Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1119C8CCF46E11EFB88E5D88762E951A.roa
File: 1119C8CCF46E11EFB88E5D88762E951A.roa (raw, json)
Hash identifier: aXzd+TggGJO9RWluCSiG4OMb4XHJOFxmvWVDxJiYJlw=
Subject key identifier: B4:D4:21:03:93:6B:16:F5:AF:26:A0:8D:30:AC:C4:56:ED:28:83:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013645
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1119C8CCF46E11EFB88E5D88762E951A.roa
Signing time: Wed 26 Feb 2025 18:18:24 +0000
ROA not before: Wed 26 Feb 2025 18:18:21 +0000
ROA not after: Sat 19 Feb 2028 18:18:21 +0000
asID: 17561
IP address blocks: 156.233.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79429 (0x13645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:18:21 2025 GMT
Not After : Feb 19 18:18:21 2028 GMT
Subject: CN=67bf5af0-1c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:eb:8d:08:92:96:55:b1:85:36:f8:10:2b:
33:66:75:5c:d9:7a:09:d8:a5:f1:93:24:6e:1e:78:
39:c1:c9:7d:64:58:48:7f:48:54:fc:2e:4e:ef:da:
51:c1:db:ed:ad:6f:3a:b1:6a:d7:66:37:f1:e4:dd:
2f:d6:39:6a:7c:b9:8b:d5:01:f5:cf:c8:1b:ae:0b:
35:8d:2d:6d:09:be:30:29:ba:39:1c:a2:45:63:22:
c0:30:07:c4:b7:67:f9:c7:c2:a1:4e:a0:40:30:9b:
16:00:44:e9:cb:c9:6e:19:46:a2:96:96:a9:e1:53:
f5:2a:90:03:4a:3d:14:50:c7:87:87:d7:83:f7:d0:
08:53:1f:c9:69:e4:4d:d5:a2:65:49:2b:e7:46:8a:
b0:ed:5f:2d:8f:42:dd:25:b5:4a:58:49:21:4c:88:
65:b7:cd:c9:09:e1:9f:a6:c5:b0:0d:58:1d:f3:3e:
0d:a5:2d:1c:73:dd:58:c6:ac:9f:90:79:9f:d5:4f:
3e:0a:7c:e3:6a:cf:a5:1a:be:1e:d4:86:17:be:68:
77:80:33:d1:81:0f:81:59:62:1e:9b:16:79:1c:7e:
01:a7:05:09:03:16:ea:7c:e5:c1:e9:09:56:1a:13:
26:1c:6b:03:c9:01:87:c5:42:b3:f0:70:08:1c:36:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D4:21:03:93:6B:16:F5:AF:26:A0:8D:30:AC:C4:56:ED:28:83:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1119C8CCF46E11EFB88E5D88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.193.0/24
Signature Algorithm: sha256WithRSAEncryption
93:02:5a:d4:f0:93:f4:a8:ad:8e:1c:53:29:2f:c9:55:81:93:
d0:2a:b4:2b:ce:c1:e2:07:f6:45:74:36:f1:81:04:44:03:5c:
59:79:b1:74:1f:98:5e:b6:82:11:66:72:2e:8e:b8:a4:71:ad:
1d:dc:22:80:b3:d1:29:a9:f4:c7:1e:aa:68:7d:12:1c:3f:af:
73:34:a6:9f:d4:ba:3a:1d:75:c9:62:3f:08:98:c3:cf:1c:3b:
1f:04:18:30:3f:6c:c8:1e:55:64:a0:23:e7:50:c9:ec:be:a6:
02:e6:cf:8e:6e:93:45:20:d6:0c:33:bc:e6:55:ba:00:da:29:
30:ec:05:ae:6b:f8:b4:f7:f5:56:d6:50:1f:a9:0c:7d:e9:15:
a8:35:f7:87:21:b8:db:18:f9:7c:7b:ce:8d:6e:ff:f6:0b:d7:
35:f0:d9:6d:d7:d5:4a:6b:6d:78:43:a6:7a:92:74:a8:78:07:
2c:c9:be:c0:db:79:7e:86:4e:02:dd:ee:a9:47:d4:7a:e3:70:
2d:7e:f8:1f:06:48:d2:57:88:47:e4:d8:e7:e9:99:b3:e7:11:
88:de:fc:bf:28:33:4b:c3:84:fa:60:f1:d9:de:38:e1:02:57:
f8:95:fd:09:d1:df:b1:65:24:2a:52:49:61:c9:28:51:0d:ee:
9b:c4:c3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:39 2025 by rpki-client