Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/363F9C2EEC8C11EFBE22929C762E951A.roa
File: 363F9C2EEC8C11EFBE22929C762E951A.roa (raw, json)
Hash identifier: GkLK4VxhCFPfcYS9wQgz2ebQiqznr/eWPT4ORdnv77o=
Subject key identifier: 71:CD:F7:C4:39:56:87:6F:95:DD:1E:4D:FA:9D:04:5A:E6:27:08:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01244E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/363F9C2EEC8C11EFBE22929C762E951A.roa
Signing time: Sun 16 Feb 2025 17:34:02 +0000
ROA not before: Sun 16 Feb 2025 17:33:57 +0000
ROA not after: Mon 13 Dec 2027 17:33:57 +0000
asID: 17561
IP address blocks: 156.230.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74830 (0x1244e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 16 17:33:57 2025 GMT
Not After : Dec 13 17:33:57 2027 GMT
Subject: CN=67b2218a-8c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:85:c3:c8:01:79:f3:7b:51:a3:01:a6:0a:
32:5a:18:d9:f7:94:dd:76:3f:08:8d:02:d2:c3:f6:
4f:d5:fd:85:13:63:c0:cd:a3:ce:95:07:6a:99:93:
c1:26:e5:b2:d0:c2:56:45:1f:79:d7:a2:4b:0e:1e:
52:ce:b9:f0:5b:46:ce:74:7e:56:00:6f:8a:2f:45:
a8:c6:32:2b:35:ef:ba:a4:6b:96:ee:ac:57:fb:34:
7a:c1:8c:b4:b5:53:04:95:03:82:ea:a2:c1:e5:bb:
dd:24:65:fe:3f:f1:a4:2b:e8:48:56:c4:ee:d6:5b:
9b:d5:0d:4f:b8:27:06:63:90:21:13:ce:8f:ed:7f:
6f:aa:2a:53:8e:f0:8f:da:ec:8a:b7:99:35:a2:07:
46:a2:66:c6:d2:74:44:ef:6d:07:30:13:fa:7a:2d:
e0:31:bf:3c:62:06:6d:f6:e3:fa:d8:95:e3:b8:59:
4f:9c:4f:9a:89:ce:37:d0:51:77:d4:c7:74:b3:5f:
c4:85:d2:9e:bb:93:7d:84:b2:48:22:0a:0a:b6:2b:
ae:77:6c:f4:16:ab:a8:91:56:85:c8:55:e3:fc:d6:
ee:59:78:f4:fa:51:12:e8:8e:b0:15:af:a8:80:e2:
6b:d4:dd:49:85:b2:37:6c:82:c2:13:c1:5e:1b:72:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:F7:C4:39:56:87:6F:95:DD:1E:4D:FA:9D:04:5A:E6:27:08:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/363F9C2EEC8C11EFBE22929C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.143.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d9:ea:90:aa:5f:2c:62:b8:d0:91:91:08:1d:c6:a2:c1:cf:
05:c0:66:88:f6:ce:15:93:68:19:f5:ce:7f:66:0b:19:42:d7:
45:52:e8:fc:1f:4c:6f:59:48:5a:3c:fa:a0:af:1a:22:7e:32:
e9:1e:f0:f5:77:6c:40:09:ef:9b:8c:ca:83:3c:3e:10:91:42:
d6:f2:c8:3c:02:da:89:34:98:1d:82:12:52:ea:bd:85:c3:fb:
3c:40:86:26:b1:69:72:9e:68:49:b8:a2:aa:12:45:eb:10:99:
b2:11:08:1f:54:41:f5:89:6c:74:43:86:24:f9:f4:1b:da:72:
01:67:63:3e:74:15:52:0c:d1:1d:c5:fa:8a:22:3e:eb:ed:5c:
a4:bc:de:12:79:95:93:37:4b:94:4c:e0:4a:40:e6:6f:5b:ad:
3c:68:ea:0f:1f:cf:fd:97:01:67:d1:37:2c:a3:0b:be:7a:48:
8d:ca:dd:de:63:2b:cc:91:71:28:21:98:85:a8:71:0a:e6:74:
2c:ec:f2:e0:51:5e:1d:6e:c7:b3:7e:90:a1:39:67:6d:f8:92:
8a:45:75:5c:ce:30:31:08:7c:24:1b:88:4a:9f:94:c3:61:49:
5a:4a:9f:ef:1b:f3:c4:12:78:e4:76:bb:ef:2d:e0:47:0e:85:
32:80:f2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:56 2025 by rpki-client