Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBF653D6EF2711EF853C6B8E762E951A.roa
File: DBF653D6EF2711EF853C6B8E762E951A.roa (raw, json)
Hash identifier: XnY+B+kvG99ZRNi33YHNUYXE3Coq2UpIyIcA3ofe28Y=
Subject key identifier: 6E:AE:6E:81:0B:4B:80:3F:A8:9F:AF:6E:90:A4:2D:1A:24:DB:56:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01258F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBF653D6EF2711EF853C6B8E762E951A.roa
Signing time: Thu 20 Feb 2025 01:13:15 +0000
ROA not before: Thu 20 Feb 2025 01:13:10 +0000
ROA not after: Wed 31 Dec 2025 01:13:10 +0000
asID: 17561
IP address blocks: 156.236.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75151 (0x1258f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 20 01:13:10 2025 GMT
Not After : Dec 31 01:13:10 2025 GMT
Subject: CN=67b681aa-78c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:c2:80:63:c0:85:56:13:ba:5a:39:47:9a:
cb:7f:9e:3a:9b:51:5f:ea:74:5e:3d:81:51:44:3e:
4b:a4:1a:36:ff:54:50:10:36:20:78:bc:5f:7b:5b:
76:a0:8e:ca:65:79:8f:ef:7e:9a:94:e1:89:9b:13:
d8:61:0f:16:fa:bd:7f:bd:48:68:67:f2:32:c9:81:
c2:89:c2:a6:c5:73:0c:83:bf:16:f3:e9:0e:84:74:
a5:c4:5a:8c:90:5f:86:4a:53:96:d9:50:85:ff:48:
a2:14:8d:b3:56:df:e6:a8:a0:7f:9e:d8:f3:aa:2c:
a0:45:00:05:da:2e:af:5d:87:8c:57:a3:1d:d9:53:
b6:51:f7:f8:1b:10:37:ef:6b:b5:5a:54:b6:6b:1c:
7b:e9:a3:15:88:db:71:c6:ef:86:6d:f2:83:58:12:
ff:83:cc:c6:47:88:1c:b8:70:aa:79:83:42:43:dc:
72:cd:1a:60:78:44:4b:a3:ef:50:df:9e:1a:e9:a4:
1e:2c:d0:97:e1:90:fc:cf:18:b5:da:10:6e:55:82:
13:ee:40:6a:0e:fe:9a:e0:e2:2d:d1:1b:c6:3f:a4:
9c:a8:41:f0:54:c8:63:dc:59:d3:19:ee:1e:5f:fa:
ac:30:64:5e:76:05:3b:18:6f:f6:0a:c8:27:1a:21:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AE:6E:81:0B:4B:80:3F:A8:9F:AF:6E:90:A4:2D:1A:24:DB:56:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBF653D6EF2711EF853C6B8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1d:d8:c3:a2:b1:1d:95:2b:df:2d:fa:71:42:c4:ed:95:d4:
cf:70:fc:13:b5:40:27:04:bc:2c:b9:cf:d8:24:1c:92:57:b8:
de:f4:14:9d:93:13:55:a3:63:fa:c9:82:a1:2d:4c:a1:58:84:
5d:3b:20:b4:62:31:fd:84:fd:50:2b:8f:ed:6a:c4:88:6a:54:
ce:09:f4:eb:18:1e:8f:21:c8:e9:47:b6:4c:dc:9b:6c:23:d4:
d2:16:c6:b3:8d:48:7d:d1:da:b4:1f:dc:a7:ef:c2:13:b8:f3:
2c:ba:05:9a:36:3b:2e:fa:71:23:70:46:a9:c9:4c:fb:4c:ed:
f0:22:13:59:8d:4b:dc:a5:11:47:d7:92:29:89:3c:12:35:de:
60:4b:48:d8:f3:6b:f2:81:85:18:67:37:9b:c0:83:a9:32:c7:
88:1e:25:3c:ef:f6:60:e0:07:9a:0d:ad:bc:0f:61:ea:5b:c2:
5a:12:10:50:a2:f0:af:53:58:a5:c8:ec:1c:67:4d:ac:9d:74:
8e:77:95:36:e1:b0:34:11:44:2f:98:5b:87:55:ab:82:e1:c7:
76:50:39:49:73:aa:8c:60:73:3b:65:94:88:e4:00:bb:51:8d:
19:a9:c8:10:64:54:57:4f:2f:e9:14:a9:f7:df:06:f8:48:fb:
7a:3f:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:55 2025 by rpki-client