Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B6CB948F2D611EF811BE098762E951A.roa
File: 3B6CB948F2D611EF811BE098762E951A.roa (raw, json)
Hash identifier: Hc1kO+V5awH1hqx23nnQ0FLN5x8jGqbg46g70bZVYYc=
Subject key identifier: F1:EC:4F:2B:84:2C:B3:C7:8D:85:88:C2:86:93:28:DD:31:40:17:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012CFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B6CB948F2D611EF811BE098762E951A.roa
Signing time: Mon 24 Feb 2025 17:39:01 +0000
ROA not before: Mon 24 Feb 2025 17:38:57 +0000
ROA not after: Sat 29 Mar 2025 17:38:57 +0000
asID: 203020
IP address blocks: 156.235.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77055 (0x12cff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 17:38:57 2025 GMT
Not After : Mar 29 17:38:57 2025 GMT
Subject: CN=67bcaeb4-f294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:3e:06:80:16:f7:f0:fd:8e:5e:e4:f6:1a:
07:5b:16:a2:09:84:0e:f9:75:6b:96:f7:1e:8c:75:
93:1f:b6:0b:9d:9d:03:9f:c2:b0:a6:4c:48:ca:f5:
97:3f:8d:c8:98:0f:41:d4:19:c1:d3:29:ff:a8:c0:
ad:e6:80:d0:da:0f:e0:97:16:3d:b0:45:d0:d5:77:
be:64:6d:e6:40:03:bd:a8:13:90:ad:60:84:36:78:
fe:83:c3:a2:5b:31:c0:8e:bc:37:29:84:68:2e:32:
bb:63:33:35:3b:38:ad:bc:45:aa:e1:7b:6c:08:ea:
10:d4:41:8c:21:e0:c3:0a:f6:9d:9a:07:c5:b9:d3:
3f:2a:f8:83:71:05:fc:0f:12:4d:2c:42:ee:4c:90:
ba:69:bb:f8:bd:ba:3d:c8:ae:7c:22:49:26:10:35:
55:2b:da:73:f1:1a:a5:af:73:e9:0c:16:ef:eb:71:
bc:93:f4:90:e4:7d:b9:ea:a4:3b:24:0d:b6:1c:a9:
76:34:9e:0d:13:ff:7a:e0:34:19:25:84:55:b8:06:
e1:61:65:a1:cf:6f:18:e9:be:07:aa:dd:fb:30:04:
2e:a8:dc:a0:f9:32:71:fd:62:cd:ee:bc:50:29:7b:
5d:aa:78:49:81:8f:d8:38:42:51:06:1c:5b:a9:bf:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EC:4F:2B:84:2C:B3:C7:8D:85:88:C2:86:93:28:DD:31:40:17:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B6CB948F2D611EF811BE098762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.0.0/24
Signature Algorithm: sha256WithRSAEncryption
44:35:62:46:da:99:f5:7a:44:f9:8d:64:75:68:7d:47:60:e9:
33:f1:54:8c:de:b4:25:80:6c:d5:2d:a6:00:2d:40:40:09:66:
fc:60:cb:fe:cd:cf:ac:70:5d:02:27:d2:37:3d:ec:36:6d:d6:
7e:41:22:16:eb:5f:27:6f:2c:5b:f1:fd:d6:70:24:2b:79:c3:
15:13:7f:e6:0d:7f:ae:5e:a2:37:7f:a3:fa:f7:ff:bc:5a:c7:
c0:63:03:ec:df:f7:3d:b4:5d:af:f8:d5:c8:57:d1:08:19:ae:
ed:11:e8:3f:5b:62:9d:d7:bd:10:47:e6:cd:b0:6c:86:99:b3:
c3:c7:1d:37:0a:c5:86:d9:da:5c:ed:18:cf:f0:af:d7:58:33:
24:0a:20:03:bf:60:05:0b:54:60:80:00:2c:50:91:41:5b:37:
72:dd:af:d6:bb:ec:76:02:20:9c:92:6b:60:8c:e5:ea:f6:60:
ab:70:c3:17:fa:1c:63:6a:b5:50:d6:09:b4:2e:1c:d4:cf:bd:
1d:ec:e1:14:0b:87:28:a9:91:3e:2a:63:50:a7:9b:ce:fd:93:
6c:e6:50:5b:78:f8:d3:52:d7:97:4f:f9:85:3b:fc:ad:bc:f6:
47:19:c9:c2:02:f3:45:3d:06:b9:4f:68:4e:86:ea:fe:ba:c9:
18:7b:7e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:07:43 2025 by rpki-client