Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B6D518EF46B11EFBDA17474762E951A.roa
File: 6B6D518EF46B11EFBDA17474762E951A.roa (raw, json)
Hash identifier: XGfXnts+VxzwjiPTH+pdZ5z1PR6Hi7YzR+JUAsUCt0Q=
Subject key identifier: 88:71:E0:BA:2C:82:A5:8B:4A:18:5A:2C:AD:4A:90:05:87:78:27:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013605
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B6D518EF46B11EFBDA17474762E951A.roa
Signing time: Wed 26 Feb 2025 17:59:27 +0000
ROA not before: Wed 26 Feb 2025 17:59:23 +0000
ROA not after: Sat 19 Feb 2028 17:59:23 +0000
asID: 17561
IP address blocks: 156.233.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79365 (0x13605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:59:23 2025 GMT
Not After : Feb 19 17:59:23 2028 GMT
Subject: CN=67bf567f-2beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:2c:0d:70:1e:82:3c:f2:7b:f4:13:ed:a3:
6a:4f:d4:c8:8e:7e:b3:88:ce:8f:a9:cd:a5:b4:bf:
8e:1e:d0:f8:d6:a9:07:14:4b:4a:4e:6a:a6:7f:aa:
20:24:ce:ee:85:45:f1:76:45:b0:bd:c6:05:c0:08:
1e:84:fe:78:b3:4a:58:6b:de:c3:52:40:5b:b7:6f:
1e:69:64:0a:01:4e:08:06:2f:96:7f:7a:70:f5:3c:
35:77:51:d4:4c:d5:46:e3:55:75:3d:52:cc:b8:ec:
86:a3:4d:61:fa:20:8f:52:1f:5a:9b:77:a3:b2:14:
0b:45:8e:50:14:7a:0a:5c:0b:95:e4:e3:7d:1f:18:
27:00:cc:df:db:1e:04:c9:3b:cb:70:2f:ec:2f:0a:
80:a0:ab:65:f9:93:9f:cf:2d:77:28:0d:76:21:40:
13:48:f8:ec:54:99:9b:cd:73:f7:6e:ef:4c:22:c1:
99:72:1c:9b:ec:1c:11:1b:fe:c5:32:fe:5d:c4:d6:
65:88:b1:18:80:6a:c8:42:fa:7e:1a:b7:1c:81:0a:
60:18:8d:a2:d7:66:d1:8f:ef:a4:f1:6e:d5:e6:b2:
94:91:35:0a:a8:28:1c:1b:1b:20:2a:11:43:ab:cd:
68:7f:9d:ac:37:36:46:b9:f3:3e:dc:06:94:29:79:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:E0:BA:2C:82:A5:8B:4A:18:5A:2C:AD:4A:90:05:87:78:27:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B6D518EF46B11EFBDA17474762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ff:39:88:6b:97:2e:8a:11:f8:64:34:45:d4:b4:5a:77:e6:
08:2c:95:2b:bc:59:05:63:0b:89:ad:bd:e8:6c:67:f3:f3:e6:
4c:72:ba:9c:9c:c2:d8:4f:e8:72:50:eb:45:91:c9:9c:62:43:
61:84:27:de:b4:21:83:84:42:7a:7b:c9:36:e7:0e:71:79:5b:
d7:59:73:cf:95:41:83:c8:5d:85:7f:58:92:3a:61:82:34:82:
e3:99:38:89:e0:91:4e:52:40:87:28:3e:65:3e:15:47:10:53:
9e:40:ff:21:18:9d:36:f0:34:9f:6b:b8:2b:e2:16:e0:d2:86:
17:e9:54:68:5f:3e:bb:aa:6c:0a:21:d0:08:7a:6f:dc:ce:cd:
cc:59:29:09:31:46:89:e0:72:14:6f:82:e8:cf:21:0f:0b:88:
bd:12:46:aa:fc:76:7d:db:67:8c:e4:ea:59:84:fb:7f:de:2e:
8f:19:1b:95:4d:4a:29:43:15:16:e2:ce:1a:07:5b:05:ba:7c:
0f:32:38:32:f1:1f:3c:b0:a3:d3:ca:1a:8d:b8:bc:59:d9:af:
39:14:45:44:40:5d:a1:93:60:ac:1f:02:28:2c:08:d5:b7:8c:
a5:d6:85:10:0c:72:32:06:d9:b2:2d:24:4c:82:d1:db:0b:40:
8d:9a:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:02 2025 by rpki-client