Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97FEFB5CF46211EFB60CBCB5762E951A.roa
File: 97FEFB5CF46211EFB60CBCB5762E951A.roa (raw, json)
Hash identifier: CLc43zuKNs7hn6AeodJa/rmS+u26rp13OhUTaAchF+s=
Subject key identifier: 83:62:F1:BD:7F:0D:9E:3F:25:FB:6C:08:61:B6:5A:35:1E:0F:D3:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01353B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97FEFB5CF46211EFB60CBCB5762E951A.roa
Signing time: Wed 26 Feb 2025 16:56:17 +0000
ROA not before: Wed 26 Feb 2025 16:56:13 +0000
ROA not after: Sat 19 Feb 2028 16:56:13 +0000
asID: 17561
IP address blocks: 156.233.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79163 (0x1353b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:56:13 2025 GMT
Not After : Feb 19 16:56:13 2028 GMT
Subject: CN=67bf47b0-8a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:e6:d3:f2:d2:39:8c:fa:6d:09:01:24:8e:
f1:f1:20:dd:96:2f:37:c1:de:6d:db:d4:53:a1:01:
3e:86:50:33:e1:0c:8d:09:1c:62:8e:84:f8:49:fe:
3c:a7:dd:21:11:14:27:17:fa:bc:b5:52:63:7b:c7:
4d:4d:78:72:f5:a9:5d:8b:de:9a:32:7f:86:0d:7a:
8f:11:0a:c8:70:ff:ca:22:1e:45:3b:c7:9c:39:79:
94:d4:05:34:a1:3f:19:9f:55:58:d5:52:e8:c7:21:
b8:e9:bf:61:85:e7:93:a4:89:b1:75:f9:c7:e7:aa:
b2:1a:60:ca:da:7a:01:98:81:67:38:61:7e:a7:06:
64:15:2f:79:5e:0b:86:0d:b7:57:31:5a:81:ed:97:
3e:cf:79:ed:d8:6e:61:c6:c0:64:32:29:1f:d7:43:
a0:39:b1:c5:1d:b0:22:84:f0:97:d7:65:90:a1:94:
b9:7e:2a:13:2e:0a:95:ac:dc:83:52:bd:7e:9f:b6:
3e:b6:51:f0:02:b4:cd:5e:70:b8:d6:66:e5:1f:cd:
6f:61:9a:70:00:c6:90:e2:dd:3c:99:14:e7:83:8a:
55:60:16:75:2e:b5:ac:05:07:6d:23:bd:da:1f:84:
cc:de:fc:1f:24:bd:81:00:0a:fb:87:df:03:c4:d3:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:62:F1:BD:7F:0D:9E:3F:25:FB:6C:08:61:B6:5A:35:1E:0F:D3:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97FEFB5CF46211EFB60CBCB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.44.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f6:50:da:c9:9f:01:bf:59:bf:a5:18:1b:df:b4:bb:83:78:
4e:8d:4c:08:91:65:5d:56:cb:bb:5f:b7:16:f2:fe:81:b1:56:
aa:f5:fb:7a:b2:8d:09:d2:62:dd:0b:ac:c3:4b:98:6a:a6:38:
7e:38:e3:5b:05:db:04:25:04:38:3c:02:3f:0f:8b:2c:ec:51:
0e:3c:01:ef:ec:a9:a4:46:ed:c0:a2:da:04:9b:3b:7f:b5:8d:
b7:a1:57:62:d8:90:58:e3:e8:86:10:e7:da:73:75:f8:27:ec:
25:71:38:79:b2:3f:82:5f:27:8d:a9:35:33:f5:a2:fd:15:63:
df:ca:5d:74:f9:49:c0:f5:ea:41:c6:fc:c2:f2:a2:07:34:0c:
6d:d9:d5:f1:9d:d2:1b:30:c2:12:ce:57:1f:2e:1b:2a:03:6b:
c7:d3:b8:85:64:f9:5c:40:7a:8a:55:86:1e:c9:02:37:ed:df:
ec:93:e6:ee:8e:fb:ae:2f:99:e7:23:bd:f7:cb:d8:c5:ef:fa:
c4:fa:78:e3:43:e4:56:a2:15:5c:72:d4:0e:89:29:f6:da:be:
97:33:0d:48:1a:98:8f:d0:e6:f0:a7:79:70:17:2b:fc:df:d4:
6e:63:af:94:0d:f5:bd:75:93:0b:1a:64:7c:b8:4d:bc:bd:32:
17:a8:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:56 2025 by rpki-client