Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE05CAC6DBDD11EFB09C1A53762E951A.roa
File: BE05CAC6DBDD11EFB09C1A53762E951A.roa (raw, json)
Hash identifier: ia07MWLdVvOETNvtRcbgztL/VdI97FfuECIqMG4WqTg=
Subject key identifier: 2B:98:A4:1A:32:B5:0B:E3:70:F9:07:90:F4:9D:8D:96:E9:1E:07:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011364
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE05CAC6DBDD11EFB09C1A53762E951A.roa
Signing time: Sun 26 Jan 2025 12:04:49 +0000
ROA not before: Sun 26 Jan 2025 12:04:45 +0000
ROA not after: Tue 04 Mar 2025 12:04:45 +0000
asID: 203020
IP address blocks: 156.243.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70500 (0x11364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:04:45 2025 GMT
Not After : Mar 4 12:04:45 2025 GMT
Subject: CN=679624e1-2ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:57:01:19:74:e7:cf:be:cf:4d:2f:55:21:
3c:64:a8:54:17:53:b9:71:3e:06:33:ab:74:da:1b:
ff:b4:48:96:9b:bb:ea:05:54:c5:27:7c:1c:5e:f6:
e7:d6:b4:33:2a:94:5a:f5:41:37:63:7f:a4:9d:d9:
96:8a:23:9a:40:bf:66:b3:62:5d:e3:68:dd:2d:f1:
0c:8b:cf:df:37:e9:bd:17:c4:3e:70:50:cf:46:8b:
d0:47:e7:67:05:02:50:ef:ac:3b:20:2e:e3:8e:56:
ff:15:d9:b5:01:3e:ee:ae:40:44:f1:97:24:8f:63:
c2:40:3e:f8:56:19:54:6b:0a:ee:ab:39:4a:40:74:
36:56:72:e6:97:df:b3:7a:ca:32:9a:9b:82:1f:4a:
19:2a:68:53:41:bd:da:aa:8f:d9:f4:ac:7a:52:a1:
fb:8b:7a:fd:e2:8d:37:17:0c:e6:47:04:a3:6a:2a:
af:3d:68:97:5f:93:8a:56:a0:31:7f:22:82:75:29:
19:49:f6:b4:91:db:e9:ec:e0:a2:e1:fe:fb:d3:12:
fb:0b:e7:a8:db:e4:24:f7:e6:ad:c8:f7:a7:8e:d9:
ce:71:a3:58:c9:ff:4c:50:2f:85:3a:3e:83:da:7d:
e7:46:ad:68:7d:ad:98:59:3c:f7:f3:cf:b7:bc:c4:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:98:A4:1A:32:B5:0B:E3:70:F9:07:90:F4:9D:8D:96:E9:1E:07:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE05CAC6DBDD11EFB09C1A53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.235.0/24
Signature Algorithm: sha256WithRSAEncryption
64:31:0c:77:8d:86:ee:1c:8f:71:b2:2c:48:fe:2f:e0:04:25:
6d:12:a1:0e:c2:e8:47:40:93:b2:4c:f6:5a:b9:4b:bd:07:ba:
d3:9a:d3:28:80:d2:52:e2:0f:93:4f:d7:4d:49:72:be:cd:75:
81:b2:61:ca:67:67:ee:2d:f5:f8:06:df:89:46:e7:b3:ca:2e:
b5:fb:54:d1:d8:28:16:98:47:a3:b1:6b:67:06:7a:e3:ca:0a:
07:1e:69:88:0e:5e:05:98:7e:0e:5b:fd:b5:99:0f:e4:5d:ae:
49:ea:49:40:b4:1d:93:36:a2:30:4f:4f:f9:e9:c7:f8:64:69:
c8:51:32:92:e5:2a:39:05:c7:ca:13:dd:f8:e4:66:9e:1b:5a:
0b:d0:74:b1:d3:24:f7:01:30:72:a0:c2:d3:b9:1c:69:3b:48:
f5:2d:da:f4:ce:65:7a:ef:7b:c8:a4:eb:f6:7d:ba:0e:aa:27:
57:8e:c0:a2:c6:66:20:f4:d8:ce:78:bc:32:cf:b6:db:b6:c7:
ec:43:45:80:66:f5:df:d0:19:d7:c2:21:4e:f1:59:e5:b9:30:
ce:9f:0c:87:af:d2:55:a2:d7:11:7e:09:76:ab:53:b3:97:b4:
c4:ab:c4:dc:1a:84:39:99:b6:95:13:94:43:eb:2d:52:98:e2:
80:4f:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:11:58 2025 by rpki-client