Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB28E1E4D3D811EF8AFDCAAB762E951A.roa
File: EB28E1E4D3D811EF8AFDCAAB762E951A.roa (raw, json)
Hash identifier: IoRqHWHxQq6USC0cpk2C9mvDue9k7KtMdspoJVXLT3U=
Subject key identifier: 9E:47:43:DC:ED:58:D3:60:C9:02:74:95:FB:05:6B:F6:21:21:99:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB28E1E4D3D811EF8AFDCAAB762E951A.roa
Signing time: Thu 16 Jan 2025 07:10:08 +0000
ROA not before: Thu 16 Jan 2025 07:10:05 +0000
ROA not after: Thu 20 Feb 2025 07:10:05 +0000
asID: 137899
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67770 (0x108ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 07:10:05 2025 GMT
Not After : Feb 20 07:10:05 2025 GMT
Subject: CN=6788b0d0-d31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:27:19:58:11:94:7c:b6:ed:44:cc:c8:91:
7e:99:68:6b:67:da:14:02:2c:20:6b:80:a7:9d:e5:
98:90:d3:da:be:21:aa:d9:1e:d2:e6:c4:9d:03:33:
e9:12:aa:e5:19:5b:c5:4d:31:7a:58:19:b3:08:7c:
70:c0:ae:28:d9:36:43:32:74:c1:96:5c:62:a3:81:
5a:a6:e0:ea:39:4c:ec:8c:24:c5:72:14:1a:7c:00:
b2:56:c4:54:f2:98:36:6e:f0:bd:66:85:4c:c5:f3:
fd:87:0b:10:8d:cf:78:9a:d8:56:a0:73:cb:0f:22:
19:ab:bf:68:c1:0b:c1:61:b6:82:fb:16:bb:18:12:
63:4c:64:fb:b8:ea:3a:f8:68:94:99:69:4e:01:07:
9a:81:4d:ee:11:e1:bd:1c:06:a8:f4:8f:39:e5:2b:
a8:5c:fd:18:72:04:99:20:31:de:11:0d:bd:2a:6d:
ff:b1:af:33:c4:ce:ed:1a:fe:27:8b:1f:a0:aa:fa:
b1:95:4c:5c:d3:3f:45:05:63:22:e3:89:d8:fe:8c:
9e:cf:61:8a:db:d9:f3:88:4c:33:7e:ec:17:a6:58:
41:d8:4d:c8:af:12:0b:66:b3:5f:79:62:cb:6f:0a:
e3:79:a6:3a:c3:e9:55:c8:08:a3:79:99:02:0f:be:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:43:DC:ED:58:D3:60:C9:02:74:95:FB:05:6B:F6:21:21:99:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB28E1E4D3D811EF8AFDCAAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:8e:a1:41:7f:63:a0:2e:4c:c4:81:23:d5:2a:41:3d:92:31:
53:6d:53:8b:13:78:f4:4e:1f:7d:4a:e9:09:bf:fd:f0:fe:76:
e2:37:a1:1d:79:a7:6e:ed:2d:f0:88:ae:6b:28:53:a4:63:9a:
75:89:6f:e3:aa:e6:27:47:ec:65:37:55:74:8e:81:ec:0a:b5:
bb:0e:68:01:7f:1e:2d:5e:e4:fc:b6:12:11:ab:ec:aa:bb:5d:
4b:2b:63:9a:c2:ad:77:68:d8:0e:68:6c:23:b9:52:cb:57:c0:
25:0b:81:13:d2:32:d4:aa:7c:b9:18:17:cf:b1:b6:f0:f4:1c:
d3:09:0a:c1:69:99:04:93:dc:0a:bf:5e:3b:6c:24:1e:84:94:
11:e5:73:c2:40:15:67:c6:71:de:44:ae:3c:f6:88:2a:78:95:
95:72:b7:70:8e:30:d2:7b:60:cc:e2:a6:cf:06:2d:60:1c:3d:
4d:5f:ea:39:8d:52:9b:c4:c2:13:83:11:12:6f:75:04:bf:4b:
c5:c0:82:ff:d0:90:97:dc:31:92:4f:b9:70:bb:50:d2:32:71:
2e:c3:f5:a1:e3:02:8a:3c:1c:9f:e5:2e:83:e4:40:39:52:e9:
89:17:a5:da:6e:08:61:68:89:2c:58:15:2b:e1:98:f1:5d:ff:
a3:79:25:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:41:32 2025 by rpki-client