Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07DE60F4D50311EF81D4EABC762E951A.roa
File: 07DE60F4D50311EF81D4EABC762E951A.roa (raw, json)
Hash identifier: FQDDBmQiXES23WwkftvsRqO0uZK42PW7I9enO7jDON4=
Subject key identifier: 3B:AE:FE:D5:17:26:FC:36:8E:20:28:F4:DB:D1:B5:F3:BE:9B:A3:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07DE60F4D50311EF81D4EABC762E951A.roa
Signing time: Fri 17 Jan 2025 18:44:07 +0000
ROA not before: Fri 17 Jan 2025 18:44:03 +0000
ROA not after: Fri 31 Jan 2025 18:44:03 +0000
asID: 39600
IP address blocks: 156.255.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68180 (0x10a54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 18:44:03 2025 GMT
Not After : Jan 31 18:44:03 2025 GMT
Subject: CN=678aa4f6-516a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:ba:6f:31:f9:b9:0f:83:42:3a:0e:d8:9d:
2e:85:8a:5e:8a:a1:a2:a4:a1:96:f9:d7:b8:56:b4:
b8:47:07:ac:92:bd:c4:9d:db:79:e9:26:ef:a3:07:
19:23:d6:36:a0:44:57:fd:64:97:ff:18:4d:7f:86:
54:98:59:52:2e:88:c8:5d:05:fc:67:36:86:53:89:
d3:d1:67:33:d7:34:e7:ab:96:17:26:f5:72:78:98:
63:a1:8f:ff:36:d5:5a:5c:fa:35:ed:b7:0f:59:6a:
4f:70:18:a7:e7:ee:c3:44:80:e3:ff:fa:ce:4f:59:
28:06:04:6e:cf:f1:26:9d:87:a4:fb:9a:66:ab:62:
3b:99:85:e4:8f:2f:b3:4c:8d:1e:0a:54:0b:8e:30:
d0:48:a9:b6:3a:7d:73:02:c3:01:87:5b:5f:cb:cc:
f6:00:98:80:71:26:f2:0d:24:b2:4e:b3:05:6f:a9:
17:3a:fc:c2:72:06:ab:fb:32:77:a1:25:6f:84:32:
1e:a5:52:6b:9d:0a:bd:f2:55:f9:f9:03:be:a3:ae:
bd:90:01:83:c5:a1:d9:70:e3:4e:4d:27:c0:4e:4a:
e6:a1:25:03:bf:9c:10:6b:ee:8c:cd:9e:79:a9:38:
24:f8:c4:7b:52:6e:3a:a5:1b:81:e2:11:12:a4:2a:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AE:FE:D5:17:26:FC:36:8E:20:28:F4:DB:D1:B5:F3:BE:9B:A3:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07DE60F4D50311EF81D4EABC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.82.0/23
Signature Algorithm: sha256WithRSAEncryption
77:c8:0b:17:bd:4a:05:90:5e:49:4f:e6:1b:c1:6e:02:98:b4:
c3:f8:f9:a0:77:67:72:2e:34:59:90:7e:8f:eb:7d:83:af:04:
56:d5:cf:6d:fb:1b:4c:09:86:fc:51:23:41:f5:79:38:cf:2a:
c8:81:78:23:22:eb:1a:6c:44:e7:24:1f:9b:ae:5f:1b:20:b8:
a1:4a:e7:77:e7:3d:9c:f5:bd:f7:0c:13:d0:55:3f:70:32:3c:
c9:88:5b:71:f0:cb:1d:ae:86:b9:11:dd:76:8c:a6:4a:9b:7b:
1d:55:b5:bc:6d:b3:88:77:e3:c2:e1:69:d9:de:55:8a:ad:57:
4f:c9:d7:3d:1e:cc:ea:cf:68:d3:cc:01:22:aa:d9:b4:1c:f0:
dd:fc:7d:4f:2c:80:a7:77:51:58:c1:e3:e6:29:c5:cb:83:0f:
cf:8e:c9:02:75:f8:c0:b3:5f:13:29:ba:0b:6a:d7:9a:96:7e:
84:34:14:83:fb:22:b8:57:1a:06:5c:ae:4d:82:55:a0:8b:38:
ba:d6:ce:d0:b9:73:de:c6:aa:83:7a:ed:0e:b4:b5:05:6b:9f:
d5:d2:f1:59:ee:41:e2:22:89:09:d5:61:40:fa:66:2b:d9:8d:
f7:71:45:84:7f:76:64:ea:23:0b:21:8f:5c:16:25:61:58:42:
90:c9:99:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:46:27 2025 by rpki-client