Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B65D73ADBD511EF94E4079B762E951A.roa
File: 8B65D73ADBD511EF94E4079B762E951A.roa (raw, json)
Hash identifier: lfy9cqKuhgv68/iuprh9ZR+HTVknouLGCF4YUyrp5MA=
Subject key identifier: 2E:04:FB:AA:CA:DC:43:5E:2C:1E:3E:C3:F5:84:22:2D:D1:3B:BB:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01133A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B65D73ADBD511EF94E4079B762E951A.roa
Signing time: Sun 26 Jan 2025 11:06:09 +0000
ROA not before: Sun 26 Jan 2025 11:06:05 +0000
ROA not after: Tue 04 Mar 2025 11:06:05 +0000
asID: 203020
IP address blocks: 156.253.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70458 (0x1133a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 11:06:05 2025 GMT
Not After : Mar 4 11:06:05 2025 GMT
Subject: CN=67961720-12ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:aa:01:f8:96:c8:64:82:0c:1f:92:af:7e:e1:
0c:0d:19:90:33:ea:c8:0b:36:02:00:bb:bf:26:b8:
b1:75:d9:94:25:33:11:bf:45:74:df:a2:3c:83:ac:
8d:7f:f7:ab:40:f2:ae:a2:0a:93:20:2e:d1:87:36:
37:4a:45:69:a6:00:4f:27:13:d6:a8:1d:5a:44:7d:
18:b9:37:0e:99:d5:f1:d3:99:35:87:37:77:ba:68:
c0:39:ee:29:dc:1f:67:1e:34:98:c2:28:b3:ac:bf:
50:e2:85:fe:7a:76:55:b7:db:26:b8:f8:7a:eb:f0:
18:47:b5:ad:67:18:77:37:60:b3:cd:75:89:16:f5:
12:1e:ed:10:aa:02:3b:eb:45:12:1f:18:b2:52:e1:
1d:92:cf:1d:71:74:36:56:64:cb:bd:81:09:49:43:
9f:7f:35:92:c8:9f:8f:3f:98:17:6b:0b:81:63:37:
e1:63:54:b7:da:bb:05:06:9a:37:01:e5:d5:bf:d7:
32:b6:fe:86:5f:83:8d:6e:88:1a:65:cd:f8:46:cf:
25:06:80:60:11:b4:9c:b3:6f:0e:4a:c8:5f:40:8c:
e0:bc:a6:fd:07:51:83:50:64:50:e9:ed:13:e1:80:
36:40:f8:c7:f2:3b:05:e2:6c:2b:d0:65:a2:76:09:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:04:FB:AA:CA:DC:43:5E:2C:1E:3E:C3:F5:84:22:2D:D1:3B:BB:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B65D73ADBD511EF94E4079B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.206.0/23
Signature Algorithm: sha256WithRSAEncryption
17:18:8d:b6:dc:40:49:9b:d6:26:59:1a:4f:29:f7:40:c2:4f:
b2:89:a5:22:0e:42:fd:8b:6d:b8:17:c7:62:bb:d4:9a:20:98:
39:fa:77:b4:70:d2:1a:25:62:20:21:8c:61:91:f6:06:17:37:
68:d8:75:22:37:95:54:69:8c:d7:fa:bd:b8:94:d5:16:9c:9a:
95:49:38:3e:da:1b:a3:31:42:72:ac:2f:7d:1d:74:f5:3d:cc:
43:c9:9e:80:6e:9c:36:2e:08:69:ee:e0:92:8c:40:ca:cf:91:
f2:90:70:1a:62:78:d2:c4:a9:bf:76:86:41:55:a8:fe:20:f8:
ed:8b:25:a7:cc:ac:0b:00:d6:84:59:63:10:fe:12:6f:fb:5d:
d1:0f:ef:83:e6:59:91:c9:bb:6b:09:d0:d3:85:4b:b1:34:58:
9f:b3:c5:92:a5:2a:2d:1c:ff:a6:9b:e9:a9:b5:bc:ad:ce:c0:
03:4c:05:ce:45:9f:87:e6:7e:bf:65:bd:07:5a:de:0d:25:cd:
ef:dd:e4:8a:e0:38:23:43:08:07:b7:a0:0e:78:90:7d:be:2c:
27:39:8a:76:22:c5:b5:41:80:3a:57:04:4d:2d:c4:da:07:44:
c7:14:16:07:f5:62:4f:5f:b3:2f:a1:73:97:28:73:15:eb:06:
36:c2:db:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:13:03 2025 by rpki-client