Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6B0AEAAE9B511EF88CC31AC762E951A.roa
File: A6B0AEAAE9B511EF88CC31AC762E951A.roa (raw, json)
Hash identifier: Iz39nha7gzvGXBPWbp/aIyLgPweTXNg0IV1CGPtlLQ4=
Subject key identifier: 43:34:E0:5C:6B:82:BF:8D:46:D4:9B:30:37:7B:19:16:C0:C7:59:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0121AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6B0AEAAE9B511EF88CC31AC762E951A.roa
Signing time: Thu 13 Feb 2025 02:53:07 +0000
ROA not before: Thu 13 Feb 2025 02:53:03 +0000
ROA not after: Wed 31 Dec 2025 02:53:03 +0000
asID: 17561
IP address blocks: 156.236.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74154 (0x121aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 02:53:03 2025 GMT
Not After : Dec 31 02:53:03 2025 GMT
Subject: CN=67ad5e93-79df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:42:34:0f:cf:d5:6d:fc:98:b6:2c:cb:b2:
7c:03:e7:a5:b6:52:1c:62:24:3e:65:f7:e2:f7:8b:
e2:92:b8:47:85:aa:bd:8f:31:fd:27:1b:5c:9d:ae:
6d:65:a9:07:f8:5d:ed:10:0e:8a:58:7c:c0:8c:53:
97:cc:4c:c3:3e:51:6c:9a:b6:20:55:7d:06:6b:56:
25:c6:e9:6b:5e:e1:cb:b3:59:1f:72:80:5f:35:55:
77:05:08:4b:fb:f0:b0:d9:64:e4:7f:0e:49:66:08:
e6:01:97:47:4b:c1:e8:cd:f9:29:48:3c:98:64:9d:
b9:64:8c:6c:29:3b:93:e2:b3:ff:7e:b7:4d:b9:a7:
07:76:52:39:84:02:d8:ff:f0:a1:26:64:d5:5f:97:
5d:0d:3f:72:e1:01:f2:bb:68:52:4a:36:67:be:e6:
e3:9c:99:42:2d:e8:cd:c2:95:eb:18:5a:23:30:c3:
a7:4f:51:27:54:56:34:a7:35:39:c8:d6:33:7a:62:
cb:4f:2f:85:be:a4:38:47:98:bf:12:e8:b3:02:53:
0e:d1:91:d4:ee:06:45:08:57:3e:dc:ee:15:7f:6c:
7d:52:08:d2:45:90:05:01:1d:d2:0b:ef:12:3b:26:
a2:65:85:49:63:f1:38:84:4c:c3:f9:07:3c:c8:3a:
97:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:34:E0:5C:6B:82:BF:8D:46:D4:9B:30:37:7B:19:16:C0:C7:59:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6B0AEAAE9B511EF88CC31AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.36.0/24
Signature Algorithm: sha256WithRSAEncryption
53:69:da:41:0b:20:70:c3:83:4a:7c:ab:99:27:f1:0f:67:f2:
72:7e:ef:71:ff:ea:52:3d:20:ad:58:30:78:1e:a7:d4:aa:3e:
73:a0:da:a3:0d:0f:7a:40:1a:07:3e:71:95:cb:e1:7b:60:c7:
24:8c:a0:0f:82:ba:62:b5:7a:21:0e:1c:8b:89:ce:09:18:a6:
99:b9:76:3a:da:29:b6:ae:39:3e:ea:c0:81:3a:30:0f:ee:ec:
04:42:1c:60:7b:f4:b9:9a:ed:97:e8:f0:92:8d:aa:6b:a5:3a:
74:c8:d5:f6:80:32:c9:7d:29:e1:b8:22:d8:40:b5:19:85:a5:
3e:01:23:f8:d6:66:ca:f1:dc:1d:84:9e:97:7c:9b:ac:07:af:
d4:fa:32:0e:a2:d8:00:d8:49:8b:33:cf:2e:96:ba:1c:b7:60:
53:e8:0f:b9:8c:29:9b:28:14:27:85:6b:ec:68:92:99:90:84:
81:bb:78:7d:ac:1a:87:91:61:22:08:7f:f0:49:82:02:52:a1:
bd:e2:21:da:3d:9f:44:98:02:75:56:c0:24:74:88:ae:72:f8:
67:97:75:ef:d1:67:77:b3:9c:cc:3f:98:18:be:6e:5d:05:1c:
48:0a:2e:b8:82:a1:5f:e2:12:53:9f:8f:f4:9b:78:2c:af:f5:
be:2a:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:59 2025 by rpki-client