Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15542098F46611EF81B9344F762E951A.roa
File: 15542098F46611EF81B9344F762E951A.roa (raw, json)
Hash identifier: w1QCAeIvp3vaNfXVQr2dUb1atSaKvKXrk9EM51yrV1k=
Subject key identifier: 87:EB:32:08:A2:5C:6A:C1:1C:1A:F6:5C:2F:1B:0B:83:42:65:7F:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013584
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15542098F46611EF81B9344F762E951A.roa
Signing time: Wed 26 Feb 2025 17:21:15 +0000
ROA not before: Wed 26 Feb 2025 17:21:12 +0000
ROA not after: Sat 19 Feb 2028 17:21:12 +0000
asID: 17561
IP address blocks: 156.233.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79236 (0x13584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:21:12 2025 GMT
Not After : Feb 19 17:21:12 2028 GMT
Subject: CN=67bf4d8b-572f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:06:46:04:50:3f:58:24:7a:52:7f:11:79:
1d:af:bf:b9:cc:18:07:35:65:86:71:67:7c:18:63:
40:3d:82:3a:cc:11:0a:ff:89:a0:17:49:3a:91:40:
1c:00:c4:9f:d7:57:34:55:cf:91:b1:d0:dc:56:d9:
6d:ec:7e:70:34:8a:1e:2b:dd:b4:6a:c8:20:55:31:
80:be:d7:18:34:98:e8:66:89:5d:a1:aa:1e:c8:fb:
10:4c:d9:33:fa:02:c5:89:44:b9:2d:2e:eb:dd:b2:
db:e2:f2:87:07:57:94:5c:cf:9c:6c:e6:68:58:65:
69:0b:11:7e:2f:f4:b6:ba:a9:5e:e9:32:3c:85:35:
29:ec:5d:ba:c6:a9:f6:b1:b5:f6:99:40:8a:3e:76:
01:e9:b3:9e:fc:dc:23:11:7b:5f:1f:ce:f1:05:1d:
78:28:ac:9c:17:0e:0b:79:30:2c:1f:2c:a4:28:38:
6f:25:44:a5:59:84:84:39:63:a8:d2:36:57:91:27:
42:34:7b:02:97:34:c2:4d:cd:08:86:e0:f1:63:7e:
23:c5:4c:ab:db:1f:88:9c:2a:cd:fa:32:da:fb:2d:
16:32:13:05:83:10:3a:33:2a:64:b9:d6:f3:ac:4f:
e8:b9:4c:a2:42:3b:4e:66:d1:d2:86:0f:bd:03:38:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EB:32:08:A2:5C:6A:C1:1C:1A:F6:5C:2F:1B:0B:83:42:65:7F:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15542098F46611EF81B9344F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.67.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ba:65:20:36:e2:6d:7d:f9:7a:de:2f:ec:0e:d0:76:85:a6:
cb:ac:34:c3:78:fb:4e:cd:3a:a2:8e:89:49:a4:b5:32:7e:b5:
fe:08:00:b4:a1:bf:17:66:a6:2e:da:2d:b9:58:b1:2e:c0:1d:
bc:d6:af:4c:01:cd:95:44:c0:d2:9c:17:a7:45:a7:8a:5c:cb:
fd:b3:ff:b6:1f:1e:d2:99:59:99:4b:6b:5c:13:de:3c:1d:87:
94:a0:b4:6d:37:92:38:f4:6e:2e:d5:d0:ea:b6:7e:48:24:c4:
99:83:e0:54:f8:13:8d:a6:07:e8:3f:43:96:57:26:29:1b:15:
06:5e:d3:0c:6a:dc:61:6b:ea:13:2e:5c:fb:e8:a6:44:18:ad:
4c:60:12:1c:2b:6d:82:e1:89:a9:36:31:b0:3f:c0:92:d5:ab:
92:23:4b:87:a9:6f:50:48:66:40:3b:62:9a:64:e0:5b:b0:1d:
77:f1:16:51:98:5e:3d:8d:76:ee:ba:93:8c:85:b5:ae:17:df:
6b:0f:ad:14:9e:f0:bf:6a:91:7b:8b:0c:fb:1b:48:bb:ac:19:
e2:b7:5e:64:50:a5:ef:f2:31:bf:17:3e:5e:a3:ca:e8:ca:e4:
ac:2e:a6:ce:4c:cf:83:b9:3e:28:9c:18:e4:40:0f:20:5a:44:
56:af:7e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:36 2025 by rpki-client