Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73EB5360F46611EFB4334F53762E951A.roa
File: 73EB5360F46611EFB4334F53762E951A.roa (raw, json)
Hash identifier: /Q/HGsX0mJo74GZGtTTtdgcyqXP1f3u5EBlmJPTSka4=
Subject key identifier: EC:95:E6:C7:A6:21:AF:CA:87:8D:53:0B:F2:A8:EB:9A:8B:8D:48:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01358C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73EB5360F46611EFB4334F53762E951A.roa
Signing time: Wed 26 Feb 2025 17:23:54 +0000
ROA not before: Wed 26 Feb 2025 17:23:50 +0000
ROA not after: Sat 19 Feb 2028 17:23:50 +0000
asID: 17561
IP address blocks: 156.233.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79244 (0x1358c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:23:50 2025 GMT
Not After : Feb 19 17:23:50 2028 GMT
Subject: CN=67bf4e2a-91d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:d2:d0:cc:2a:d8:30:8b:a9:34:24:55:1c:
9d:a3:c9:6e:6f:73:0d:d0:31:f7:f0:ba:58:b6:5f:
ee:1d:f5:50:5d:36:26:94:10:12:06:37:a5:2e:07:
4e:be:91:94:9b:69:94:77:ef:f2:a7:24:03:86:10:
c1:79:6a:bc:f3:59:a3:c8:ef:02:9b:ea:ca:43:d1:
1a:7e:28:1e:3f:44:5a:44:8d:15:f0:42:e6:a8:40:
72:e1:89:3b:01:93:c4:04:7e:45:57:fe:29:d7:90:
4d:a2:dd:9b:0f:ee:b5:c4:6d:c2:0d:f7:f6:dc:d9:
4d:99:46:0f:6e:63:fb:57:98:a8:1b:45:64:73:54:
b6:70:17:00:7a:5c:08:e5:32:d7:34:c1:32:15:fb:
fe:ff:55:8f:11:2a:44:a0:b2:3e:5e:f1:88:01:bc:
fb:e8:4b:63:24:eb:03:99:45:d1:48:22:12:6a:12:
86:64:b3:e3:54:1c:0d:25:15:96:0c:71:ac:84:a2:
da:b1:a3:e6:09:5c:7c:27:4d:de:3c:b7:3e:01:14:
11:45:0f:32:35:33:f1:57:7d:5c:16:2f:46:e4:cb:
23:23:ba:db:7e:37:64:a8:b3:a5:36:0e:b1:93:bc:
41:dc:60:fb:9a:b4:a6:32:56:6b:e2:28:5d:01:97:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:95:E6:C7:A6:21:AF:CA:87:8D:53:0B:F2:A8:EB:9A:8B:8D:48:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73EB5360F46611EFB4334F53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.76.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c8:f9:84:30:ab:f6:9e:e3:5d:6c:31:7d:f6:4d:11:66:5f:
c7:05:1c:62:45:bc:e6:f3:2c:71:db:bd:bf:64:87:4e:bd:17:
6c:29:56:44:85:4a:dd:22:52:50:42:ab:de:21:b6:06:63:b9:
5a:ce:c5:d1:3b:ea:6c:cb:3b:c4:0b:66:df:08:ce:07:be:e5:
e2:5a:71:38:89:a1:ec:48:57:85:62:60:d6:5f:57:16:a4:69:
cd:11:25:e9:ce:06:15:e2:47:68:26:3d:30:95:f9:d8:ff:ff:
12:54:c7:76:e5:06:a7:46:48:28:c9:e7:d5:c3:f4:1f:76:df:
78:d3:c1:72:d9:ad:40:9f:ae:31:7c:0d:a2:39:f1:1f:a2:57:
08:e1:6f:94:a8:3f:6a:36:35:eb:7e:f3:d4:26:ff:03:63:dd:
a0:05:f7:d8:d0:a0:bb:02:d3:fa:a5:16:31:8a:9f:dd:ec:02:
97:52:55:ba:1c:97:92:ab:43:80:24:20:0a:3b:b1:57:5c:e3:
d4:b3:63:30:e5:09:a6:11:28:1d:c9:e3:48:3f:3d:b1:f8:38:
2a:ea:4c:b8:4e:a5:a1:c4:f3:4d:7a:ee:c2:2a:18:21:ba:d6:
63:4b:6d:02:05:4a:4c:c6:69:d8:88:90:b6:95:f1:7f:78:f5:
fd:07:6a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:38 2025 by rpki-client