Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D420D94F4A211EFBCE2596B762E951A.roa
File: 4D420D94F4A211EFBCE2596B762E951A.roa (raw, json)
Hash identifier: UHO4iMYBwDbOvOXwXf2t0MPL1oWt44/NN3ajdahrMls=
Subject key identifier: 91:A4:9A:7E:83:07:94:3B:FA:1F:BF:14:67:52:E2:30:CB:89:7D:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013877
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D420D94F4A211EFBCE2596B762E951A.roa
Signing time: Thu 27 Feb 2025 00:32:19 +0000
ROA not before: Thu 27 Feb 2025 00:00:15 +0000
ROA not after: Sat 19 Feb 2028 00:00:15 +0000
asID: 17561
IP address blocks: 156.249.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79991 (0x13877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:15 2025 GMT
Not After : Feb 19 00:00:15 2028 GMT
Subject: CN=67bfb293-4c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:1f:90:ee:59:e9:60:d9:94:ff:19:91:ec:
2e:0c:e9:58:f7:9f:20:cd:59:62:63:79:2c:0c:07:
56:75:a9:cc:00:39:9f:89:ba:62:31:e1:b6:46:d2:
25:63:fe:3e:39:4e:64:52:29:ea:db:41:ef:7d:b7:
93:8d:62:ae:88:d6:8f:ab:f7:65:2f:95:c0:ef:79:
bc:7b:19:95:4b:4d:e9:96:3a:84:1b:2e:5b:f0:d9:
8f:3b:19:6c:12:93:e9:88:1d:c2:49:7e:92:a0:70:
06:83:33:97:b8:a7:7f:95:74:e3:c8:ab:68:5e:d1:
b4:29:a2:6d:89:5b:e3:f7:0f:24:02:44:fb:fc:1e:
0a:d4:dc:57:a4:fb:6d:ed:56:88:5e:21:d4:19:2d:
52:fc:17:75:93:5c:f6:87:61:2d:ec:fa:a2:a4:4a:
ca:56:56:d1:5a:d9:b5:f3:61:4a:f8:a5:f4:da:fc:
3e:2c:3c:49:43:99:82:e8:9b:34:e4:77:f1:51:8d:
05:28:29:58:e1:79:50:b4:54:c0:84:01:5a:f5:e2:
46:bb:19:91:cc:67:d8:d9:56:7c:ec:79:f2:4f:31:
c4:e9:01:5e:ed:05:b0:2a:8f:a8:8e:5e:b5:f0:84:
4e:da:63:7b:56:71:b6:41:10:28:ae:dc:1f:70:e8:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:9A:7E:83:07:94:3B:FA:1F:BF:14:67:52:E2:30:CB:89:7D:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D420D94F4A211EFBCE2596B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.235.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:88:24:39:d6:f5:f4:4a:ad:4f:18:1b:50:b3:25:cc:a7:04:
35:bb:84:ce:6c:65:3b:1a:09:9a:85:a1:26:47:3c:22:b8:08:
a5:c0:b0:5a:ef:fb:0e:08:83:79:f0:fe:2e:f4:8b:76:76:70:
f6:20:bb:43:16:26:ab:ec:fc:c9:bd:06:dc:e2:0c:3a:3b:ed:
6f:b0:8d:8a:f4:a1:1b:04:fa:ad:4a:1a:1d:4d:90:2b:4f:55:
cf:bc:65:d1:1e:6c:f9:49:d1:3b:c3:c0:64:bb:12:fc:ee:a0:
ef:61:b9:9c:28:a8:b8:fa:2a:e8:fc:52:8e:d1:39:42:de:ea:
55:4e:ea:22:61:19:da:af:2d:be:57:74:55:09:db:05:af:71:
22:64:b3:d7:32:ed:75:3f:b1:ae:a7:b8:11:ff:e5:20:0b:15:
88:27:83:2b:8e:81:bf:3b:bb:b0:28:59:cd:8a:91:5d:cb:10:
88:03:89:ae:22:bb:1c:18:a9:c3:9f:ae:60:93:a4:4f:e7:f1:
f6:d7:c9:f4:bd:1a:c7:2f:06:08:66:02:8d:2d:7a:c0:b7:3a:
8d:d0:00:2e:99:30:d9:8f:d0:3b:e4:36:94:c1:2f:a5:3e:c3:
f5:fc:6d:00:9d:3d:0d:86:15:13:2e:74:a3:ad:a9:03:b2:24:
d6:57:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:27 2025 by rpki-client