Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/715DDFE003F811F0AB1AE468762E951A.roa
File: 715DDFE003F811F0AB1AE468762E951A.roa (raw, json)
Hash identifier: 6JTAjJEJpirvRV9YU63QJctgFHeEBXIM77oGtJAU5nA=
Subject key identifier: 68:9D:BD:05:5B:A6:FB:1A:B4:1F:CE:30:F1:D3:C2:96:6E:CF:42:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/715DDFE003F811F0AB1AE468762E951A.roa
Signing time: Tue 18 Mar 2025 12:56:44 +0000
ROA not before: Tue 18 Mar 2025 12:56:40 +0000
ROA not after: Mon 05 May 2025 12:56:40 +0000
asID: 48031
IP address blocks: 156.236.22.0/24 maxlen: 24
156.236.23.0/24 maxlen: 24
156.246.140.0/24 maxlen: 24
156.246.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83651 (0x146c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 12:56:40 2025 GMT
Not After : May 5 12:56:40 2025 GMT
Subject: CN=67d96d8c-fe6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:d2:6a:06:ad:6d:15:0d:e7:31:61:1c:21:
9b:c3:e2:ea:e1:a7:fc:e4:90:6a:4e:8c:c7:01:fe:
6c:a3:25:b1:43:71:2d:be:e0:58:3b:39:3e:1b:e9:
72:92:e4:23:2d:43:f4:ff:93:05:13:1c:09:a5:2f:
37:38:18:81:62:25:74:52:ed:c6:1c:4c:1c:fd:80:
14:ff:ec:3c:96:17:e8:35:71:95:19:11:b1:5e:67:
65:06:e4:1d:65:ce:8e:2b:eb:98:1f:9c:20:65:4c:
4c:0a:fb:4e:f6:14:bb:49:32:2d:9d:02:0b:ef:70:
22:9f:ca:ce:57:0a:56:89:e9:d5:3d:a4:74:ef:e6:
01:02:bf:13:47:8a:09:d6:85:62:a2:14:e2:b6:19:
56:15:81:57:3b:9b:4c:14:e0:ea:e2:8f:91:45:11:
5f:6e:77:39:8f:6f:17:09:a9:d6:41:d6:40:5a:ba:
37:ae:ab:04:6e:c8:d2:bc:ad:f3:a6:44:5d:39:6d:
1a:b1:a5:bd:4b:95:e4:38:55:e5:df:81:df:8c:4b:
8a:b2:8a:56:f7:d1:d5:59:e7:be:66:4c:2f:f8:08:
4d:9a:02:2b:81:27:bb:ea:88:c4:af:34:2e:14:03:
d6:d0:ef:2f:9a:3d:31:9a:69:f2:3a:57:79:ed:a9:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:BD:05:5B:A6:FB:1A:B4:1F:CE:30:F1:D3:C2:96:6E:CF:42:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/715DDFE003F811F0AB1AE468762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.22.0/23
156.246.140.0/23
Signature Algorithm: sha256WithRSAEncryption
67:d3:d1:c0:07:42:05:2b:3d:ea:ac:89:ee:b5:54:51:33:e6:
db:52:45:0e:9b:50:49:3c:cc:14:d9:46:6d:39:0b:f7:fe:0a:
9b:4b:35:4a:73:fe:b7:f3:a7:ac:18:5c:de:d0:90:b0:c8:38:
d2:2a:3b:8e:14:d9:c8:1f:60:dd:bd:96:70:09:9f:63:05:6f:
d3:60:20:3a:41:cf:17:0f:05:fc:ae:39:8f:b7:f3:2f:30:12:
e9:1b:cc:b2:a1:70:60:4d:61:a8:75:5a:30:f4:13:c8:a7:39:
68:36:a3:b0:08:c1:e3:e9:11:fb:c2:52:95:58:0c:8f:1e:ea:
88:e7:f5:f7:66:66:15:70:73:8a:33:e6:21:ee:b2:56:27:7f:
39:f5:ea:89:f9:9e:4a:7e:3d:92:7d:37:b8:12:5b:28:7e:22:
d1:49:04:66:63:37:49:bb:49:7a:4f:1f:bd:76:30:15:a9:02:
14:0e:71:75:a7:bd:e4:07:1f:2b:27:5f:c1:3f:27:49:2a:d1:
d4:f4:d3:7b:1c:88:ec:e7:3c:13:8f:8f:c3:c5:61:2f:0d:cb:
df:d0:1d:8c:9e:9f:2f:eb:ab:12:d5:5d:b6:7e:ed:b5:f3:03:
f0:17:40:3f:8e:a9:03:97:ac:59:73:53:5c:f9:64:09:8c:2a:
e6:0f:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:53 2025 by rpki-client