Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6E29F02F47111EF9471CDA0762E951A.roa
File: F6E29F02F47111EF9471CDA0762E951A.roa (raw, json)
Hash identifier: KlGyxdsZGSFmic1Ve9vVEsr4wJuBDSTIf5BwDVqv5Vs=
Subject key identifier: D2:07:0C:7D:4B:B7:85:17:B1:C9:A5:FD:35:7F:7E:50:83:16:38:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013699
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6E29F02F47111EF9471CDA0762E951A.roa
Signing time: Wed 26 Feb 2025 18:46:18 +0000
ROA not before: Wed 26 Feb 2025 18:46:15 +0000
ROA not after: Sat 19 Feb 2028 18:46:15 +0000
asID: 17561
IP address blocks: 156.233.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79513 (0x13699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:46:15 2025 GMT
Not After : Feb 19 18:46:15 2028 GMT
Subject: CN=67bf617a-c199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:a3:b3:84:ac:5b:95:8b:fa:16:c4:bc:f1:
47:4d:44:00:d9:4e:9a:c5:b1:de:54:86:58:36:4c:
41:14:e3:58:4c:d5:cc:85:c1:e6:c7:58:22:8d:2d:
b3:83:56:ed:f8:1a:1c:f5:d1:51:e6:65:d3:97:d5:
b8:b6:4e:4e:fa:64:26:d0:46:30:48:91:a3:b3:cd:
40:af:73:cb:1c:c9:e3:a6:0f:35:3e:e3:42:85:6f:
d4:b3:b5:ca:17:c9:0b:8e:74:58:ac:85:35:05:81:
bd:1e:b1:e6:15:23:60:32:5b:c2:3c:39:6f:8c:89:
af:09:10:0c:51:04:28:c5:60:98:b7:36:b8:56:1e:
c5:31:39:a8:e9:d8:65:ae:ab:8e:8a:c8:c9:32:1b:
f5:59:44:3b:df:1d:b6:fe:e3:1f:61:b4:db:b2:da:
7e:f1:84:cc:a5:34:1a:f4:2c:ce:4d:58:1f:94:73:
3a:e3:c4:d4:81:c8:a2:c3:e5:d9:5c:70:e2:4f:13:
f0:1a:83:45:71:86:5c:60:4d:43:4c:67:47:59:84:
f9:e8:28:c0:bf:82:5b:6b:90:54:18:6b:3b:44:b7:
60:02:62:a8:cf:86:4b:4b:23:97:da:5a:59:56:35:
bd:ec:96:ac:8e:2c:17:a1:9f:11:7d:32:de:4c:25:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:0C:7D:4B:B7:85:17:B1:C9:A5:FD:35:7F:7E:50:83:16:38:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6E29F02F47111EF9471CDA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.239.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b2:45:55:30:97:c8:78:5a:bd:ef:6b:fa:fc:29:0b:3a:aa:
2c:ea:12:3b:e3:28:ef:a6:98:41:d4:22:9e:96:d4:5a:1a:4c:
b2:0f:24:6a:63:db:05:1b:a7:ba:e3:c0:c0:b1:34:d9:06:50:
97:75:0e:59:01:38:6d:36:4f:76:11:0e:ed:0c:80:df:23:ae:
a2:9f:00:27:74:22:a4:90:69:0b:e7:a5:0a:5d:0c:2a:3b:9d:
23:9c:54:fa:35:88:0f:84:a6:20:0d:3b:d4:15:21:61:cd:ae:
12:71:d1:88:5d:e9:29:5e:e1:6b:39:f9:a1:3e:3c:07:e4:76:
da:7e:3d:44:df:1d:05:a8:84:4e:8d:b6:95:ab:6e:51:b0:b2:
ee:21:a6:fd:63:a0:7f:97:5f:b0:2c:ec:cc:dc:46:61:0a:03:
bc:94:7e:bf:4d:20:5a:ee:20:ac:56:02:cc:18:63:3f:03:ba:
0e:1f:be:ce:25:73:e0:60:07:cf:6c:3d:dd:cd:b2:7a:da:d8:
06:34:65:2b:94:2f:d9:ef:14:32:aa:8a:36:b3:f3:07:85:c8:
bb:07:26:83:d4:02:e3:0a:5d:bc:7f:ca:af:cc:5d:8f:48:74:
71:81:a9:0c:cc:b4:61:05:88:0b:ef:84:71:61:4e:e3:f5:ff:
58:80:f4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:46 2025 by rpki-client