Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/015D16BEF2D411EFAF3BF18A762E951A.roa
File: 015D16BEF2D411EFAF3BF18A762E951A.roa (raw, json)
Hash identifier: w5SR9kh2fAR+4QKn7g4I8aDYlGwg6bVd+sOiuMeBt14=
Subject key identifier: 8E:14:AB:84:DF:C7:75:AC:E5:C6:05:70:1F:84:54:DF:BD:11:87:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012CDB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/015D16BEF2D411EFAF3BF18A762E951A.roa
Signing time: Mon 24 Feb 2025 17:23:04 +0000
ROA not before: Mon 24 Feb 2025 17:23:00 +0000
ROA not after: Sat 29 Mar 2025 17:23:00 +0000
asID: 203020
IP address blocks: 156.235.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77019 (0x12cdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 17:23:00 2025 GMT
Not After : Mar 29 17:23:00 2025 GMT
Subject: CN=67bcaaf8-865c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:03:73:0e:0a:48:38:17:12:9d:cf:3d:f3:
1c:ee:4f:f3:42:5e:9e:42:50:97:09:41:09:c1:d5:
5a:53:a3:e8:ca:f4:b8:4c:05:30:52:35:2d:33:10:
f0:b6:ad:50:8e:ff:6f:d2:29:64:b8:1a:56:d5:5b:
69:53:08:1d:c7:12:c4:70:94:89:22:ec:b5:25:e7:
64:be:2e:46:ae:e3:b1:57:40:a4:59:09:84:03:c4:
72:99:13:fc:08:22:bb:38:13:95:e9:af:69:27:02:
81:f5:5f:17:39:ec:a4:89:44:b5:b9:2f:1e:b5:07:
fb:d8:6c:38:35:0f:98:72:4e:a6:79:00:79:6d:5c:
82:64:b0:0c:15:e0:df:5b:16:ab:cf:1e:c0:2a:2a:
7b:db:bb:67:ff:2b:32:c9:b5:16:8a:16:01:26:b6:
67:ba:c0:1f:7b:5f:19:75:c1:f9:ba:ab:0a:d8:84:
ed:a6:13:c7:a2:a1:ed:14:bf:aa:d1:e1:47:60:7f:
e9:be:78:75:ad:64:fc:35:49:8e:e3:0b:48:e0:68:
9b:5c:e2:6f:c2:7d:2e:89:dc:72:92:d9:f0:14:bc:
b6:4e:d2:fe:8b:26:25:46:8c:1f:e9:aa:48:cf:1b:
1e:59:38:7c:bf:dc:bd:f6:2e:27:e3:29:2c:02:b7:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:14:AB:84:DF:C7:75:AC:E5:C6:05:70:1F:84:54:DF:BD:11:87:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/015D16BEF2D411EFAF3BF18A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.32.0/20
Signature Algorithm: sha256WithRSAEncryption
74:89:d4:15:0a:d1:24:37:bd:04:22:5a:82:e9:9d:59:61:d2:
44:69:70:c1:50:f3:ad:5e:33:b1:98:c9:e3:8c:9b:e5:84:38:
8f:49:2d:b3:a5:71:73:69:26:19:2d:65:68:54:b3:04:e7:0a:
21:cb:46:79:04:ec:df:4c:73:4d:47:70:00:15:24:d0:21:1f:
d6:3f:5a:1d:69:98:54:b4:9c:a9:dc:1f:1b:8a:70:42:ca:21:
b1:e9:06:39:4d:f3:a7:5b:2e:54:97:a8:02:b7:e9:c0:a0:a5:
c1:97:10:98:d1:ee:47:d8:62:56:86:75:87:85:2d:51:a1:e0:
1f:6d:73:3a:81:45:a0:95:a5:53:90:41:c6:f2:06:9a:a4:d0:
04:d5:d7:b1:b9:9c:82:bf:13:8d:91:07:00:de:82:bf:6d:a3:
b5:58:99:7d:80:cc:2f:e9:a3:09:22:53:bd:e8:47:1d:5e:36:
f7:08:72:fd:44:2f:2f:ab:dd:56:20:45:42:fe:46:f7:9f:44:
95:f3:43:de:86:2f:95:ec:98:fe:b0:ed:bf:e4:9a:c5:14:d9:
4d:b9:33:b5:ca:0d:a2:ed:ec:14:d0:73:9d:00:33:d9:60:6e:
dc:8f:a7:52:8f:a4:27:a6:48:17:1e:7c:1f:80:6e:df:af:07:
1d:da:09:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:09:23 2025 by rpki-client