Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06CC259EE9ED11EF8C7F3C95762E951A.roa
File: 06CC259EE9ED11EF8C7F3C95762E951A.roa (raw, json)
Hash identifier: Hy8lRR6rOH1BrpvRaOsXpeuLbtMhyC0JwF32LmlmYUk=
Subject key identifier: 90:31:19:39:8B:85:A6:50:42:BD:D0:9D:E3:FC:37:CA:A4:EC:B3:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012216
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06CC259EE9ED11EF8C7F3C95762E951A.roa
Signing time: Thu 13 Feb 2025 09:29:30 +0000
ROA not before: Thu 13 Feb 2025 09:29:26 +0000
ROA not after: Sun 11 May 2025 09:29:26 +0000
asID: 140403
IP address blocks: 156.240.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74262 (0x12216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 09:29:26 2025 GMT
Not After : May 11 09:29:26 2025 GMT
Subject: CN=67adbb7a-5ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:4e:c8:56:8f:8f:93:82:1f:f4:1f:8e:64:
bf:8a:65:32:b4:58:42:51:d2:a4:53:cc:23:e5:c3:
fd:58:ee:fa:90:b0:c8:66:0f:98:c1:e2:3c:4a:68:
ac:fd:86:85:10:81:c0:1b:0e:94:b6:64:16:9e:25:
85:d6:70:ea:25:b3:57:7f:82:ee:e5:79:78:8e:f5:
c0:4d:eb:ed:c9:c0:c8:15:ab:3f:7b:23:2f:e4:e1:
96:02:ae:39:02:f1:c1:a5:e2:90:10:2a:f4:83:b8:
d5:3b:bc:aa:bf:4e:54:9f:3b:ee:5d:df:e8:39:a2:
40:9d:a2:be:d8:a5:dc:94:fe:3d:b3:36:b8:b9:a8:
7e:65:c5:93:2b:d3:d0:c7:28:18:2e:4c:5c:7d:ef:
f5:62:be:6d:22:ab:ee:bd:86:7d:e7:af:c1:67:4e:
5e:ba:c4:d0:9c:63:1d:be:6d:ea:f7:fe:1e:0f:23:
5b:31:07:e9:e1:37:6a:d0:39:8d:eb:6c:8a:f7:53:
e1:8f:70:ed:2a:0c:37:91:1b:a4:13:3c:cb:f0:fd:
7c:5c:8b:1e:c0:e3:4d:89:57:a6:32:7a:c7:f6:19:
b8:b7:97:d3:c7:62:0b:ba:82:23:ea:05:a2:57:7d:
40:56:9d:be:b2:fc:66:a7:17:b5:bb:a4:af:53:eb:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:19:39:8B:85:A6:50:42:BD:D0:9D:E3:FC:37:CA:A4:EC:B3:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06CC259EE9ED11EF8C7F3C95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.62.0/24
Signature Algorithm: sha256WithRSAEncryption
02:24:1e:6a:23:37:e0:4d:00:85:16:a2:d8:af:13:69:7d:d6:
93:93:3d:1f:67:a0:c0:ba:d8:17:9e:b3:38:82:a1:2d:b6:f9:
31:2d:be:a7:b7:2f:c5:90:a7:69:1a:6c:07:e0:a9:c6:67:5b:
9c:0d:3c:2f:ee:45:6c:73:37:e3:22:9f:bb:47:af:41:76:b3:
1a:6d:80:be:2d:0b:64:fd:c6:49:d9:a9:4a:1c:c5:c2:96:b8:
dd:49:cf:5a:27:73:0b:64:dc:2c:48:07:33:88:c0:8b:73:fa:
5f:97:d0:0a:33:6c:a7:f1:29:05:34:68:d3:37:f0:98:5e:9c:
be:4d:d1:bc:6f:43:c3:db:97:0e:4c:84:ad:24:48:f3:88:49:
d4:99:83:51:5a:2b:d7:13:8f:34:57:4b:ed:14:50:74:ce:2f:
94:df:67:65:6b:45:7f:e2:8f:12:12:fe:82:30:43:68:2c:81:
4a:ce:63:c7:8b:aa:cb:de:8d:f4:c2:db:4b:0a:46:a9:5b:7c:
84:e4:24:a1:ad:82:25:06:1e:8e:68:30:0c:a2:8f:88:52:99:
79:a4:f5:ff:27:a4:e0:cc:df:d6:77:31:57:37:67:bf:86:01:
c4:9e:d8:dd:cc:a0:c7:d8:d9:7a:40:48:8c:89:28:ec:b8:22:
25:a6:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:06 2025 by rpki-client