Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B3602B2F46611EFA0852553762E951A.roa
File: 4B3602B2F46611EFA0852553762E951A.roa (raw, json)
Hash identifier: qaPQyGGxwrdVbOhrgu8upRywN4bD467uSKxwhTV7VjE=
Subject key identifier: 74:F4:C2:6F:85:E9:F8:D0:A4:5C:47:B7:9A:9E:FA:14:5F:0C:FA:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013588
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B3602B2F46611EFA0852553762E951A.roa
Signing time: Wed 26 Feb 2025 17:22:46 +0000
ROA not before: Wed 26 Feb 2025 17:22:42 +0000
ROA not after: Sat 19 Feb 2028 17:22:42 +0000
asID: 17561
IP address blocks: 156.250.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79240 (0x13588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:22:42 2025 GMT
Not After : Feb 19 17:22:42 2028 GMT
Subject: CN=67bf4de6-e2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:aa:8b:02:56:65:ed:23:17:d8:25:8f:5c:
a8:34:37:3a:9b:eb:27:ae:e1:39:5c:2d:fe:e6:ec:
4a:de:6f:1c:01:b0:f8:2a:4a:f9:6d:c5:0a:9c:04:
7a:df:e8:7d:b1:6c:7c:e2:b0:6e:fc:0f:b8:27:a6:
3c:34:c0:25:8e:dd:4a:27:c6:44:4b:18:d2:07:6c:
56:55:71:4d:36:de:d6:15:09:52:60:c4:9a:db:72:
92:87:ca:14:b2:b1:bb:d5:29:6c:3c:82:49:a7:a8:
0e:a3:a0:db:aa:69:8a:21:1f:49:76:52:d4:1e:5d:
b0:f0:f2:41:1e:9a:40:c3:20:0a:41:47:8b:ce:40:
7b:9e:4c:1a:b9:43:02:f6:a3:a7:68:ae:e6:c5:37:
a1:9b:2f:63:ba:cc:c3:e9:c3:9d:92:36:c7:39:56:
71:9e:4a:a3:d0:fa:4b:ea:32:12:84:45:13:d5:9e:
6a:e0:f5:3b:a6:7b:41:10:12:e9:94:fc:7c:b6:a1:
b3:4c:14:5f:0d:bd:93:18:90:5e:91:72:10:41:c8:
6e:40:68:12:e6:b6:bd:62:3e:27:fa:d6:e8:8f:9a:
04:41:81:b3:ee:3a:3d:9f:1f:30:75:f9:b7:3f:d7:
e6:2e:10:18:f7:61:36:7b:0a:73:4d:6a:70:f9:1b:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F4:C2:6F:85:E9:F8:D0:A4:5C:47:B7:9A:9E:FA:14:5F:0C:FA:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B3602B2F46611EFA0852553762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.63.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e9:66:80:50:be:30:42:a3:08:62:da:90:db:91:8d:d7:8f:
88:a4:e8:67:2d:dc:0c:00:09:ca:a0:f1:6f:c8:ed:ad:5e:91:
f5:c7:90:36:be:ef:e9:d6:e0:27:f9:5d:30:e5:48:8e:5c:20:
25:bb:8d:27:bf:0c:5b:04:61:ec:61:a7:33:a9:da:de:c4:1f:
23:5c:32:7b:61:1f:54:40:56:ef:3f:d5:27:e6:e7:59:32:0e:
65:21:3f:1f:26:cd:48:8b:10:73:c5:02:b9:15:11:83:9a:f7:
44:e3:65:22:68:4b:62:01:be:0d:8f:72:09:ae:95:a3:25:e1:
8e:db:0d:a3:0d:42:cb:dc:28:c5:f4:ac:24:3f:96:51:09:cd:
df:d0:39:c4:fc:06:6c:8c:53:44:5a:48:f8:79:91:96:4b:c5:
56:8e:58:59:8c:89:19:10:fb:ea:f7:a5:b3:12:7f:67:a3:8f:
56:81:3d:e7:5e:65:b7:2b:76:e5:0c:66:65:5a:b4:b2:99:17:
d5:92:ae:12:2e:be:93:45:75:22:b1:c3:88:1d:02:48:ad:b3:
ff:eb:f9:2e:bb:3d:0e:a9:fc:34:32:79:3b:bb:af:bc:99:e8:
c9:c8:9f:b6:fb:54:23:26:b4:2c:01:ea:a5:db:5c:59:16:c8:
27:3f:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:32 2025 by rpki-client