Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F5EC386F2C611EFBA4305AB762E951A.roa
File: 2F5EC386F2C611EFBA4305AB762E951A.roa (raw, json)
Hash identifier: E3ibbVBobUmM+s2jvIFXM8ZDOiP7QdT4VRLSWOs0rP4=
Subject key identifier: 19:40:BE:74:4C:CB:A7:56:40:5F:A7:55:12:F2:A6:76:8B:3C:40:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F5EC386F2C611EFBA4305AB762E951A.roa
Signing time: Mon 24 Feb 2025 15:44:08 +0000
ROA not before: Mon 24 Feb 2025 15:44:05 +0000
ROA not after: Sat 29 Mar 2025 15:44:05 +0000
asID: 203020
IP address blocks: 156.235.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76815 (0x12c0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 15:44:05 2025 GMT
Not After : Mar 29 15:44:05 2025 GMT
Subject: CN=67bc93c8-47c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:18:58:a7:82:9f:ab:ba:1f:dc:ad:96:86:
40:ae:1c:79:90:79:45:cd:ea:77:e1:a0:4e:98:5c:
ce:39:6e:30:14:ca:f9:03:90:03:75:1f:15:ba:76:
d6:95:ae:7a:44:16:ed:61:79:f4:c5:82:02:ad:09:
9c:8e:1b:26:44:1e:4c:f2:12:f6:b8:6a:8f:44:59:
a7:33:01:0c:2f:b2:82:1d:d9:6e:42:b0:06:36:21:
9e:05:04:2f:9e:31:fb:d4:03:b4:69:42:7a:c6:6f:
5c:78:cf:16:67:87:ba:73:e6:87:2b:14:4a:cb:b1:
3c:3e:8f:37:e3:75:4d:ad:14:ad:ba:8b:dc:a5:63:
02:c9:75:3f:6d:a1:c7:5c:a5:a0:68:ff:4e:20:f0:
a7:82:fa:82:ae:77:ed:c1:8d:fe:86:ce:93:bc:3d:
8e:1b:4c:f6:a9:30:bd:70:fd:c9:20:75:14:21:12:
c0:45:e6:f0:51:8c:44:b2:a6:ad:43:85:aa:61:5e:
47:80:29:e0:a9:73:e0:6d:ea:4f:35:0f:e3:8e:3d:
24:48:1a:7c:0e:6b:ac:3d:a1:15:ed:2e:dc:f6:5c:
d9:7c:27:09:8f:f6:ae:6e:34:f8:ca:7b:46:6b:34:
08:30:eb:77:c8:24:bf:10:92:6d:2c:6c:6b:d3:f6:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:40:BE:74:4C:CB:A7:56:40:5F:A7:55:12:F2:A6:76:8B:3C:40:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F5EC386F2C611EFBA4305AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:60:51:78:09:13:e1:9c:02:83:3e:42:e5:23:43:21:19:79:
83:32:d6:60:19:75:0e:cf:cf:b2:b6:f9:52:d5:9a:81:3c:98:
83:f2:28:da:b2:0c:ef:31:f2:34:56:2e:6f:51:41:5a:34:d4:
a6:0e:cf:fd:dd:53:aa:c1:b4:62:6c:9e:d1:d2:34:c3:8a:37:
40:8d:f0:81:31:b1:1f:1d:03:d3:c0:9b:a3:11:0f:80:ac:ce:
44:8c:10:d6:ae:98:1f:bc:fe:86:99:8f:ff:c6:79:ab:49:09:
fc:3a:b0:24:07:e3:67:59:55:46:8d:95:4e:ac:d7:90:39:ba:
6e:7d:4b:1f:84:d4:18:8f:0b:16:20:c6:89:1e:6b:18:f2:31:
b6:4d:1d:64:f6:53:93:02:e2:a6:8e:35:d8:ea:cc:51:43:b4:
72:7d:89:dd:cf:4f:2b:f9:7a:66:a6:a0:4b:b8:e0:e6:63:94:
a8:1a:c5:80:d1:8f:36:77:b5:e7:38:36:07:0e:69:96:58:73:
30:6b:b2:95:86:23:13:21:27:06:0d:6b:59:43:65:3f:c7:bd:
4b:10:f7:29:1e:79:7a:bf:ef:fe:5b:1f:ec:c4:2a:22:b9:d1:
ac:a7:eb:6e:0d:b8:e2:0c:48:84:4b:56:b9:7a:de:3f:ec:fa:
90:83:90:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:11:14 2025 by rpki-client