Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/475361FEE53811EF82DB2870762E951A.roa
File: 475361FEE53811EF82DB2870762E951A.roa (raw, json)
Hash identifier: QnHbMIpTwBp4j9IAf5IuGRyehnHvOrJMaSQewsMtBsk=
Subject key identifier: D6:F7:BE:0B:CE:FB:25:CA:11:C4:44:66:BB:7B:14:5F:D4:BF:C1:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/475361FEE53811EF82DB2870762E951A.roa
Signing time: Fri 07 Feb 2025 09:45:35 +0000
ROA not before: Fri 07 Feb 2025 09:45:31 +0000
ROA not after: Mon 13 Dec 2027 09:45:31 +0000
asID: 17561
IP address blocks: 156.230.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72903 (0x11cc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 09:45:31 2025 GMT
Not After : Dec 13 09:45:31 2027 GMT
Subject: CN=67a5d63f-6704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:8e:c7:b3:8d:e2:4c:0d:b3:12:40:2c:3c:
65:1c:e7:a5:a4:9f:53:72:5a:61:0f:97:45:5e:92:
77:24:fc:81:0c:93:2c:ef:a3:0d:20:f5:99:02:de:
d3:bb:a0:92:5f:30:d2:fa:d0:d2:6b:5d:60:82:5c:
47:39:72:67:65:0a:f1:a9:3d:76:3e:41:87:be:7f:
52:1b:34:ff:b8:af:73:67:76:53:e9:2b:55:03:9d:
69:0d:55:2e:11:9f:a8:06:01:51:9a:7a:ee:da:11:
21:31:68:45:3b:47:28:75:77:c9:a7:a2:4e:fb:ca:
a9:50:56:43:8a:0c:98:db:17:b2:72:3c:43:ee:e0:
a7:5e:a2:43:3f:e9:78:63:29:2a:83:b3:3e:97:da:
9c:36:c3:bc:9c:51:b5:98:c9:06:9e:54:db:a8:ca:
f4:13:b9:2b:4c:71:67:47:d9:77:31:5d:02:65:e7:
36:fe:60:f5:57:64:25:5a:98:84:62:6b:80:5c:bd:
0c:e7:0c:75:a7:13:6b:75:0f:79:70:a2:b7:2f:41:
ae:9a:6b:d4:38:f7:f5:8a:ee:ca:70:c0:b6:62:b1:
50:0b:8c:8d:23:0a:5c:e4:8d:10:34:02:da:7e:de:
1c:c4:12:a2:db:1a:40:a9:f9:6a:2c:8b:e7:eb:f2:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F7:BE:0B:CE:FB:25:CA:11:C4:44:66:BB:7B:14:5F:D4:BF:C1:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/475361FEE53811EF82DB2870762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.137.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:47:9e:1c:fb:1c:c8:97:61:6b:a3:7c:f6:7f:a2:4f:e1:22:
52:cc:ec:54:10:ab:1c:39:fd:43:3f:61:df:fe:ec:96:c7:40:
ad:6f:70:21:70:d8:e6:39:5a:39:bb:98:ae:16:d2:e1:6b:3d:
a7:65:b6:1e:dc:2c:73:36:09:77:cf:fa:35:a1:56:1e:9a:3c:
bc:69:af:80:5d:e4:95:68:13:68:a7:a0:ca:51:13:4d:ae:c6:
d5:c4:64:36:38:6c:e0:cf:cc:79:fc:7c:09:af:74:00:47:70:
19:38:ea:9c:80:6d:55:32:a6:24:a0:9f:c7:ed:90:9a:3c:0b:
13:f7:9e:73:10:91:01:8d:ed:05:6e:07:4c:31:aa:47:07:a4:
be:48:5c:49:da:0d:7f:43:a4:c3:5c:58:a8:ee:68:8a:6d:f1:
0c:46:55:65:cf:87:bc:24:b6:2a:73:84:a7:a5:9f:ca:2b:9a:
7e:da:d4:79:74:a8:fd:92:8f:bc:01:f1:69:72:5b:ba:48:77:
b0:a2:00:bb:e2:f7:9e:00:7b:f1:81:61:ad:c8:3a:cb:6c:c9:
d3:bb:a0:f0:b4:7e:5a:28:12:be:fb:3e:2b:67:6d:a4:29:ef:
7b:36:7c:e9:14:16:78:9f:f6:ea:90:43:e3:86:75:a3:05:3b:
5e:01:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:32 2025 by rpki-client