Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C6E9638F45F11EFABEB7CA1762E951A.roa
File: 3C6E9638F45F11EFABEB7CA1762E951A.roa (raw, json)
Hash identifier: O5P5S57slNmqPtT324vF5eas1XJ1Hg1sJbc/usPZx2M=
Subject key identifier: 13:D9:21:92:55:CD:72:78:13:DC:13:70:EF:FB:76:49:A7:FC:F0:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C6E9638F45F11EFABEB7CA1762E951A.roa
Signing time: Wed 26 Feb 2025 16:32:14 +0000
ROA not before: Wed 26 Feb 2025 16:32:11 +0000
ROA not after: Sat 19 Feb 2028 16:32:11 +0000
asID: 17561
IP address blocks: 156.233.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79053 (0x134cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:32:11 2025 GMT
Not After : Feb 19 16:32:11 2028 GMT
Subject: CN=67bf420e-f0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9f:7b:5d:40:ac:4f:0b:51:f1:6c:38:35:5a:
5e:b7:7d:ec:d4:a4:8a:a7:4a:89:6b:6e:51:ed:a3:
10:10:cd:9b:d6:ad:5e:2f:b7:d1:4a:15:e4:8b:d0:
10:79:50:5a:5f:25:df:63:d1:a3:45:99:24:7c:1a:
1b:f3:6d:05:2f:40:d0:ac:fd:30:34:02:fd:80:1e:
94:b7:50:3b:a7:83:42:68:8b:56:30:1a:58:ea:cb:
d3:58:0f:b3:a2:32:b9:44:4f:23:e0:04:3f:a3:2c:
3f:d6:72:e6:a9:37:b6:f1:3a:9f:ce:1e:d0:3c:ee:
84:fc:d1:7a:5f:30:db:1a:8a:88:55:90:d2:58:bd:
81:cd:94:f3:f9:93:bb:b8:2d:b5:ca:50:0c:9d:b9:
9d:f5:61:67:db:03:46:25:a7:22:9b:b5:c7:fc:dc:
03:0f:10:c1:fe:5b:73:5e:16:5f:ee:3f:48:50:3a:
94:d7:50:3e:1e:5f:83:cd:2b:d9:f2:6a:6c:5a:22:
6a:b5:70:a1:51:79:e5:c6:b1:68:a1:38:0a:ab:f4:
8e:6e:b3:32:04:54:91:b6:90:f6:28:63:5c:f2:2b:
7f:a0:37:b4:0f:1e:77:19:11:db:79:98:72:fa:41:
42:78:f3:56:4e:ae:4f:99:a3:65:84:7f:fe:e0:1a:
3e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D9:21:92:55:CD:72:78:13:DC:13:70:EF:FB:76:49:A7:FC:F0:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C6E9638F45F11EFABEB7CA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.8.0/24
Signature Algorithm: sha256WithRSAEncryption
28:70:d0:6e:ce:eb:e9:ce:36:8c:ba:19:72:c4:ed:36:c7:cc:
cb:02:97:73:b9:9c:83:53:ba:af:db:6b:44:00:ee:4d:47:41:
73:2b:8f:90:7a:73:e0:55:e6:f2:37:13:81:23:ab:f6:6f:25:
6f:75:97:2a:7c:a9:19:d6:a0:01:02:5c:63:f8:c2:1a:f0:7d:
bb:a9:62:b6:e6:72:d1:ca:b6:80:34:c1:f9:b6:e1:17:eb:26:
22:eb:64:2c:e0:08:ff:e6:07:48:2f:cc:ac:2b:04:35:49:1d:
b1:e8:9a:f5:ad:36:dc:b1:5b:66:e5:88:58:cc:f0:5f:86:36:
ad:09:27:4b:05:ec:11:41:55:b2:88:52:93:19:25:75:a4:40:
e5:02:0d:72:08:e5:b1:c7:b7:31:11:47:52:8f:54:29:cb:d2:
63:55:b9:65:22:7c:c6:73:be:c9:a3:0a:fb:7a:49:b5:75:2d:
f6:f0:71:43:45:6b:39:68:12:a9:df:a3:f1:b3:b2:a5:db:93:
b1:83:a6:e5:e2:cb:7f:ce:11:96:4e:6a:a7:f0:40:19:b3:27:
1d:91:1a:af:69:5e:2b:0e:54:54:8e:68:07:af:f3:f1:2c:39:
4f:19:7f:83:f6:27:59:78:94:72:90:15:6e:0f:0e:32:57:87:
b4:36:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:42 2025 by rpki-client