Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BE06E74DA5B11EF975ED6A0762E951A.roa
File: 5BE06E74DA5B11EF975ED6A0762E951A.roa (raw, json)
Hash identifier: hWWDvirBnmbTpeOhkK0QTXJpU146LXEHEG93AsaFFu4=
Subject key identifier: 32:03:26:82:46:FE:C2:54:4B:6F:56:A3:A0:2A:29:54:0C:B1:EC:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BE06E74DA5B11EF975ED6A0762E951A.roa
Signing time: Fri 24 Jan 2025 13:58:59 +0000
ROA not before: Fri 24 Jan 2025 13:58:55 +0000
ROA not after: Thu 06 Mar 2025 13:58:55 +0000
asID: 21859
IP address blocks: 156.225.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69490 (0x10f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 13:58:55 2025 GMT
Not After : Mar 6 13:58:55 2025 GMT
Subject: CN=67939ca3-e3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:98:dc:a5:e4:27:d5:2f:37:b6:75:e4:78:
74:50:09:b6:bb:66:a4:aa:fd:b2:88:4e:34:e0:6b:
0a:40:a3:7f:71:b1:93:ca:92:b8:96:c8:2f:da:bd:
db:62:63:21:76:f5:1b:90:01:be:d5:1b:79:f2:88:
cf:0e:70:1a:df:84:17:0d:df:ea:cb:fc:71:ef:61:
7c:ea:9c:a4:7d:1d:1f:8b:e9:56:26:26:89:71:0d:
aa:3b:c4:b7:02:bb:44:f5:ca:34:98:99:85:d8:ba:
da:5e:ce:c1:80:10:9c:ce:b7:af:89:52:ef:8a:67:
5e:d7:8b:52:bb:eb:a6:0b:3c:69:32:d2:f1:e7:c9:
66:d6:2b:ac:27:36:ff:c7:9c:ef:2f:8d:6c:8f:3c:
77:72:ec:79:c2:8d:28:68:ef:25:ae:7f:05:f0:3c:
68:35:fe:48:58:eb:3e:ef:40:4c:1f:38:b9:a8:41:
80:1a:57:55:b6:ed:4c:8d:36:23:92:73:85:55:c5:
d1:c8:04:69:e7:43:6d:3b:80:aa:87:a0:eb:99:f0:
31:84:fb:c9:e6:57:1d:cf:0f:54:6a:09:1f:10:7c:
3d:98:d2:20:1d:98:bd:27:2f:3f:3b:7f:43:d0:4c:
9f:76:55:b2:08:09:0c:26:3a:14:50:b7:b7:b7:68:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:03:26:82:46:FE:C2:54:4B:6F:56:A3:A0:2A:29:54:0C:B1:EC:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BE06E74DA5B11EF975ED6A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/24
Signature Algorithm: sha256WithRSAEncryption
69:46:c5:42:97:84:be:53:12:7c:66:f4:a5:dd:5a:60:06:84:
d4:d6:01:92:6c:7f:ff:ca:13:72:e4:77:11:81:01:91:6c:bb:
0d:20:b1:ce:18:18:72:af:49:04:ce:09:2f:de:b0:b3:46:03:
e3:da:9b:be:23:e4:0f:a2:53:a6:b1:fd:97:f6:0d:c4:ad:02:
18:e3:8b:16:ef:17:04:c1:5a:f7:80:d4:fd:2d:cc:26:96:7c:
42:90:64:cf:ea:1f:d7:b2:27:39:18:0f:f1:74:f8:60:a9:1a:
e1:32:97:b6:fc:58:71:ce:2e:5e:93:44:9e:3e:2f:d3:3b:23:
23:6b:ab:9f:9d:c0:67:a3:f6:a7:9a:a2:6b:0f:8b:5d:61:da:
4d:2d:43:35:f6:b2:b3:08:6c:ae:40:c2:1c:3a:fa:5f:89:f8:
b1:90:d6:c1:32:19:11:ce:59:0a:48:26:33:df:58:56:8e:1b:
0f:4c:7d:77:fd:f1:17:fc:1c:a5:87:34:10:10:ca:e6:c5:82:
f7:fe:94:f5:93:8b:ae:73:87:bc:6f:2b:2f:84:a2:ff:ca:8d:
4d:86:52:54:b1:29:4e:da:c1:f4:e5:d7:da:ed:9a:f4:ee:df:
a5:e1:2a:f2:a0:fe:59:f0:40:98:2b:c5:21:51:51:0d:ff:37:
11:29:b0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:55:43 2025 by rpki-client