Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB270FBCFFE711EFAF740F59762E951A.roa
File: BB270FBCFFE711EFAF740F59762E951A.roa (raw, json)
Hash identifier: +f9oDTl2quQ13g6qYsYix0Wqzj4Nxd0KGqKdCanB4Uk=
Subject key identifier: 4A:4A:A1:CE:60:5D:9F:E2:3D:CF:43:C7:7B:BE:F3:57:EE:26:E4:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB270FBCFFE711EFAF740F59762E951A.roa
Signing time: Thu 13 Mar 2025 08:47:01 +0000
ROA not before: Thu 13 Mar 2025 08:46:57 +0000
ROA not after: Fri 09 May 2025 08:46:57 +0000
asID: 138415
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83370 (0x145aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 13 08:46:57 2025 GMT
Not After : May 9 08:46:57 2025 GMT
Subject: CN=67d29b85-0cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:ff:30:2f:a3:08:04:22:68:27:a8:34:fc:
ad:4b:13:dd:db:73:b5:61:aa:e4:61:b3:cd:80:78:
5b:a8:d8:c7:04:a6:38:33:a9:a2:63:c0:37:85:2b:
e5:d7:1f:92:1f:b5:e5:6d:3b:4e:0e:a5:06:f0:10:
4c:00:b3:84:af:fa:10:56:ae:cf:0a:04:6b:2e:8e:
7c:62:47:4b:a2:57:fc:8c:ca:1b:b0:e2:b7:89:4d:
9c:e7:18:18:81:6e:f8:18:2d:3b:c1:a0:02:b0:1e:
d0:f1:49:36:bf:e4:98:9a:de:81:50:c3:5c:a0:30:
aa:a5:c6:ab:97:12:13:99:a7:6b:d3:6c:7c:1c:71:
42:dc:f5:88:06:bd:e2:60:82:74:df:8a:d1:b8:b4:
86:f4:19:2c:4d:1a:fd:88:6c:10:56:66:83:bb:0a:
ac:7c:de:77:b2:b8:4a:90:fd:ae:13:02:a4:2f:c7:
ff:e2:68:f1:f7:c0:5c:1b:d6:5b:13:b1:fd:61:de:
4f:74:10:e4:ca:b8:8b:42:ac:a5:83:aa:e2:b4:c1:
d5:9e:6e:76:e5:a5:c1:e4:bd:f0:7e:07:6f:65:99:
49:0b:df:52:e5:ae:32:c4:13:84:e6:a2:dd:53:5e:
fc:79:02:97:dc:dd:f5:9b:38:bd:ad:c0:27:69:ba:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4A:A1:CE:60:5D:9F:E2:3D:CF:43:C7:7B:BE:F3:57:EE:26:E4:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB270FBCFFE711EFAF740F59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:ee:3d:d8:56:2b:55:49:41:2a:85:4e:db:b7:51:ec:cd:ff:
a1:cd:e3:ef:1b:f3:ce:e5:bd:cc:6b:a6:67:49:f3:f1:b1:da:
b9:f5:90:23:70:98:fc:22:33:31:44:39:3a:84:03:58:91:6c:
4a:8e:4a:ab:1a:cb:f0:91:19:2c:0d:b9:a8:39:14:6d:89:3b:
fb:0d:44:ee:11:a2:fe:c8:93:6b:53:29:ce:93:8b:e5:ca:78:
d4:e7:c9:75:5d:1e:19:b4:62:ee:2b:db:33:40:7b:af:87:e0:
a2:68:bb:e4:a2:9b:fa:1b:6b:57:87:a7:c3:61:5c:32:0b:c1:
52:42:39:94:c3:79:fd:50:cd:88:56:dc:6d:0b:e9:83:e5:e4:
b1:66:17:44:6b:fa:7b:ae:a9:71:a5:d3:a4:e0:8f:a5:9f:4f:
ad:fa:80:b7:91:3d:14:4e:61:5e:71:82:ba:fb:38:ba:3d:93:
4a:b6:7c:26:a1:15:08:e3:0b:b1:65:3f:49:7e:f1:15:91:c0:
52:7f:70:5d:c7:fb:29:e7:b6:b2:c3:bc:78:b2:60:73:55:fb:
b8:f2:db:6b:a3:c5:3c:e4:fc:df:4d:a5:7a:b3:86:b2:90:58:
5a:b1:3a:d3:12:54:bb:4a:a5:32:76:9e:7c:ce:7b:35:5e:a7:
0c:94:ae:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:56 2025 by rpki-client