Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59E759ACF45F11EFA78703A2762E951A.roa
File: 59E759ACF45F11EFA78703A2762E951A.roa (raw, json)
Hash identifier: O/hikw3Nve98ZTJyV8/bcq7oLA1mAAo8GPRnuH6BnIs=
Subject key identifier: 8B:1B:D4:75:AD:A7:85:1A:5A:D6:ED:8B:B8:53:58:87:BC:92:21:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59E759ACF45F11EFA78703A2762E951A.roa
Signing time: Wed 26 Feb 2025 16:33:04 +0000
ROA not before: Wed 26 Feb 2025 16:33:00 +0000
ROA not after: Sat 19 Feb 2028 16:33:00 +0000
asID: 17561
IP address blocks: 156.233.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79055 (0x134cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:33:00 2025 GMT
Not After : Feb 19 16:33:00 2028 GMT
Subject: CN=67bf4240-dc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:cf:1a:d9:65:04:8c:7f:e2:c8:27:15:2c:
0d:34:2e:34:58:ff:ca:ba:29:9f:7d:94:97:e5:03:
1d:a1:6e:12:f6:8b:87:03:5b:35:b4:48:ac:9b:19:
e0:de:aa:e0:5c:82:03:01:8d:d7:65:eb:c1:43:68:
a7:d8:56:1a:da:b8:2a:76:8c:62:f9:f2:90:e6:0d:
aa:1e:2b:ef:dd:3c:a6:15:48:5c:48:73:2b:8c:92:
0b:b2:89:a4:f7:55:bf:7a:c3:3d:89:ae:f6:aa:23:
a4:ef:e9:b5:da:97:59:29:fc:3f:30:c1:ae:aa:28:
9f:59:c8:6d:aa:77:17:0b:ec:97:ec:c1:21:52:47:
ec:6e:ea:a4:2e:c8:f1:29:c9:ab:74:7a:7a:c3:7e:
3f:35:9b:9b:21:7c:7e:04:7d:cb:71:5e:33:70:cf:
8c:e9:45:5e:49:6d:4a:c0:ce:9a:e0:a7:5b:9b:fd:
62:dc:ed:79:03:c4:0e:f2:3e:1e:9b:56:0f:60:04:
1d:d9:6a:ae:82:92:11:98:db:08:ce:22:17:60:15:
a7:4a:8e:ea:5a:d2:ae:74:9e:72:64:de:f5:af:a7:
ad:1a:e8:31:a2:dc:a0:94:2f:c5:b0:c3:05:7d:07:
83:a0:31:b0:70:a0:9d:54:75:2e:dc:b1:91:88:d2:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:D4:75:AD:A7:85:1A:5A:D6:ED:8B:B8:53:58:87:BC:92:21:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59E759ACF45F11EFA78703A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.11.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e0:c3:f5:74:56:d2:dd:32:2c:27:a7:0a:53:17:c6:c7:fc:
27:1f:10:ab:d5:3d:40:a4:d9:0f:f8:a7:25:76:64:c5:c0:9c:
b1:84:01:5d:0d:bc:ae:2c:68:d6:cc:c0:79:3c:a9:82:85:48:
2f:be:f4:7c:91:61:15:03:80:55:65:a9:db:ad:ce:6e:a2:09:
70:6d:2b:8c:c4:58:06:9f:83:aa:18:9e:c8:ac:e9:26:a7:8d:
b2:10:a4:e1:ce:ba:41:a2:31:6b:4c:bb:2a:01:a1:e0:43:42:
44:96:36:2a:b5:d2:75:c0:e0:fb:48:86:29:0c:f6:d7:e9:6c:
e2:6e:5c:25:56:37:cd:36:de:b7:4b:e9:93:56:30:16:f9:43:
c6:30:47:ec:c8:e2:5e:88:0e:55:2e:2e:8c:1f:60:35:0f:9c:
fa:24:bf:3a:9e:72:8c:34:97:5f:35:ac:e9:49:fc:fc:0c:8b:
ab:0c:db:28:f6:23:34:91:42:70:3d:bd:74:af:fd:19:2b:cb:
44:8a:a6:a7:ee:3b:d7:10:7b:76:c4:4e:f3:6c:29:dc:29:89:
10:fa:5f:b3:c6:33:2c:07:9c:4d:71:d1:02:5d:c7:1c:43:1a:
ef:87:cb:35:f0:bc:7d:2b:f7:e5:47:9e:ce:2e:de:2a:e6:4e:
51:1d:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:10 2025 by rpki-client