Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88164C8CDA6C11EF83F92695762E951A.roa
File: 88164C8CDA6C11EF83F92695762E951A.roa (raw, json)
Hash identifier: 8tQLbFTclVe2S7GgFx+YRraUuxr0yoRKAmiJHFx4Mlw=
Subject key identifier: 65:F2:2E:D3:47:77:0B:0A:E7:C6:63:48:74:AB:12:78:7F:0E:E5:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88164C8CDA6C11EF83F92695762E951A.roa
Signing time: Fri 24 Jan 2025 16:01:55 +0000
ROA not before: Fri 24 Jan 2025 16:01:51 +0000
ROA not after: Mon 03 Mar 2025 16:01:51 +0000
asID: 203020
IP address blocks: 156.230.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69530 (0x10f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 16:01:51 2025 GMT
Not After : Mar 3 16:01:51 2025 GMT
Subject: CN=6793b972-ba75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:33:ba:fa:29:3f:3a:22:bd:6e:a9:4e:e1:
08:bd:43:5d:5c:79:45:45:de:84:94:3b:b0:66:54:
31:c1:fb:52:24:29:5a:3f:79:51:b9:38:4f:03:41:
d7:f0:93:9c:cf:61:f5:c0:41:03:1f:40:24:f9:f9:
7b:15:6a:40:99:a4:af:a5:c2:11:da:72:e4:a2:01:
77:ee:b2:b0:02:48:3d:ed:15:49:51:fd:76:e4:62:
3e:ef:69:56:68:19:d1:41:e6:a1:a4:d0:ef:5b:c4:
bb:47:b0:8c:e8:82:a1:b0:e2:f6:f2:e7:9a:3d:0b:
cc:33:4c:bb:5a:f9:80:35:74:07:87:9b:a1:a3:92:
bd:ee:9f:5f:e7:a3:43:95:3a:07:1b:e0:24:71:b6:
8e:54:ac:3b:c0:52:12:30:73:1a:44:01:28:ab:cd:
2e:00:a1:7d:f2:e2:61:47:a2:bb:c6:44:84:6a:ec:
74:35:96:6f:12:23:ce:12:d9:a1:8c:e9:d9:89:f0:
4e:6b:88:04:dd:ce:83:ab:15:3a:30:0f:25:ff:1a:
d0:4e:70:a1:e8:61:d5:f4:c7:20:18:33:84:f7:b0:
6c:ef:74:31:1b:d2:b0:9d:57:df:98:f9:c4:29:c7:
06:d5:54:aa:f2:16:81:8a:69:6c:da:40:97:ba:fe:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F2:2E:D3:47:77:0B:0A:E7:C6:63:48:74:AB:12:78:7F:0E:E5:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88164C8CDA6C11EF83F92695762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:12:1b:dd:00:ff:8c:c2:c0:ad:7e:43:53:19:5f:f5:cd:8f:
b5:e8:8c:e7:ed:2f:41:8a:a4:2f:ac:95:02:47:70:0f:67:62:
eb:cd:f8:e0:8e:7a:32:61:15:53:4f:05:a1:aa:c7:f2:d8:4f:
8e:bc:03:cd:68:1d:8a:ce:e2:82:50:c2:35:61:02:60:03:eb:
d6:f4:d3:7b:46:3c:69:11:fa:fd:61:5a:ca:c5:29:af:74:e0:
e8:59:23:83:43:55:66:d5:a1:b8:14:58:c6:5c:1d:6d:e5:09:
73:e3:c9:17:e2:05:75:af:bd:b6:a9:97:fb:3f:17:17:07:44:
75:55:2b:df:7d:db:5a:58:3f:b9:fd:a6:81:ce:6c:b0:10:50:
cc:91:f8:63:9c:ce:dd:1c:cf:65:57:a5:ea:f5:61:a4:f7:a6:
18:3c:14:a9:32:5e:bb:83:a2:46:cc:2f:3a:68:33:2d:9c:6a:
ae:c4:ea:58:a0:85:94:c3:51:b4:86:65:9b:6b:53:3e:e3:cb:
02:1c:60:78:47:c3:e4:f4:2c:a8:99:e1:32:8d:88:71:45:e2:
3d:61:2e:8e:71:b1:c4:af:ec:4a:7a:d5:77:bd:e6:35:1e:4c:
bc:33:d5:06:59:de:0a:94:7e:75:10:80:4b:e9:d4:bc:5a:ca:
2d:e8:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:13 2025 by rpki-client