Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6187063AF2D411EF823C8B8B762E951A.roa
File: 6187063AF2D411EF823C8B8B762E951A.roa (raw, json)
Hash identifier: soX/4VaoKSabcE2Vpgc7RAC7ZK1mVwQLn/m3hjfSOIk=
Subject key identifier: 21:EA:98:32:07:64:97:AD:C1:CB:49:90:7C:87:88:DD:F1:FC:13:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012CE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6187063AF2D411EF823C8B8B762E951A.roa
Signing time: Mon 24 Feb 2025 17:25:45 +0000
ROA not before: Mon 24 Feb 2025 17:25:42 +0000
ROA not after: Sat 29 Mar 2025 17:25:42 +0000
asID: 203020
IP address blocks: 156.235.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77025 (0x12ce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 17:25:42 2025 GMT
Not After : Mar 29 17:25:42 2025 GMT
Subject: CN=67bcab99-38e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:4c:49:68:2b:2d:bf:ab:f4:8c:74:7d:42:
37:65:d1:f9:e4:ce:1b:c7:88:37:ec:ec:20:7b:a2:
7e:f0:5b:87:9c:b8:da:31:fc:55:34:3f:07:a4:e1:
06:ba:a3:f4:ae:20:30:a2:e4:7d:e9:c3:29:5a:eb:
4f:9d:43:29:c7:c6:92:77:10:c1:04:b7:b0:17:22:
bc:f5:91:e1:30:42:1e:82:b6:35:c8:9e:2c:16:1f:
be:5b:02:cc:35:9d:cd:e6:c0:99:77:7f:ed:68:15:
f0:1e:8c:ec:25:92:61:fd:d3:3e:12:9b:9f:7b:9d:
99:4e:22:d1:b6:9c:48:75:8a:3e:18:95:c0:5b:9e:
08:3a:89:67:16:3e:0f:dd:c8:4b:ca:a2:0f:23:26:
49:b5:1e:1d:58:12:7b:59:88:f9:6f:d6:7e:38:56:
3b:44:04:9a:34:88:12:2c:2c:c5:d5:e7:fe:ec:90:
a1:8b:63:af:0d:1d:c2:72:07:55:9e:40:02:3b:a1:
16:eb:ae:50:87:1b:fa:d9:23:d4:97:19:6c:6c:46:
c1:e1:6c:2d:66:4c:78:9a:01:57:8a:45:7b:4d:15:
f3:62:0e:49:98:90:12:e3:a3:a2:e7:59:fb:72:a9:
dc:25:0c:55:6b:d8:c1:47:85:b9:85:cf:3c:e5:ba:
ea:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:98:32:07:64:97:AD:C1:CB:49:90:7C:87:88:DD:F1:FC:13:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6187063AF2D411EF823C8B8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.68.0/23
Signature Algorithm: sha256WithRSAEncryption
69:12:ad:49:be:0b:f8:b6:54:46:52:2d:b4:9b:41:db:e0:26:
d2:bc:74:db:f8:92:d7:fc:4c:59:71:36:31:cf:17:90:64:25:
62:f7:0d:69:95:e0:25:57:c9:bf:9b:f2:98:7d:6c:9c:64:99:
b5:1f:7e:30:f1:70:59:98:be:d3:1d:f0:77:16:8b:4f:f6:29:
00:70:2b:be:1f:1e:24:5c:97:74:dc:91:d8:7f:14:ed:49:0a:
b2:af:df:31:ce:17:f2:ef:6b:03:84:76:6f:6c:e5:4b:19:fb:
a4:46:8a:57:87:66:50:41:46:00:49:94:ae:77:e6:a1:22:1e:
5a:05:ef:68:3c:02:d1:be:8a:1b:14:d2:82:0f:64:a5:ae:a4:
9e:72:da:d5:15:02:79:89:84:0d:1b:5c:cc:85:b5:d3:83:41:
17:0d:27:57:4d:73:a1:05:2a:0f:2c:82:f3:dd:54:eb:2c:47:
77:c0:46:40:cc:91:14:f9:6f:5c:88:ee:a4:e0:fe:21:60:66:
b7:23:6e:73:e2:1d:ff:69:74:44:67:9d:d6:3a:51:bb:b1:1e:
36:ec:c3:8e:cd:66:58:83:cc:e6:c1:9c:a6:c6:0e:2c:8a:07:
59:75:45:ee:5b:d9:45:ee:fb:cd:48:f7:0c:a1:7d:5e:42:6d:
00:b9:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:07:43 2025 by rpki-client