Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25500FC4DA6D11EF80D7EB97762E951A.roa
File: 25500FC4DA6D11EF80D7EB97762E951A.roa (raw, json)
Hash identifier: z06Sct/4ADR+xhzU/m3Hzpva7ijyFHm9+iWTQaH2G2E=
Subject key identifier: 0B:58:84:E8:6B:98:16:AA:0F:5F:71:3B:F3:C0:F1:D9:70:35:FD:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25500FC4DA6D11EF80D7EB97762E951A.roa
Signing time: Fri 24 Jan 2025 16:06:18 +0000
ROA not before: Fri 24 Jan 2025 16:06:15 +0000
ROA not after: Mon 03 Mar 2025 16:06:15 +0000
asID: 203020
IP address blocks: 156.225.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69534 (0x10f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 16:06:15 2025 GMT
Not After : Mar 3 16:06:15 2025 GMT
Subject: CN=6793ba7a-a82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:10:c6:f8:5d:a7:2f:97:33:45:8f:b9:84:
43:31:5b:83:76:f1:3d:81:02:9b:05:9b:df:06:ca:
68:9e:97:25:c3:db:1c:8f:99:cf:20:6f:9a:f0:6e:
ea:f2:fc:06:ab:e8:66:c3:e4:54:a8:11:b1:71:f0:
0a:70:c3:5e:c8:cb:30:b9:4e:7b:cb:dd:2b:98:26:
f7:98:7d:cf:86:35:c0:75:a3:b0:de:7c:b5:ef:83:
d5:b1:ff:63:d9:c6:65:40:5c:d7:a8:56:4e:26:7e:
16:b3:35:07:d4:09:d5:d9:21:e6:70:d3:ab:fa:f4:
70:38:d7:8c:24:fd:06:0c:fc:a3:0d:01:5f:d0:02:
19:0d:64:79:8f:c1:7b:18:e5:ed:6d:17:0d:fd:dc:
bc:e8:8f:7e:ed:96:4e:ef:0c:6f:7b:47:72:2d:23:
10:44:ab:6e:bd:c4:f7:7e:0a:90:f9:e9:88:58:3f:
25:99:ce:9e:fd:65:59:ce:dc:f6:4b:aa:6d:4e:86:
bc:a4:bd:ad:00:cc:2d:92:a1:9e:4f:09:1a:8e:fa:
a1:50:4c:ee:6a:fb:90:fc:dc:08:89:44:22:84:f9:
0a:f0:58:74:4b:3b:64:ca:47:72:e4:6e:b8:b4:60:
0c:81:64:dc:92:19:c0:3f:37:11:60:1f:cf:08:83:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:58:84:E8:6B:98:16:AA:0F:5F:71:3B:F3:C0:F1:D9:70:35:FD:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25500FC4DA6D11EF80D7EB97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.69.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b4:b9:16:42:de:86:fe:6e:8c:d3:7a:3a:ee:17:8f:a0:16:
8f:32:5e:dd:d8:ff:00:30:32:f8:fd:fd:e0:ca:cd:92:3b:3b:
9a:e5:ac:a8:8d:8a:b3:ec:7c:3c:0c:d9:ff:f0:61:d0:11:74:
0e:60:08:ac:04:c6:2e:db:42:c3:68:d4:57:cb:51:ec:50:09:
4f:91:dc:7e:d4:43:cb:4b:02:84:eb:9f:16:a6:b3:8c:0d:ed:
de:7b:a1:8b:57:d4:08:4a:bd:39:5a:96:d9:4a:63:6d:5d:10:
1c:9e:ef:3a:38:8c:29:86:9d:b0:f6:47:bb:8c:dc:5e:1f:70:
f1:6d:67:f9:88:29:bd:7f:08:e9:8a:7a:dd:5e:71:91:28:b6:
fd:ce:b2:16:30:f8:8d:ad:da:fc:43:e8:5d:f6:d0:73:10:9f:
56:7c:bd:a9:c1:9a:7a:35:c3:ab:f9:a4:a5:39:72:31:23:2c:
f8:75:e1:fc:dc:05:0f:4d:8e:40:c2:b8:1d:4e:a8:fe:67:5e:
5c:91:ba:19:54:bb:9c:68:dc:d3:09:fd:1d:6a:3c:6a:f8:6f:
53:c5:51:bd:3f:d6:82:aa:57:aa:6e:e0:bc:75:76:99:e7:3b:
b2:12:b0:4e:08:ec:28:af:3e:7b:9f:02:81:95:7c:3c:1a:62:
68:0f:1d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:03:16 2025 by rpki-client