Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0883D396DC9611EF86B03FAE762E951A.roa
File: 0883D396DC9611EF86B03FAE762E951A.roa (raw, json)
Hash identifier: lRiDyGtYQIfkTRQc7RwkjlmmIhFFsiOXPYQ/gZbPhuA=
Subject key identifier: 23:76:04:1A:E5:CC:D3:B7:F0:BE:27:5B:73:B8:B6:3F:2C:7B:F6:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0883D396DC9611EF86B03FAE762E951A.roa
Signing time: Mon 27 Jan 2025 10:04:02 +0000
ROA not before: Mon 27 Jan 2025 10:03:58 +0000
ROA not after: Sat 08 Feb 2025 10:03:58 +0000
asID: 212238
IP address blocks: 156.235.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70865 (0x114d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 10:03:58 2025 GMT
Not After : Feb 8 10:03:58 2025 GMT
Subject: CN=67975a12-0aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:9f:db:96:6c:1f:df:d3:31:d5:30:ba:3a:
e8:7b:f6:a2:48:19:24:10:ef:61:02:17:54:81:44:
7e:ab:28:67:27:c1:46:06:b1:0d:3b:ef:ed:4e:9d:
22:3c:6a:26:d9:74:63:43:d5:49:cf:3d:40:1d:73:
d1:c7:8c:d3:a5:92:6d:ed:dc:c5:e7:a4:04:06:04:
38:d1:8d:c3:17:5b:9c:66:40:46:6b:fb:8e:7b:2c:
c8:70:74:cb:c3:90:a7:66:70:df:34:d5:aa:0f:1e:
5e:24:02:2a:58:40:4f:5e:b0:09:0c:6e:57:93:0f:
cf:ed:81:11:c2:8f:06:39:b2:92:67:4f:e4:35:b1:
7e:28:28:9e:d3:f1:dd:44:06:82:ca:8d:f5:22:50:
b9:33:eb:71:22:da:3d:c9:2f:36:01:b8:a7:41:2b:
dc:a6:34:b5:76:4c:d9:a0:04:ee:bb:1b:7e:dd:c4:
28:c1:53:79:61:a5:9a:67:81:aa:87:a2:76:9a:4d:
03:3a:04:8c:37:7d:8f:b5:57:b1:ce:e4:da:61:47:
06:40:60:4a:29:9f:85:94:5f:0c:1b:18:4e:d2:56:
ce:42:e5:1b:34:e9:87:3b:7e:0d:44:e3:0a:e7:26:
b0:01:ba:ef:30:ec:dd:7f:5c:4e:0f:0c:48:b6:a6:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:76:04:1A:E5:CC:D3:B7:F0:BE:27:5B:73:B8:B6:3F:2C:7B:F6:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0883D396DC9611EF86B03FAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:30:f7:a5:aa:03:73:1a:2b:88:f9:f4:5a:ce:e8:ad:92:dc:
10:ea:2a:24:92:71:91:a1:d1:93:73:e2:3c:0e:61:06:fa:4f:
b4:d8:0d:8d:75:76:d7:88:d8:e9:13:be:2a:50:4e:c4:ef:e4:
96:f8:67:f1:17:b5:46:01:14:17:26:d0:4d:71:50:43:d6:f0:
10:e0:c7:22:68:d6:39:fb:41:85:43:3c:3a:08:1f:84:f4:e7:
28:93:93:5e:c1:34:41:dc:af:3f:07:37:b7:d4:5e:e6:20:39:
a5:bc:3a:6e:47:39:1a:d2:0a:64:c2:56:cd:4b:b8:20:2e:37:
c7:7e:9c:ae:93:13:3b:da:44:af:c2:5c:fa:60:b6:ce:5c:8f:
9e:02:81:5b:b9:4e:a8:6b:7c:3b:e2:1c:b2:91:d9:c0:3b:57:
68:45:9e:6b:54:75:14:90:57:64:b3:95:b2:f2:e0:88:70:cc:
21:0e:d0:c5:ed:1a:0f:78:04:39:0a:01:b9:6a:4e:8b:ea:be:
51:c0:e3:d3:93:fa:b0:45:38:40:0f:b8:ed:f9:c0:4b:4e:f3:
71:f9:10:ae:6e:bc:b7:d0:e6:dd:07:66:c0:18:b6:0f:f9:e0:
62:9d:b4:3c:a7:ff:26:ae:24:e2:e1:73:24:47:4f:76:23:c5:
b6:a2:a5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:13:10 2025 by rpki-client