Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07B6C864DC1A11EF887DE364762E951A.roa
File: 07B6C864DC1A11EF887DE364762E951A.roa (raw, json)
Hash identifier: 3KZgLP52rJSp/FFYOiZ6mMKbj/WUIyc5FlllBxuSqwI=
Subject key identifier: 75:2A:09:EE:AE:C4:E7:84:C3:29:74:FE:27:C6:66:7E:4E:D7:BD:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011452
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07B6C864DC1A11EF887DE364762E951A.roa
Signing time: Sun 26 Jan 2025 19:16:23 +0000
ROA not before: Sun 26 Jan 2025 19:16:19 +0000
ROA not after: Fri 07 Feb 2025 19:16:19 +0000
asID: 399077
IP address blocks: 156.248.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70738 (0x11452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 19:16:19 2025 GMT
Not After : Feb 7 19:16:19 2025 GMT
Subject: CN=67968a07-60a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:28:f6:b6:2d:d9:68:78:ae:b6:c5:c4:0d:
85:c7:30:2b:fe:cc:3a:d0:b6:1f:ba:14:16:90:57:
10:28:ae:ed:09:da:e1:4f:e4:b9:03:1e:e0:e0:be:
fc:87:4d:9b:ac:82:08:c8:c5:a5:46:6a:6a:17:0c:
c4:98:50:5c:70:c5:c9:ac:a6:6d:f0:f9:e9:b4:49:
94:a6:d0:f8:e9:39:39:cd:c2:da:34:a2:eb:38:f9:
ef:84:f9:cd:cb:86:f1:26:90:9b:66:68:26:18:c2:
35:f8:b2:0d:4a:65:bb:39:36:34:fe:c0:84:4b:17:
5a:dd:1a:b8:cc:7f:31:e5:a4:0a:5a:5d:97:8b:e3:
01:fd:b8:06:e2:93:2f:1b:82:06:d4:93:d5:05:3a:
41:99:cb:71:84:5b:5b:9e:5e:e1:0c:f1:5e:83:1e:
fd:b9:1e:19:49:20:a5:0e:b4:f1:b3:be:a7:e7:8b:
3e:73:8d:18:e7:48:e8:59:86:84:65:d9:4a:df:f7:
37:c6:15:b0:47:1c:61:6e:19:4d:ab:8f:3b:f3:0d:
08:b8:99:f6:02:a5:b1:ce:3f:36:74:70:dc:ea:55:
e8:85:f8:4a:a3:92:67:b4:62:67:1d:56:09:79:25:
e6:07:68:12:7d:2e:7b:a9:ba:81:3b:18:30:47:fb:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:09:EE:AE:C4:E7:84:C3:29:74:FE:27:C6:66:7E:4E:D7:BD:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07B6C864DC1A11EF887DE364762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.72.0/24
Signature Algorithm: sha256WithRSAEncryption
00:cc:0b:dc:27:53:fd:a1:b6:96:c3:35:0e:94:38:61:e2:bd:
d1:4f:0d:8e:06:b0:65:21:37:f8:df:c3:08:5c:95:2a:40:fd:
23:6e:a8:02:92:46:fe:f7:a2:71:c7:0b:a4:1a:4a:1a:dc:0b:
3e:d4:84:8c:f0:0b:33:cf:5d:1d:0d:c8:e1:35:bc:5d:51:07:
19:e5:3e:6d:90:c6:39:a7:38:13:23:fe:21:9e:64:34:d6:f8:
52:dc:50:71:e6:4b:d9:0f:40:b4:04:b9:10:cd:db:1d:92:a8:
c9:d0:0c:ea:35:dc:3a:63:2d:dc:1f:ba:a3:79:0a:7e:98:c3:
65:05:47:8c:1b:0e:f6:af:e6:d6:23:64:36:14:b0:ca:34:0a:
a5:ec:f0:2e:95:6c:c1:65:4f:16:f0:14:74:ed:a0:70:ba:e5:
95:f2:3d:1d:76:f4:92:85:ed:85:bd:d2:60:c5:ec:33:48:9b:
58:7b:db:ef:5d:50:ee:82:27:ee:46:38:99:06:5e:28:2a:74:
e5:dd:f4:9a:17:95:5a:9f:4b:c8:06:38:60:bd:62:a6:e5:6c:
65:84:d6:be:7a:61:50:bc:03:68:9b:ce:d2:d0:c7:c5:f8:de:
c4:97:1a:84:f9:20:f2:02:0e:0e:1b:ab:dd:c9:e4:ba:0e:21:
f8:1c:ee:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:54:12 2025 by rpki-client