Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CC160B8DBE611EFBE08238D762E951A.roa
File: 6CC160B8DBE611EFBE08238D762E951A.roa (raw, json)
Hash identifier: QF6/D9DUKi4QA/E9LX+WBTxgMHD0BxusjpWdtOwcQIk=
Subject key identifier: E0:C0:76:50:E1:21:84:5B:98:D6:C0:25:80:19:37:C1:81:1F:70:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CC160B8DBE611EFBE08238D762E951A.roa
Signing time: Sun 26 Jan 2025 13:06:59 +0000
ROA not before: Sun 26 Jan 2025 13:06:55 +0000
ROA not after: Tue 04 Mar 2025 13:06:55 +0000
asID: 203020
IP address blocks: 156.253.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70574 (0x113ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 13:06:55 2025 GMT
Not After : Mar 4 13:06:55 2025 GMT
Subject: CN=67963372-3505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:7a:b5:e2:9f:6c:05:ec:0c:2a:a4:f0:09:
14:b3:ad:12:58:79:1a:2f:64:8d:d3:8c:94:58:2a:
89:80:6e:aa:67:4d:b3:af:4d:c8:7d:47:0e:2a:c3:
a4:72:ea:71:dd:c0:8c:93:52:7f:bd:44:df:63:3f:
16:fc:59:fe:cb:a5:88:81:46:95:4e:74:d2:ab:5e:
de:6c:48:06:f1:2b:98:1f:29:12:cf:ef:0c:e8:1e:
c0:c1:e6:5c:46:19:0e:a5:f0:ba:a7:2b:ec:8a:6b:
f3:ea:2c:9c:04:eb:f3:c4:b8:01:b2:dd:3e:1a:68:
14:76:eb:a8:5e:29:f8:41:ab:e5:9c:78:0a:25:78:
e7:8b:91:f4:1c:a4:d3:59:d9:b0:77:5d:9c:c5:53:
03:dc:1e:16:34:53:87:a5:ff:b7:35:04:b2:e8:35:
3f:65:a4:bf:a9:9d:fb:da:71:f9:a9:07:14:ac:40:
bd:41:9b:3a:ad:bf:de:37:46:cc:5f:c8:41:19:da:
20:46:05:b3:76:68:7a:da:a7:b5:40:97:dd:8e:24:
1e:bf:f5:f6:4f:32:e7:3e:e7:09:33:26:5b:37:5a:
43:6a:e1:1e:68:2d:d5:17:46:43:7c:0b:92:f4:2f:
e0:7e:e0:47:e6:42:3c:69:f3:e4:a7:4f:14:ea:e6:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C0:76:50:E1:21:84:5B:98:D6:C0:25:80:19:37:C1:81:1F:70:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CC160B8DBE611EFBE08238D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.136.0/24
Signature Algorithm: sha256WithRSAEncryption
38:84:a0:1a:72:10:95:0c:f2:a7:60:56:a9:c1:94:87:c0:5a:
3b:fe:88:88:82:8f:15:7c:8f:e2:87:18:d4:24:12:63:12:4c:
f7:90:99:d2:5a:8b:66:08:a7:c0:31:1e:8f:cd:00:52:6f:4f:
3c:58:09:2d:dc:df:41:95:e2:df:74:9f:8c:15:ff:5e:80:ed:
ea:5a:df:e1:15:d9:fd:95:e6:bc:3d:3d:b2:2a:7f:5c:55:b9:
d8:d5:23:2b:33:49:5c:65:44:f9:a0:a7:0a:c1:e1:3c:be:00:
0e:e8:92:8c:97:7e:f6:49:72:e8:97:b5:01:07:35:97:bf:20:
26:db:fa:86:8e:25:9e:7d:1a:d2:3a:a8:24:17:b6:1b:70:38:
3a:10:85:49:f9:5f:b6:3f:be:f7:80:a8:5a:2c:33:be:79:4d:
b0:45:38:81:8e:26:f8:15:03:2b:5f:b2:e1:70:21:37:c5:26:
0f:15:c6:56:ac:4c:b3:dd:22:b7:ab:dc:54:3a:f2:07:bb:18:
5f:3a:c7:3d:37:f1:ff:a6:b4:ee:8a:a4:f1:ba:bc:c7:c7:40:
6e:8e:49:41:4c:91:44:10:6a:ae:ef:f6:ac:1a:2f:78:b4:c5:
5c:a6:5c:b6:3b:1f:22:23:0e:81:f1:4e:7a:20:be:b4:cd:1b:
5d:f6:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:36:40 2025 by rpki-client