Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F953E41A070B11F0BF815448762E951A.roa
File: F953E41A070B11F0BF815448762E951A.roa (raw, json)
Hash identifier: 2rTb1y7mGgiqrqesF+QZC0F/wazBw+y22HssuYpec2U=
Subject key identifier: 99:B4:AF:3F:50:FA:7B:AD:4A:C4:09:9C:7C:28:21:CC:48:CE:B5:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014787
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F953E41A070B11F0BF815448762E951A.roa
Signing time: Sat 22 Mar 2025 10:54:06 +0000
ROA not before: Sat 22 Mar 2025 10:54:02 +0000
ROA not after: Sun 30 Mar 2025 10:54:02 +0000
asID: 142403
IP address blocks: 156.236.66.0/24 maxlen: 24
156.236.70.0/24 maxlen: 24
156.236.71.0/24 maxlen: 24
156.236.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83847 (0x14787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 22 10:54:02 2025 GMT
Not After : Mar 30 10:54:02 2025 GMT
Subject: CN=67de96ce-4d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:81:16:aa:19:f2:63:49:58:20:fe:dd:65:
22:d1:7d:8e:fd:f0:81:ee:02:85:0d:d6:67:36:98:
d6:b0:0e:d0:01:1a:91:83:5a:a5:d2:7b:c5:d8:e8:
c6:6c:f1:2a:dd:77:44:42:5e:da:c0:62:5d:a7:4a:
8d:dd:58:cc:38:4d:62:2f:63:1d:42:42:95:dd:7b:
c6:ae:69:2e:5e:9e:5b:af:d2:d2:65:1b:97:17:f0:
fb:17:4c:98:6e:db:bc:59:e3:5b:4b:fe:26:21:c6:
ef:26:07:c6:bb:55:7e:78:88:de:0c:dd:c8:45:7d:
61:42:0e:58:ee:c0:bd:e0:06:0b:86:fa:3d:5d:75:
e8:71:0d:5d:56:36:78:c7:fb:b2:99:69:55:d6:72:
4d:14:b3:f6:aa:9f:f8:18:9a:2f:d0:db:5e:c1:f3:
2c:55:10:c2:26:0a:3e:7c:68:5e:4c:19:df:94:ee:
70:ee:d4:ee:78:e6:e3:20:5c:ee:1e:e9:cb:22:32:
53:e5:a3:ce:a5:86:bb:00:3d:47:9f:15:92:d3:5c:
d5:ee:69:e2:18:31:2d:5a:f4:a7:9c:04:ec:f2:5d:
3a:dc:bf:07:f5:f1:60:f4:f0:69:8c:6d:c6:15:a7:
7a:3a:73:59:6e:ba:f0:b3:1a:3b:81:f4:ac:12:bc:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B4:AF:3F:50:FA:7B:AD:4A:C4:09:9C:7C:28:21:CC:48:CE:B5:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F953E41A070B11F0BF815448762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.66.0/24
156.236.70.0-156.236.72.255
Signature Algorithm: sha256WithRSAEncryption
06:82:59:15:9b:9f:45:0f:da:ac:2d:2b:92:92:4c:b7:6e:c1:
ce:e1:00:ef:5a:92:e9:ac:06:f8:36:1c:22:f8:a5:32:df:fc:
c6:62:08:95:aa:97:c8:91:27:3f:fd:0c:ca:19:5c:0f:de:df:
5b:1d:46:61:14:2e:ca:35:13:dc:2c:02:3c:61:88:dc:4c:f0:
3d:d5:70:e5:ec:5b:69:b9:01:82:7b:79:fb:70:d4:99:c2:52:
60:4e:a0:0d:33:2d:69:89:5f:19:4e:63:37:1d:1f:ea:de:51:
92:b3:27:54:47:c8:04:a9:97:33:84:10:da:91:ec:2b:04:96:
82:f3:77:a8:8c:86:b8:52:05:94:2a:63:7b:cb:cc:d2:7d:e8:
bb:0a:b1:b4:88:25:c0:3e:52:f2:33:da:a2:ff:d3:17:f1:47:
c9:7c:03:85:97:7c:4d:4f:ba:dc:3f:a5:b3:4f:92:30:5e:b9:
95:c2:db:44:1d:c9:00:b3:aa:29:5f:d6:6e:03:34:e2:3c:82:
1b:de:a8:1d:07:96:83:fb:4c:29:e5:1c:e1:fb:f7:ba:76:9c:
bc:5a:76:36:46:49:70:f9:96:1f:2d:eb:96:d9:f3:3b:6f:f9:
ee:bb:70:ef:cb:66:47:21:a6:bc:bb:40:34:2e:ac:91:c9:5c:
54:cf:b5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:51 2025 by rpki-client