Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FA82CDAD58D11EF90038B56762E951A.roa
File: 6FA82CDAD58D11EF90038B56762E951A.roa (raw, json)
Hash identifier: kIcDq0IBgGGER/potDHWHWHKMm3Zcu2V1gxxZGqJJEA=
Subject key identifier: F6:9C:BA:C2:10:2D:8A:F2:8B:D8:3B:C9:7C:EC:FD:2F:09:81:B3:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BA1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FA82CDAD58D11EF90038B56762E951A.roa
Signing time: Sat 18 Jan 2025 11:14:51 +0000
ROA not before: Sat 18 Jan 2025 11:14:47 +0000
ROA not after: Thu 22 Jan 2026 11:14:47 +0000
asID: 63199
IP address blocks: 156.240.96.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68513 (0x10ba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 18 11:14:47 2025 GMT
Not After : Jan 22 11:14:47 2026 GMT
Subject: CN=678b8d2b-733a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:b4:df:09:9a:40:c2:66:df:57:3a:7a:22:
e9:ac:e1:c2:26:ec:31:c8:30:db:4d:d1:81:4a:16:
21:24:cf:21:7e:9d:cf:4a:86:2c:99:f8:ab:0a:b8:
cf:37:d0:fc:59:8b:09:57:4f:05:32:8a:ce:5d:6f:
95:71:3b:26:b7:4c:ee:d2:3b:1a:48:b6:08:44:30:
f5:c7:05:31:b5:49:40:8b:73:ea:e7:a1:6a:7d:11:
8a:d3:d2:e0:0d:8a:cd:4b:1f:a9:a9:e6:38:76:db:
a7:6a:ad:41:e5:c8:f2:0b:26:ce:83:ed:0b:7e:29:
cd:61:5b:53:da:a9:b6:49:20:53:0b:30:f3:6f:4c:
14:5f:c7:f5:49:7d:eb:3c:73:dc:a1:db:8f:96:39:
f8:7f:c4:49:72:b0:db:46:85:ce:4e:9a:b8:0b:67:
a1:1a:c2:70:d2:5b:b0:57:0c:e6:1c:c4:81:1f:c2:
bd:71:ed:a5:54:f8:d1:7f:ef:bf:24:33:f1:4c:5b:
7f:9f:15:a4:d5:47:ae:29:47:99:2f:e2:f9:51:25:
40:7d:27:d7:dd:81:e6:8d:9c:bd:46:ac:37:c0:95:
ff:c7:f6:59:30:31:bb:f3:b9:25:dd:22:54:a8:c1:
1e:02:19:c2:56:4c:d6:64:71:38:cb:a1:de:ad:6e:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9C:BA:C2:10:2D:8A:F2:8B:D8:3B:C9:7C:EC:FD:2F:09:81:B3:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FA82CDAD58D11EF90038B56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.96.0/23
Signature Algorithm: sha256WithRSAEncryption
02:0f:11:a6:47:4a:bb:30:d8:f6:ef:d7:aa:48:9f:bf:8a:3d:
2e:58:5e:b9:aa:7a:10:c3:ed:c0:43:5a:b9:d8:f0:fc:38:c3:
e6:db:8e:c1:c9:08:6e:d1:9f:bc:10:47:bf:97:0b:43:a3:b5:
7f:50:6c:fd:5e:93:0c:de:8e:f3:a3:bf:04:cd:b7:91:ff:a4:
9a:a7:dd:2a:65:11:2a:76:f9:7c:89:d0:72:70:c8:84:84:4d:
f3:6f:07:26:e1:79:12:02:f7:95:02:29:b2:f5:d8:c2:87:e3:
7e:ad:af:d6:fc:de:5e:27:11:36:90:37:21:f1:45:1a:fa:12:
d3:ea:a0:14:95:a4:43:ae:4f:1c:a4:87:52:98:94:df:62:76:
9f:4b:bd:76:34:a8:86:a6:52:cb:09:3e:e0:95:22:38:f0:15:
5e:6a:eb:f7:ad:0a:b5:9e:2e:ed:ff:47:aa:d8:59:78:db:ec:
03:eb:21:13:79:b9:22:12:a2:82:04:ae:ad:4e:73:6a:9d:24:
85:55:28:48:18:b7:1e:13:82:fa:f8:bc:d1:ea:de:dc:8b:80:
32:b9:fa:bd:36:d3:3c:c8:e0:79:4f:fb:dc:4d:cf:e8:d0:77:
40:1c:8e:2a:15:31:1b:41:ce:21:43:46:08:57:d9:f3:d4:23:
f6:a5:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:34 2025 by rpki-client