Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09AEDF66D95A11EF97E06758762E951A.roa
File: 09AEDF66D95A11EF97E06758762E951A.roa (raw, json)
Hash identifier: HqoSotT/VE9CY3kycYmgGQTnbXaQEs2chx4dwb5P+qg=
Subject key identifier: 7D:21:5D:34:E1:C2:F6:08:0D:CF:70:0B:C5:B6:0F:6F:A8:3C:22:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09AEDF66D95A11EF97E06758762E951A.roa
Signing time: Thu 23 Jan 2025 07:17:00 +0000
ROA not before: Thu 23 Jan 2025 07:16:57 +0000
ROA not after: Sat 15 Mar 2025 07:16:57 +0000
asID: 138915
IP address blocks: 156.244.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69301 (0x10eb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 07:16:57 2025 GMT
Not After : Mar 15 07:16:57 2025 GMT
Subject: CN=6791ecec-8a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:17:89:31:e8:89:f0:62:46:af:6b:d3:88:
e7:8c:f6:d0:56:f7:eb:a3:bb:71:4e:bc:6d:e6:94:
1d:08:de:d1:dc:d5:a9:09:24:ce:e5:c9:8c:7e:09:
49:fb:7f:05:33:26:b4:76:35:64:07:d0:48:42:05:
12:11:b5:c8:a1:29:a8:14:07:62:b1:3f:51:fb:3f:
c2:dd:7a:ae:06:0d:0a:d2:89:f4:24:d6:db:f1:2c:
0f:35:12:1f:57:6f:9e:fd:4d:81:83:d6:e6:82:5e:
81:d9:7a:0f:50:57:25:4f:77:97:fa:ad:21:90:ae:
da:92:8f:b0:81:46:3d:58:a1:12:08:2e:11:38:2e:
a8:84:07:03:e3:87:4b:0b:e0:c0:29:e1:c9:14:f1:
32:4d:21:07:1f:ff:7b:dd:0f:2b:eb:f1:1c:c2:9e:
59:ef:cd:48:73:dc:90:56:a9:46:1a:e1:09:e4:56:
35:5b:4c:57:41:f2:76:24:4c:50:a8:e9:9f:f5:f7:
4c:43:17:6b:14:2d:bd:e4:8e:f3:99:b5:1a:37:89:
67:12:48:33:bc:2b:c7:fd:ed:2c:de:df:3f:27:10:
d5:d3:87:04:89:30:25:ac:68:b7:2d:cb:d9:a5:cd:
7c:53:d9:d9:b2:c3:5f:1c:e5:92:d6:88:ef:6b:ce:
6d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:21:5D:34:E1:C2:F6:08:0D:CF:70:0B:C5:B6:0F:6F:A8:3C:22:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09AEDF66D95A11EF97E06758762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.29.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:12:b5:05:97:1a:a7:4f:81:fb:91:f6:02:82:27:26:c9:de:
d1:94:d4:d0:1c:05:a8:42:b1:58:3a:09:80:0e:1b:71:5b:d2:
42:49:6c:66:8d:30:7f:02:76:c4:30:0c:61:59:b1:b2:58:9a:
00:3a:2b:e7:ca:79:42:ec:77:b2:c6:e4:8b:0e:7a:17:87:81:
23:bd:f7:4d:df:70:01:e5:73:97:08:7d:92:aa:0c:0a:d2:2f:
8a:aa:c4:64:e1:f8:cd:82:25:2f:86:99:40:ad:1f:01:4c:99:
77:d6:ec:f6:e1:e8:80:7c:83:ab:8b:f1:a1:45:0f:5b:99:7e:
ec:ad:14:f0:71:1c:69:c5:64:c8:5c:42:d2:84:5e:73:93:c2:
e3:40:ec:4a:3a:3c:bb:8f:cf:92:82:df:65:ea:2c:11:a5:85:
bc:bc:77:35:12:f3:af:b2:7d:aa:28:7d:fc:20:c4:7e:7d:c4:
ad:29:28:57:4d:c5:54:81:e8:9f:2c:2c:07:a5:52:af:e7:f3:
8e:d7:d2:b0:60:e2:90:07:fb:bf:2d:3c:d7:87:48:84:ef:bc:
ff:ee:1b:20:62:0d:f0:6d:28:f2:cf:ce:61:1d:21:ac:b3:6c:
c1:2b:ff:7a:c1:33:01:62:51:18:f9:e5:8c:dd:c1:3b:ab:4f:
af:27:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:21:03 2025 by rpki-client