Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A5D535CFE4A11EFBAF83975762E951A.roa
File: 4A5D535CFE4A11EFBAF83975762E951A.roa (raw, json)
Hash identifier: 86OXUjC0B80GfcakAOTOY4JEKrD1uOYRLiewUxpDyD0=
Subject key identifier: F9:E5:19:C1:2F:2C:B1:43:52:34:DD:34:A9:08:DA:01:1C:1C:C2:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A5D535CFE4A11EFBAF83975762E951A.roa
Signing time: Tue 11 Mar 2025 07:27:30 +0000
ROA not before: Tue 11 Mar 2025 07:27:26 +0000
ROA not after: Mon 21 Apr 2025 07:27:26 +0000
asID: 203020
IP address blocks: 156.233.180.0/22 maxlen: 24
156.233.184.0/21 maxlen: 24
156.233.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83151 (0x144cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 07:27:26 2025 GMT
Not After : Apr 21 07:27:26 2025 GMT
Subject: CN=67cfe5e2-f076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:f5:55:d6:a0:01:8a:b3:39:5f:5f:ff:3f:
de:6e:b7:e8:93:84:8b:a6:38:68:a1:1c:4b:36:9e:
3e:aa:16:ae:80:87:24:7f:79:5b:19:11:7b:eb:ba:
2b:a3:d6:ce:6d:1f:e4:c5:27:8b:c9:77:f1:1d:38:
65:a5:cb:5a:53:ae:62:e7:3b:82:ca:62:9d:75:a7:
eb:7b:ae:88:83:f2:f3:7a:a0:30:e8:27:08:68:bb:
07:63:0a:68:11:cf:72:82:21:ce:23:be:69:60:5d:
65:83:09:c3:f0:d8:80:b3:07:1d:17:7f:ad:2b:06:
01:73:72:24:7d:7f:71:e3:a4:4a:78:22:a4:30:7d:
3e:f7:c3:98:ad:e5:a5:ca:8e:c2:d5:5d:e7:dd:a6:
35:ad:f6:47:ff:e8:ea:1c:a2:b7:b7:3e:9d:aa:76:
54:90:a0:f3:f4:cb:11:6a:3e:6a:12:05:5c:f4:1f:
a3:a1:5e:9e:8b:8a:6b:d3:52:41:26:61:fc:8b:da:
b0:a6:4c:25:3f:ea:54:62:fb:e4:99:15:92:49:85:
8b:86:36:1e:58:79:a8:df:df:a1:d2:31:ba:2e:e3:
ec:44:50:c2:0a:ec:ab:b1:45:bb:34:af:95:7b:b1:
17:3a:a2:b6:d6:2a:04:2e:f3:0b:26:e5:33:3a:99:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E5:19:C1:2F:2C:B1:43:52:34:DD:34:A9:08:DA:01:1C:1C:C2:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A5D535CFE4A11EFBAF83975762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.180.0-156.233.192.255
Signature Algorithm: sha256WithRSAEncryption
20:cc:ae:f2:94:c8:2d:11:1c:bc:bd:e7:8d:5f:e3:66:68:99:
93:1b:0f:df:db:8d:c8:c6:1a:df:54:5d:82:62:f2:54:73:e7:
40:8a:b5:ee:8c:3e:65:d1:3d:80:f6:aa:eb:d5:b5:d0:44:d2:
ea:a6:30:7e:7f:f2:47:f5:7c:ca:e3:b7:9a:cf:37:5e:66:b5:
9f:7b:9a:10:6e:97:ad:6c:cc:e2:74:39:a1:f9:24:b2:a1:77:
6a:e3:61:8a:7c:fd:e0:80:e1:ea:c1:1d:6e:6b:b4:60:be:f5:
cc:a3:2c:48:1a:23:ac:ad:e8:0e:fc:84:08:2f:29:8c:af:97:
46:06:ab:b6:cb:7a:89:bd:db:2d:98:d0:3e:a9:e7:03:4b:a1:
40:00:27:12:ea:57:4c:23:b7:a6:e7:33:a8:77:36:8b:0c:49:
d5:94:7f:68:25:db:ba:64:6b:2b:ef:4f:7d:15:b9:41:47:e4:
68:7d:cb:43:23:04:50:79:69:a0:55:f1:1c:91:98:4e:13:dc:
1d:0c:67:08:0d:28:44:45:b7:14:42:07:22:8b:bd:d1:c0:43:
2a:e5:37:49:d0:81:41:eb:52:90:b3:39:2f:ca:ec:c3:7b:c8:
08:d3:f4:22:19:d9:88:04:9f:2c:f7:6e:20:e5:69:e2:e9:b0:
18:ce:28:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:06 2025 by rpki-client