Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FC0AAB8F47211EFB7E5F7A4762E951A.roa
File: 6FC0AAB8F47211EFB7E5F7A4762E951A.roa (raw, json)
Hash identifier: Ekj5quROYhVqvcR16Wmpl3HZO3Hz1pOYdWYhOuZap38=
Subject key identifier: 8B:A8:55:6C:27:2C:42:96:2A:15:A9:5D:51:E2:8B:99:B8:9B:B2:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FC0AAB8F47211EFB7E5F7A4762E951A.roa
Signing time: Wed 26 Feb 2025 18:49:41 +0000
ROA not before: Wed 26 Feb 2025 18:49:37 +0000
ROA not after: Sat 19 Feb 2028 18:49:37 +0000
asID: 17561
IP address blocks: 156.233.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79527 (0x136a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:49:37 2025 GMT
Not After : Feb 19 18:49:37 2028 GMT
Subject: CN=67bf6245-da90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:e6:2d:03:79:a1:3a:16:c3:d5:46:d8:ac:
db:f1:5d:de:b4:bb:8c:8f:bf:0c:06:20:e1:aa:73:
e4:9d:01:b0:cf:46:a1:0d:85:5c:77:51:b0:91:a4:
28:74:29:25:ed:60:c4:27:58:fa:91:5e:20:9e:cf:
f2:d3:d8:7a:04:ad:75:68:90:20:92:eb:c2:da:1b:
db:5f:92:fc:53:99:5a:bc:ec:89:dc:cc:4e:93:39:
3a:9d:7a:fb:b4:a7:23:98:4d:4a:3c:0b:48:87:42:
f0:7c:5e:d3:8c:15:90:54:3a:ad:56:85:ac:68:24:
61:4c:7e:f5:53:73:7f:32:aa:06:ac:6f:95:0c:85:
65:57:00:95:9a:b5:af:22:de:43:bf:16:8d:8b:cc:
4a:a6:c4:b0:f1:93:e5:39:8d:aa:50:3c:77:16:4d:
99:a1:26:be:56:6a:04:92:fc:38:9d:e1:62:af:18:
c7:03:9e:1d:f7:60:7e:eb:18:5b:e4:b9:a4:e3:5f:
94:f6:02:d8:21:60:b1:ce:85:b1:b9:f7:00:c7:25:
1d:b2:3f:02:2c:b4:27:50:07:f0:30:63:98:f2:bb:
aa:cf:a5:30:98:47:cb:c5:65:f2:dc:4d:2f:98:7b:
f3:39:bc:e0:a5:81:67:6b:cb:3e:24:29:1e:16:5e:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A8:55:6C:27:2C:42:96:2A:15:A9:5D:51:E2:8B:99:B8:9B:B2:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FC0AAB8F47211EFB7E5F7A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e7:76:05:61:2b:ad:84:fc:83:1c:99:88:8f:ba:ec:23:86:
ee:9e:55:f7:94:fc:be:74:0d:84:fc:3c:72:47:b0:34:76:c4:
8c:bf:d5:23:ea:ff:70:dd:fe:f1:2e:0b:fc:d8:71:db:ef:6d:
f4:62:ab:27:94:36:00:a3:dc:6a:34:2e:ff:01:0f:01:e2:73:
8f:a7:e0:7c:e4:03:97:84:9e:33:dc:15:89:1e:86:90:c1:d9:
b1:bd:09:b3:89:46:e7:31:f9:79:ef:3a:ea:e1:4c:9a:1e:5b:
cb:bf:28:1d:3e:5d:49:76:0d:36:d0:47:c6:08:42:e9:0c:61:
e5:04:d9:7b:7c:b8:ba:a1:75:3c:eb:88:e4:42:96:f8:ef:d1:
01:fc:a5:cf:c2:73:a7:ee:b2:1a:d4:15:90:1f:11:db:47:24:
bf:c9:7e:23:27:56:a9:3a:da:1c:70:a0:8c:6d:64:d3:e4:f1:
d2:0b:ec:0f:75:9b:30:fb:2d:c3:c2:4b:2c:6c:3d:df:f5:f2:
a5:37:9f:31:0c:98:00:de:c2:2c:d1:9b:e6:ae:0e:15:ff:2b:
86:f4:75:cb:15:dc:58:aa:13:1a:9a:07:f4:cc:6a:6d:45:82:
c7:78:6a:1d:db:85:52:71:83:d1:1a:39:0f:7f:b3:1a:c1:01:
da:b8:e4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:33 2025 by rpki-client