Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08F61118DAED11EFA4565A7F762E951A.roa
File: 08F61118DAED11EFA4565A7F762E951A.roa (raw, json)
Hash identifier: IsNu3KuejOPY3En5kD08sWIZ/ScdUv1i+O1c4IMZOHE=
Subject key identifier: 16:AE:D0:3F:DA:60:A7:E3:6F:73:00:5F:A5:5B:C9:79:D7:B6:B3:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011117
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08F61118DAED11EFA4565A7F762E951A.roa
Signing time: Sat 25 Jan 2025 07:21:46 +0000
ROA not before: Sat 25 Jan 2025 07:21:43 +0000
ROA not after: Thu 06 Feb 2025 07:21:43 +0000
asID: 39600
IP address blocks: 156.238.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69911 (0x11117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:21:43 2025 GMT
Not After : Feb 6 07:21:43 2025 GMT
Subject: CN=6794910a-45b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:0b:f5:48:ee:8f:88:a2:d3:00:bf:8e:87:
23:b2:47:84:76:74:97:09:f3:30:11:36:24:8b:1f:
a3:94:d6:84:96:39:6b:b0:ec:e8:19:df:cb:2f:c9:
86:ff:df:88:18:74:f1:25:ca:8c:2a:a3:07:19:79:
0c:94:8d:62:13:44:36:11:42:48:9c:ad:0f:6d:3b:
1b:fd:cd:67:ae:b5:7c:e0:1c:be:a7:e0:10:b2:1b:
5c:d1:47:c2:c9:34:7b:e6:ae:82:84:25:e1:94:6d:
e9:8c:d4:ba:51:59:2e:32:a8:cc:b0:21:bf:98:1a:
3e:bb:0d:33:81:c0:28:c0:ab:c9:26:ab:e4:33:05:
58:59:07:87:e6:1a:36:a5:ca:46:08:bb:33:87:b2:
73:a2:f8:ab:05:bb:56:49:da:e2:bf:34:f9:b6:e2:
57:1c:d8:ef:94:0c:82:e6:fc:fa:69:71:5a:d7:6b:
2e:ea:0e:e2:03:bb:d3:0c:9a:83:5f:60:8f:28:28:
c4:c8:f3:38:63:db:65:1c:93:76:23:1e:32:9e:cb:
5f:e2:93:39:64:84:f1:9d:cc:5c:36:d5:d2:96:90:
65:84:10:fe:a7:92:a8:2d:b6:0f:47:40:61:de:e7:
24:d6:5b:00:38:6d:31:ac:75:20:50:19:94:bb:ec:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AE:D0:3F:DA:60:A7:E3:6F:73:00:5F:A5:5B:C9:79:D7:B6:B3:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08F61118DAED11EFA4565A7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f3:32:09:41:d8:f0:2c:81:e0:7a:07:08:55:ce:55:16:fc:
e7:28:ac:12:10:2b:02:e9:0c:9e:f2:c5:21:45:62:c2:d9:e4:
3a:7e:7b:a2:4f:56:f6:b4:d7:b0:57:2a:0a:98:6a:5b:67:ab:
ad:6f:7c:0c:dc:ad:25:dc:c8:95:ac:30:ca:ab:01:39:d4:0a:
2e:01:07:7f:7d:7b:c6:38:bb:f1:4a:e9:e1:3c:b8:e5:3b:dc:
0b:d9:86:c3:88:c3:0e:23:91:e7:ec:61:44:12:7e:e6:b7:36:
d9:55:53:a2:a7:a2:8f:c1:f2:52:3c:4c:4b:24:36:41:29:00:
cf:ec:7c:c6:56:94:ff:48:ed:cb:0b:48:44:bc:3f:d5:f2:da:
5d:01:7c:af:b9:b2:3b:99:6f:38:43:98:cb:03:42:6f:be:03:
66:9d:e8:9f:7b:c8:c8:f4:c4:bc:3e:9e:63:81:80:99:d5:62:
cd:dc:51:db:fd:2d:47:c5:69:0f:5f:3c:24:88:28:0a:ad:76:
2e:b6:37:bc:48:cd:2b:92:4c:db:e5:9a:db:3b:ce:c7:e1:9a:
78:6c:bb:39:9d:2d:a5:90:7c:a1:fe:27:81:88:59:c2:e4:06:
20:df:57:e5:07:a1:56:fd:65:dc:c3:80:dc:0a:e9:ab:8d:99:
7d:f7:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:48:06 2025 by rpki-client