Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3B3DBF4D3D911EF8F1115B0762E951A.roa
File: C3B3DBF4D3D911EF8F1115B0762E951A.roa (raw, json)
Hash identifier: XE1cuFO5gyagILQhhz6ijLU6jMsEAh359sgcxVSJNt4=
Subject key identifier: CF:4E:44:D8:B4:41:E9:C0:1D:60:29:DE:02:93:40:DE:A0:4F:E1:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3B3DBF4D3D911EF8F1115B0762E951A.roa
Signing time: Thu 16 Jan 2025 07:16:12 +0000
ROA not before: Thu 16 Jan 2025 07:16:08 +0000
ROA not after: Thu 20 Feb 2025 07:16:08 +0000
asID: 142032
IP address blocks: 156.225.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67776 (0x108c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 07:16:08 2025 GMT
Not After : Feb 20 07:16:08 2025 GMT
Subject: CN=6788b23c-2708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:c7:66:8b:ae:65:ed:da:64:45:c8:49:52:
9c:c8:34:2e:7b:e3:7e:a1:d0:d5:27:b0:aa:33:11:
f7:87:6e:95:82:e7:a7:e1:28:c8:ea:dd:8d:ee:87:
29:72:e2:ee:ea:f1:f9:fb:c7:d4:a7:4d:1b:ba:13:
4d:f5:06:4b:70:23:97:8e:dc:69:4c:f5:ef:ea:4c:
a3:c3:c6:f9:5a:f9:8d:be:0c:11:d2:fd:be:1e:37:
86:98:e7:24:d4:f1:f3:99:97:e8:73:fe:1a:5e:ab:
01:99:05:3a:86:0d:07:2d:d8:3e:e7:11:aa:35:73:
f6:17:8b:88:2a:a5:15:f4:c2:22:f4:d4:0d:91:57:
ee:83:34:be:4c:98:57:fc:84:47:e8:f2:e8:11:77:
42:0b:7e:c9:f0:9a:94:e2:05:82:ab:a4:8d:91:b2:
c0:81:d4:30:e2:22:e8:0d:89:fc:7b:b8:7c:1e:c3:
d7:a2:2b:99:ee:ca:68:b2:28:48:24:88:52:2b:f0:
5f:be:78:9d:b0:7d:7b:a2:4c:4f:ae:e2:34:01:55:
76:c7:5d:e8:98:62:8b:09:89:03:e9:2a:d0:c4:93:
69:34:b0:9d:dd:73:b6:7f:4c:5b:e5:0b:a0:98:8e:
bf:4c:7d:61:ad:8b:9a:69:e5:f2:a7:66:0b:4d:7f:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4E:44:D8:B4:41:E9:C0:1D:60:29:DE:02:93:40:DE:A0:4F:E1:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3B3DBF4D3D911EF8F1115B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:10:d5:5e:08:5c:bb:39:7f:f1:f1:84:64:f6:14:e4:5f:f5:
6c:bf:00:e1:43:35:01:dd:45:78:d2:f9:64:80:72:30:61:2a:
b6:4b:d9:91:d2:f9:77:af:0a:11:e9:9f:9d:aa:1c:ff:ae:0f:
94:f7:47:43:39:32:b6:68:b7:44:e1:84:ef:40:96:46:17:b9:
ae:f7:7e:00:5e:15:d3:cd:a8:aa:2c:d1:99:81:86:68:54:ad:
47:e1:31:03:34:c2:f5:5d:6f:89:ad:b6:80:20:1c:23:bd:f7:
ed:79:7c:e3:65:3f:d7:21:59:92:1b:d6:f0:3d:95:b7:0e:0d:
a0:93:25:08:31:d8:24:84:74:07:ef:85:90:af:4b:24:58:41:
30:cc:dd:92:e6:cf:c3:20:6d:5f:ad:fc:59:04:cd:43:85:19:
67:ec:14:e5:40:04:03:54:e2:6d:4e:86:82:9c:b9:55:72:a6:
30:eb:c0:36:97:3c:3f:aa:e8:e5:55:ab:84:89:b8:f3:c1:e4:
8a:29:7f:b8:58:62:a9:9a:3e:d8:50:18:59:2d:31:e5:79:86:
5c:3c:74:99:78:df:2b:ea:58:a6:1c:b8:81:8b:e1:ae:f6:39:
3c:46:43:5f:92:b2:f5:a4:19:d2:39:17:0b:08:2a:e4:e1:59:
e4:5b:8d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:42:28 2025 by rpki-client