Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0288C324F47011EFB64A2796762E951A.roa
File: 0288C324F47011EFB64A2796762E951A.roa (raw, json)
Hash identifier: 5N6WZx5bqYtCS0u4wqhRix0k6N94qqTlT76ts/yM+SQ=
Subject key identifier: 7B:53:34:9D:E6:33:41:C6:F2:EE:BF:F7:B8:C5:ED:F8:E9:2E:2A:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01366E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0288C324F47011EFB64A2796762E951A.roa
Signing time: Wed 26 Feb 2025 18:32:19 +0000
ROA not before: Wed 26 Feb 2025 18:32:15 +0000
ROA not after: Sat 19 Feb 2028 18:32:15 +0000
asID: 17561
IP address blocks: 156.233.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79470 (0x1366e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:32:15 2025 GMT
Not After : Feb 19 18:32:15 2028 GMT
Subject: CN=67bf5e33-2216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:5b:18:d9:da:fb:74:f8:a4:0c:98:01:1d:
1e:22:ca:0e:0b:e5:ab:95:98:ce:8f:5b:db:cc:b7:
6b:22:b1:4c:e6:92:c8:65:7c:ac:14:10:27:a2:a7:
05:3b:01:df:0a:d0:b1:aa:9b:d2:48:02:76:2d:44:
4a:c1:29:d4:46:36:ad:0d:f0:f3:84:e5:1e:95:c8:
34:81:d6:01:96:6d:dd:8f:37:92:1b:d0:83:ab:cd:
77:ab:f9:67:ac:c6:82:74:31:0f:fc:91:df:80:51:
c4:ef:ee:06:a4:3a:ec:46:b6:09:3a:b0:72:12:21:
43:0a:e9:e2:cd:16:a4:bb:b1:29:8b:27:7d:ad:fb:
40:ec:06:d6:44:bf:42:a7:7a:e1:15:95:b3:b6:7f:
ca:b2:af:18:6c:2b:82:90:c4:84:60:b1:d8:6d:62:
a0:bd:3a:26:8f:db:9e:03:b1:e5:d0:4d:eb:46:fe:
d9:2a:e4:90:50:77:29:b1:92:c2:75:78:c5:56:8c:
c3:25:ef:50:c9:5b:53:3e:a8:93:31:15:25:bd:39:
41:fc:a1:75:e4:0b:cc:83:b0:fc:a8:2d:65:4a:ef:
eb:bf:50:60:96:64:42:d4:8e:19:7b:eb:2f:43:04:
7f:60:21:cc:04:55:b2:97:23:3b:08:53:2d:6e:32:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:53:34:9D:E6:33:41:C6:F2:EE:BF:F7:B8:C5:ED:F8:E9:2E:2A:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0288C324F47011EFB64A2796762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.219.0/24
Signature Algorithm: sha256WithRSAEncryption
15:88:71:3e:03:f8:4b:af:3f:72:46:77:63:00:ab:01:e0:c1:
f7:54:ad:75:5b:99:be:dc:c3:ac:3f:0e:01:8e:32:8d:b1:7a:
bd:30:33:e8:d0:c6:85:f0:1a:4c:33:c7:53:10:d5:53:23:65:
c0:02:81:d4:7a:50:8f:ca:b2:1e:cf:b4:b0:0b:29:fb:47:d1:
af:9a:56:df:49:91:06:d8:60:49:eb:fa:b4:50:50:36:cb:ba:
0a:56:6c:a6:8d:45:55:57:be:4d:05:a7:5a:91:75:ee:29:19:
2c:63:d9:4e:77:eb:90:28:4a:ae:a3:77:fb:c4:a5:4c:b7:d0:
ce:06:86:cb:db:d4:60:89:9e:3e:e2:06:80:94:6c:46:d8:93:
1c:05:36:be:dc:dd:9b:60:3b:26:03:f5:e4:b4:f6:2f:f6:89:
b7:ef:9f:1c:25:9c:f3:cc:c8:8c:b0:ce:57:fb:41:3a:1a:9a:
fc:37:0d:1c:74:fc:85:d0:0a:a5:fd:ef:d7:b0:15:fd:da:f9:
d1:8e:d7:33:51:5a:18:12:3e:23:fb:f8:0c:41:fd:a2:8d:55:
e0:db:97:78:1e:91:df:d7:82:c0:07:a8:b4:d0:86:b7:81:da:
67:39:8d:bd:5e:fc:36:58:d1:2a:6e:d2:43:5f:f3:f5:24:e5:
06:db:fc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:28 2025 by rpki-client