Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA4EF678F46E11EFB4AB168D762E951A.roa
File: CA4EF678F46E11EFB4AB168D762E951A.roa (raw, json)
Hash identifier: oZQN2Y8UeJSSDkeBKAhMcV+uAvsgNfq10KRJnIVWFig=
Subject key identifier: 88:D7:73:63:DC:4B:8B:2B:C6:3D:9D:8D:05:38:DF:3A:58:0C:C4:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013655
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA4EF678F46E11EFB4AB168D762E951A.roa
Signing time: Wed 26 Feb 2025 18:23:35 +0000
ROA not before: Wed 26 Feb 2025 18:23:31 +0000
ROA not after: Sat 19 Feb 2028 18:23:31 +0000
asID: 17561
IP address blocks: 156.233.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79445 (0x13655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:23:31 2025 GMT
Not After : Feb 19 18:23:31 2028 GMT
Subject: CN=67bf5c27-f9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d2:b1:74:ee:38:f6:f2:85:bd:28:26:50:c5:
63:dd:7a:02:27:9a:99:ee:75:05:17:9b:f4:dc:fd:
af:fd:29:5d:46:5c:37:ba:b1:93:f7:2f:9a:bc:14:
c3:70:1a:b1:da:c9:27:5d:ce:f9:74:13:de:0c:de:
04:a6:70:7e:e4:f7:11:76:6e:17:7d:e5:31:6a:84:
78:63:f9:0f:67:64:ac:19:eb:d5:b6:a8:6b:9a:6f:
69:48:bf:b8:20:9f:f6:82:eb:f0:5e:74:2d:5b:ca:
69:52:79:89:de:7e:79:03:2a:84:92:a7:19:c6:f7:
1a:d5:09:de:da:67:5b:c3:7a:e6:f0:55:92:94:c9:
d4:96:98:34:55:61:a9:98:e1:a5:ec:14:8b:3b:e4:
96:1c:d0:99:7e:f1:1d:9c:e7:dd:49:a1:b1:d3:cb:
bd:f3:5c:38:00:4c:0f:a3:43:1b:06:e5:c7:cb:14:
d6:95:4c:fb:bf:b5:8e:4e:46:f2:96:75:f1:2f:95:
ca:1f:fb:2a:db:4b:ad:09:ba:c7:24:74:0b:1b:f1:
f3:b5:c3:65:b1:06:29:cb:aa:11:ee:be:80:6b:bb:
1c:0c:32:a3:be:39:bb:54:9f:57:be:1b:d8:4b:06:
9f:a2:53:01:6f:fb:c7:5c:6c:2e:82:1c:01:31:d4:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D7:73:63:DC:4B:8B:2B:C6:3D:9D:8D:05:38:DF:3A:58:0C:C4:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA4EF678F46E11EFB4AB168D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.198.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d9:e6:dd:12:66:93:c4:bf:22:22:89:7d:64:9e:44:02:34:
0a:4f:2e:bf:08:49:3d:61:18:8d:46:82:ae:2a:91:4c:4b:d3:
6d:16:1a:fc:60:60:69:ba:35:ff:40:06:f8:1d:0f:ea:17:aa:
24:a2:a6:01:db:26:fb:9a:a2:e5:5a:19:e1:f0:1d:aa:d3:d6:
75:93:a9:76:02:e4:58:91:b2:59:47:1d:ee:0b:a0:88:34:2b:
dd:c1:f9:6c:d4:f8:c4:f5:5f:c4:ba:db:a4:f3:38:8e:db:bb:
63:d5:ed:5d:1e:eb:02:4e:83:f7:84:bf:20:d9:0d:5c:e5:86:
78:07:21:e8:89:06:b1:a2:1f:de:8e:91:92:4a:86:de:cb:98:
6d:02:8f:01:25:87:1d:10:31:8a:e2:62:c3:6b:f2:50:cc:6a:
ae:f1:fe:99:9f:ad:ae:6d:e6:cb:3f:12:9f:de:ce:e9:58:95:
45:5a:f2:7c:ab:97:1a:7c:6c:02:83:35:86:da:8c:a2:85:9d:
96:87:91:3e:4f:94:40:af:92:65:69:c2:49:1d:94:e9:89:cb:
24:d4:5b:85:d7:2a:10:f7:2c:48:e5:8f:4d:b9:3a:51:69:b7:
61:7f:88:59:2f:1a:fd:4c:bf:e6:66:38:3f:97:02:23:b1:d2:
3d:3f:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:55 2025 by rpki-client