subject: CN=677d7df1-ad8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:15:bb:fb:8b:5b:47:1a:6a:fd:57:eb:bb:
09:53:68:08:af:de:95:55:f6:ad:7a:8a:de:a9:26:
1d:ba:f2:56:19:fa:56:21:f3:56:76:66:cb:99:c0:
d5:c0:9f:d6:fd:cf:18:72:41:35:b0:1c:a4:c2:45:
a4:22:4a:67:35:cf:f3:0b:92:c2:a5:96:32:36:74:
15:a9:26:44:97:5b:0a:be:b4:50:51:15:07:ce:6f:
21:09:fd:65:16:b9:59:b6:72:2f:06:cc:d0:8d:04:
ef:5c:89:b5:35:fd:4d:50:45:ba:ca:8c:fe:69:4d:
3a:f7:aa:ed:dd:b9:3c:56:0e:25:9e:39:7b:0a:39:
61:da:f7:0b:fd:ac:0f:a4:c4:78:2f:20:a1:0c:22:
e9:54:94:dd:e5:2e:9a:2c:89:6e:ce:f3:ae:47:57:
7f:2e:ea:8b:6a:ad:dc:76:bc:f8:8d:d7:c9:f9:46:
7d:19:a5:c5:6b:95:1c:46:6d:76:42:da:76:68:7d:
aa:ac:c2:7a:d2:37:44:fa:02:da:11:bf:d2:9d:5b:
ac:43:4e:91:e7:a8:7f:a0:56:b9:98:33:d7:d0:04:
90:36:4a:76:b3:72:fd:28:c7:12:1a:2f:a5:f8:a7:
3a:7f:9a:d3:a5:a6:51:26:7a:1f:dd:30:bd:8d:3e:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6D:B5:D4:25:D1:B4:0B:08:4F:84:47:DA:80:EC:72:B3:03:C7:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/215ECB6ACD2C11EFB04E4FBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:67:88:a8:44:25:bc:64:57:89:f0:3c:d9:f6:b8:b8:e2:c7:
b7:94:c9:32:c0:06:f3:c8:dc:ad:4b:6d:c8:14:52:a7:1d:04:
37:3e:c5:12:ee:58:62:d2:1d:79:7d:01:8c:61:42:ff:3c:0e:
7a:d5:ae:44:6d:17:02:7c:5f:7c:2c:b8:52:96:a7:1c:ec:5c:
c8:ea:06:63:ca:b1:40:1a:44:d6:6d:30:f5:a3:58:e8:51:bf:
86:0a:94:c9:62:e4:34:89:41:e0:9a:fb:2f:cf:88:57:bd:2f:
1c:ce:fa:6c:a0:cc:6f:fe:0d:fe:fa:38:d7:b6:9a:f7:79:9f:
41:1f:8c:31:b3:2f:d9:7a:13:ee:8a:e3:48:e0:8d:8f:bd:48:
53:79:e8:8d:12:44:65:a7:d0:96:6b:22:f6:d4:79:9d:66:ab:
d5:80:38:67:f3:31:cf:ba:a3:36:1a:3b:27:8f:24:0b:4e:8f:
ab:11:c7:e0:39:93:1e:8d:a9:ce:c5:d3:12:b4:78:04:45:e0:
ac:13:e8:80:2b:cd:43:9e:78:d4:39:4b:23:44:f1:80:3d:2f:
23:3f:32:38:06:bc:c2:da:c2:78:0e:25:ba:8a:9a:39:84:bf:
1d:8e:d1:db:85:9d:57:88:88:2b:c1:cd:14:d2:25:fa:af:1a:
b0:1b:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:13:56 2025 by rpki-client