Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90180C58F47111EFB6620CA0762E951A.roa
File: 90180C58F47111EFB6620CA0762E951A.roa (raw, json)
Hash identifier: /Jujg2LztWfkRtNqUMlOslOejAEpwhKO0kDBbrV+bk0=
Subject key identifier: BC:6D:7E:2B:CA:59:29:5F:02:E1:75:A2:20:B5:B0:BB:D1:37:E7:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013690
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90180C58F47111EFB6620CA0762E951A.roa
Signing time: Wed 26 Feb 2025 18:43:26 +0000
ROA not before: Wed 26 Feb 2025 18:43:22 +0000
ROA not after: Sat 19 Feb 2028 18:43:22 +0000
asID: 17561
IP address blocks: 156.233.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79504 (0x13690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:43:22 2025 GMT
Not After : Feb 19 18:43:22 2028 GMT
Subject: CN=67bf60ce-eb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:ca:b7:37:f1:3b:11:44:fd:64:97:d3:0a:
c9:dc:bf:e4:5d:1e:74:1c:b2:c2:cd:9b:89:dc:58:
88:86:88:da:ab:cd:5c:ba:85:1e:86:1b:87:22:24:
df:ed:3b:c7:9e:e7:c9:d2:b3:d9:d2:b6:8b:e4:33:
08:7e:e0:37:55:16:84:7d:a7:4e:0a:c2:b5:75:69:
4b:14:2d:f4:36:ae:f4:e9:48:52:c0:b1:2d:b4:cd:
40:af:e9:97:7a:22:1f:39:02:77:64:9f:0b:de:1c:
a7:c7:55:e7:9d:c3:d6:56:ef:1b:b2:6a:2f:69:a5:
d0:b5:b9:53:c2:7b:53:74:0d:9f:e4:08:65:67:83:
b3:2d:50:be:09:60:9c:5f:42:72:5d:50:d3:65:0e:
ce:c7:57:e4:d1:23:75:48:ec:ff:f3:b9:e2:c2:35:
54:8b:6b:15:16:a3:84:e6:82:e3:06:c5:19:f3:c8:
c9:e1:46:00:0a:e2:88:7a:27:d8:00:05:ca:92:b4:
06:4c:3a:06:d8:d2:bb:50:f0:b5:ce:0d:5c:01:57:
21:68:b7:33:79:d3:ea:35:f5:1d:19:4e:2e:80:06:
45:e8:d5:3c:37:cd:53:9d:60:a6:12:fa:e7:0f:d2:
f8:f9:c5:49:d7:c5:31:25:93:79:36:f8:c6:30:16:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6D:7E:2B:CA:59:29:5F:02:E1:75:A2:20:B5:B0:BB:D1:37:E7:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90180C58F47111EFB6620CA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.236.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:23:e0:38:d2:ce:27:7a:c0:d0:b9:10:45:b3:97:c3:0e:4f:
92:82:ba:c0:a4:07:d3:b1:54:81:4e:f5:e2:58:b4:cd:db:c1:
5e:f4:f4:bc:6c:d2:18:99:4d:a1:f7:a1:0c:0e:dc:42:66:3b:
70:a9:02:9b:af:2b:3f:3f:f7:27:49:57:e8:b0:32:f3:42:38:
86:99:7e:e0:d8:07:ea:be:46:89:fb:2a:68:98:71:3f:b5:05:
9c:8e:95:f8:2a:95:84:3f:54:af:e8:35:7c:1f:53:f1:41:20:
cd:e3:14:69:cf:38:65:ad:bc:69:dc:b9:7c:3a:42:39:ae:13:
cb:a7:38:19:a8:58:da:19:88:0d:d6:e3:ef:cb:cc:7c:48:4b:
18:98:e3:9f:4a:15:92:12:ee:3e:1d:1f:33:f0:27:ac:73:50:
50:c2:8c:da:50:98:10:b3:0f:80:20:fe:3c:3e:9e:66:63:7b:
fa:2d:4b:68:24:db:e0:6e:b1:3f:72:2e:0b:ce:ab:9a:b5:2f:
e2:e5:f3:a3:19:03:d1:60:d9:cc:c1:fe:dd:91:0a:1e:d8:ad:
16:b9:aa:7f:86:29:91:de:7f:18:8c:56:e9:ce:b6:91:05:78:
8e:e2:e3:e6:f8:92:a6:91:21:ad:7f:a4:27:39:48:3c:86:b9:
92:4f:87:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:53 2025 by rpki-client