Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA064EEF46011EFB9DBD2A6762E951A.roa
File: 2FA064EEF46011EFB9DBD2A6762E951A.roa (raw, json)
Hash identifier: VfHS4sT/MybTARVbzI0xiVE8TioY2kgC9wggp2eKb8Y=
Subject key identifier: C3:6B:9B:47:1C:25:E7:C9:A3:60:4B:CF:CF:9D:38:6D:CE:69:5D:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA064EEF46011EFB9DBD2A6762E951A.roa
Signing time: Wed 26 Feb 2025 16:39:02 +0000
ROA not before: Wed 26 Feb 2025 16:38:59 +0000
ROA not after: Sat 19 Feb 2028 16:38:59 +0000
asID: 17561
IP address blocks: 156.233.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79078 (0x134e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:38:59 2025 GMT
Not After : Feb 19 16:38:59 2028 GMT
Subject: CN=67bf43a6-8bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:5a:f9:88:1d:4c:5a:e2:fc:2f:db:6b:31:
68:cf:f6:e8:76:e2:8e:9c:15:14:fd:d2:f9:0a:5c:
b9:20:5c:e4:94:c3:e5:98:0d:37:a5:21:cf:60:a2:
c1:f6:cd:2d:3a:3d:1f:52:9e:0b:0d:c4:25:8e:3c:
76:21:aa:f5:82:a7:e2:a4:45:be:70:8f:c5:79:03:
48:8e:37:e6:f3:d9:41:fd:5d:71:94:47:bc:aa:10:
6e:a2:45:90:1b:4e:6d:b7:69:f5:85:84:a9:1f:8c:
eb:34:12:71:95:93:66:1b:95:c1:5d:7a:b5:f2:63:
9f:5e:31:88:ba:13:13:ce:8d:f5:6f:be:f3:e8:17:
b4:87:1a:b8:87:c4:d1:ac:b0:42:0a:33:f3:0e:f9:
ea:a1:89:e1:02:90:3a:7d:1e:c8:7f:94:a2:a1:c3:
71:30:27:d4:c3:71:50:14:8d:e3:bc:cd:9e:1f:3a:
98:70:d7:81:63:ec:14:34:f9:69:ae:87:a8:f0:af:
42:13:5e:c6:98:e6:0f:5f:98:49:e4:ed:72:2e:de:
88:fe:ec:08:50:20:54:cb:2d:69:8a:3d:2c:23:53:
15:07:44:93:7c:92:25:80:50:c4:82:2a:34:ba:ce:
e5:b7:e0:1e:16:3b:c7:a9:63:3c:ac:c3:c5:9b:c8:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6B:9B:47:1C:25:E7:C9:A3:60:4B:CF:CF:9D:38:6D:CE:69:5D:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA064EEF46011EFB9DBD2A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.32.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1b:ed:d8:ef:e4:49:ae:28:55:86:f6:1d:e6:39:b5:95:04:
a8:08:f8:5e:a4:df:94:f6:92:b1:28:70:87:c9:4d:8d:dc:67:
37:5f:77:f4:21:98:09:74:ec:e8:7d:d1:cb:75:2f:ac:dd:5b:
14:fd:48:f7:d2:7d:32:13:42:4d:1c:a7:03:d8:65:e0:96:0a:
28:10:50:ec:97:50:a7:63:7e:80:28:9c:7c:bb:59:98:55:cd:
c9:35:6a:39:62:e7:26:76:ea:d3:b9:ab:ef:37:b5:1d:ca:0f:
d8:eb:df:b7:59:a1:cd:e6:e4:55:88:12:19:4e:7e:57:d6:37:
92:62:60:9e:1a:c3:69:ed:e3:2a:a6:c9:c4:b6:24:26:9c:92:
a5:fa:5e:8b:68:1c:4c:57:10:b4:8f:00:b2:04:14:d5:51:f2:
15:00:00:32:ba:a4:03:a5:92:cb:5e:2b:a1:24:42:40:3d:1c:
8e:30:51:cf:d2:8f:d4:bc:d0:b3:42:54:30:b2:5e:32:0a:5c:
b9:b4:aa:0a:c6:b6:4b:af:ca:6f:13:7d:1c:e8:e6:d7:99:62:
17:45:c5:d0:c1:0a:35:8d:ae:90:ac:56:d6:be:1c:c7:c0:72:
a3:f7:0d:84:7d:42:93:c0:4c:e3:4e:59:d1:82:10:79:c9:72:
b1:81:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:51 2025 by rpki-client