Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D064432F46811EF91892661762E951A.roa
File: 5D064432F46811EF91892661762E951A.roa (raw, json)
Hash identifier: +3TlfkYS30/EObh7nIZFYBUDZ6BbekMPAlue2xth09Y=
Subject key identifier: E1:E0:6D:06:A7:A8:D9:3D:AD:20:54:A2:9A:12:CF:86:24:DD:C6:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D064432F46811EF91892661762E951A.roa
Signing time: Wed 26 Feb 2025 17:37:35 +0000
ROA not before: Wed 26 Feb 2025 17:37:31 +0000
ROA not after: Sat 19 Feb 2028 17:37:31 +0000
asID: 17561
IP address blocks: 156.233.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79283 (0x135b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:37:31 2025 GMT
Not After : Feb 19 17:37:31 2028 GMT
Subject: CN=67bf515f-cc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:54:a7:58:30:a5:d1:52:60:5c:75:d1:e6:
7d:a2:19:2b:12:89:60:51:d7:bb:96:52:13:7a:55:
f2:f9:64:cc:fb:dd:4e:e5:0a:8e:f2:7a:5c:db:50:
87:df:22:18:14:1d:1a:6c:65:fe:ba:fc:db:71:47:
9b:42:41:d6:76:ee:c9:1d:2d:e2:e2:45:56:8f:56:
36:44:2d:f5:a3:d7:a2:9d:03:16:76:87:48:0c:9b:
85:a1:c8:65:82:bd:6c:31:62:d5:fd:53:05:c9:bb:
65:07:7d:8d:75:95:15:f8:80:f2:2e:5a:2a:1f:b2:
65:35:2f:76:b9:d9:46:db:8d:14:29:c3:2e:3d:e4:
03:1d:0c:0e:24:38:66:25:26:f9:81:71:69:11:c0:
bd:d8:24:d7:2a:3f:07:81:6d:0d:91:7c:16:9b:60:
56:39:1d:29:62:1e:84:13:01:81:6a:34:ad:eb:e6:
c1:01:4d:ea:1b:bc:aa:fc:06:0b:c5:42:56:f0:7d:
8d:2c:ab:5a:96:08:a3:d5:25:08:01:fe:90:91:9b:
cf:22:cc:5e:c4:d1:05:78:bf:5b:92:de:ce:9b:68:
c5:54:b0:f5:21:96:f0:bc:74:e1:b9:6d:b0:7d:8b:
42:20:b6:34:27:2b:1c:a8:ba:8e:c0:c6:82:f9:2f:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E0:6D:06:A7:A8:D9:3D:AD:20:54:A2:9A:12:CF:86:24:DD:C6:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D064432F46811EF91892661762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.83.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d3:f6:27:a8:c1:59:f6:a5:a3:dc:6e:01:ac:12:a5:d5:5d:
43:0b:e6:d5:5c:fd:28:d1:d2:1e:ca:ee:3b:3e:27:2f:5b:ae:
b7:4b:77:c2:7c:77:80:a8:dd:ac:36:f8:b6:9e:00:be:70:0c:
e4:d5:1d:22:0b:fb:9b:a1:49:68:f5:45:4c:55:05:0d:6e:b4:
67:99:87:62:09:51:10:a9:fe:c1:1c:10:d3:e1:34:6c:ae:70:
34:b4:8d:e1:d2:9f:6a:ce:74:4e:a7:f6:5c:c3:3e:73:f1:01:
50:e3:a5:e4:fd:74:42:97:39:d2:9f:41:33:b3:ae:1a:f0:bb:
d7:66:46:c8:31:55:cc:04:04:f1:b6:84:9b:90:83:cb:75:eb:
70:d8:91:c2:d6:06:b1:1e:8d:fe:f8:d0:42:82:3e:b5:37:fe:
28:a4:d4:b3:d8:08:5c:07:a9:f2:09:dd:b4:10:8a:52:de:50:
81:f8:5e:80:d9:13:1f:aa:18:56:cc:12:56:3f:87:7e:83:04:
98:d4:1a:ae:b2:9f:37:dd:84:ae:82:5e:19:c9:44:12:24:88:
ae:08:37:aa:5f:22:7b:59:28:c0:82:85:57:cc:1e:d5:67:fb:
04:1f:00:86:3b:6b:ee:a8:ef:f8:5c:bc:c6:9b:5c:d3:11:6e:
df:43:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:48 2025 by rpki-client