Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69BD93F0E9F611EF8C1C7B52762E951A.roa
File: 69BD93F0E9F611EF8C1C7B52762E951A.roa (raw, json)
Hash identifier: VkA8vkPlr7uo33WXYzjS2L+haHbO+4MlYtT9itMGokY=
Subject key identifier: F3:37:B6:34:02:28:EB:45:8F:FE:9B:3A:E0:65:8E:8A:16:C1:F2:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01224C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69BD93F0E9F611EF8C1C7B52762E951A.roa
Signing time: Thu 13 Feb 2025 10:36:42 +0000
ROA not before: Thu 13 Feb 2025 10:36:38 +0000
ROA not after: Tue 18 Mar 2025 10:36:38 +0000
asID: 198584
IP address blocks: 156.253.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74316 (0x1224c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 10:36:38 2025 GMT
Not After : Mar 18 10:36:38 2025 GMT
Subject: CN=67adcb3a-0370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:81:a4:3d:6c:16:f4:82:3f:e5:c0:be:15:
ea:28:bb:59:48:da:8b:00:e7:1c:45:98:0d:4d:6d:
55:ae:82:d4:75:ec:d3:02:15:6d:4f:f3:b8:93:68:
6e:e8:f4:cd:06:d2:df:27:fe:b7:33:08:84:76:3c:
6a:1e:0e:02:bd:bc:84:2f:5b:ae:e1:de:54:be:70:
e6:f9:29:32:d5:a0:16:28:c8:50:b0:66:4d:ab:da:
99:de:c7:5d:f7:9d:92:59:f9:bf:fc:ab:65:5c:44:
50:a6:9e:70:28:6d:f1:46:2e:5b:9d:8c:b0:f5:6c:
71:29:6f:f5:b4:fe:96:44:3c:87:80:d7:55:81:53:
56:e2:cf:27:b8:61:9f:83:3e:3d:0c:3a:c1:05:b8:
1a:85:96:85:49:aa:b3:67:03:8c:a1:8b:79:0e:b2:
fc:e4:60:ad:78:45:5a:28:2c:8e:40:99:0f:c1:4b:
74:a6:c7:00:ae:d3:47:0a:ea:b3:d2:fa:a5:5a:fc:
15:eb:86:cd:f8:7f:10:c4:d6:db:a9:36:14:06:cb:
d8:1f:04:44:29:e9:68:c4:07:56:74:66:70:ad:1f:
31:7a:86:e2:7b:6f:8b:31:26:87:74:e8:12:ed:30:
e6:1f:a5:54:69:65:83:81:79:29:53:d0:a7:bb:dd:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:37:B6:34:02:28:EB:45:8F:FE:9B:3A:E0:65:8E:8A:16:C1:F2:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69BD93F0E9F611EF8C1C7B52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ed:26:74:11:ad:55:8d:59:af:45:a0:1d:db:15:ea:0a:1a:
e8:b0:d0:cc:09:c3:7f:8a:3d:c7:9a:2b:5d:1e:aa:bc:67:c6:
23:5a:8d:c9:38:98:de:2d:46:17:ff:3d:0d:13:f9:30:5b:8e:
0a:a2:89:ff:3a:df:7f:72:97:5c:6a:50:5f:24:21:ac:8b:eb:
5b:1d:33:cf:48:29:8d:01:69:3c:b6:6d:17:43:89:25:36:db:
8a:41:13:0f:9f:99:a3:6b:b6:56:29:f1:40:f1:dd:de:0e:07:
1a:ae:08:c8:23:a9:32:2d:ad:3c:5d:ae:df:8d:b1:4c:b5:8d:
b4:fe:01:a0:5f:4a:2d:ad:55:46:09:53:d5:0d:2e:1a:69:cd:
9f:3c:30:20:9a:a0:d8:1f:02:9c:38:db:8f:c0:10:e7:5e:08:
d0:6b:06:0c:57:95:e0:a7:3e:61:02:a4:4b:14:8a:97:31:7b:
e3:2e:24:64:e5:4c:ec:c8:9e:00:14:b1:cb:35:71:a3:1b:49:
e9:17:77:d3:03:a8:35:fc:67:41:e7:d5:27:81:9f:15:eb:85:
4c:37:a2:5a:bc:b4:81:e0:2c:87:c1:92:87:fc:64:5a:cb:8a:
27:4a:41:12:c9:54:81:5e:fc:f1:31:66:95:66:ff:1b:0d:08:
bd:ea:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:08 2025 by rpki-client