Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AF8C200DCB211EFBE4D7768762E951A.roa
File: 0AF8C200DCB211EFBE4D7768762E951A.roa (raw, json)
Hash identifier: BYZcqYdsGF00VMNCQ9qeyFq6rUfFtW+Lu29pt+Q8kD0=
Subject key identifier: 7F:3E:74:88:DB:8D:CD:33:78:7C:6C:8D:14:39:00:28:AC:4F:BD:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01150B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AF8C200DCB211EFBE4D7768762E951A.roa
Signing time: Mon 27 Jan 2025 13:24:32 +0000
ROA not before: Mon 27 Jan 2025 13:24:28 +0000
ROA not after: Sat 08 Feb 2025 13:24:28 +0000
asID: 22773
IP address blocks: 156.238.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70923 (0x1150b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 13:24:28 2025 GMT
Not After : Feb 8 13:24:28 2025 GMT
Subject: CN=67978910-f193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:b4:fd:bd:30:9e:70:e0:84:ce:fe:44:03:
a5:17:6a:7a:17:41:60:bd:5e:f9:b3:8a:77:5f:cf:
24:f4:ed:29:d2:f5:34:d5:fc:2c:f7:31:da:b0:5c:
40:f8:64:84:ea:9d:cd:3d:ed:4e:c8:ca:5f:89:01:
0d:fb:20:cf:04:56:03:75:24:a6:82:b5:85:61:cb:
59:89:af:0d:f9:fe:60:bc:43:b9:e9:c3:19:c8:ba:
2e:7e:7e:8f:ca:30:63:d0:56:af:b7:15:01:ec:61:
3d:71:2e:11:91:89:2c:0f:37:b0:7e:c7:e3:50:ee:
b4:6e:23:27:ea:af:c8:a1:a9:79:30:8a:9f:2e:5c:
41:c0:fc:30:f9:9c:74:ba:fa:1b:2f:d7:a4:de:44:
d3:d5:bf:90:e5:2f:02:1f:37:26:e2:f4:ac:ae:ef:
d1:bd:43:f7:c0:a4:b5:cd:7a:b6:ab:f6:ad:ea:eb:
a1:d2:dc:f6:51:c0:54:ec:27:32:ce:f1:81:a0:e5:
2f:44:d7:fe:2e:1f:4a:05:30:0d:2e:fd:ed:b5:52:
4b:b9:8f:f4:9d:f7:37:56:4f:59:58:a9:ef:82:20:
18:61:6c:cd:70:7e:6e:a3:be:ba:e9:7d:61:d8:9a:
c2:9e:33:c3:b3:4f:38:ab:a5:52:6e:d7:0a:91:b7:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3E:74:88:DB:8D:CD:33:78:7C:6C:8D:14:39:00:28:AC:4F:BD:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AF8C200DCB211EFBE4D7768762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a7:6d:43:ca:1b:b0:53:bc:d8:a4:21:62:24:35:82:6c:ce:
74:b4:08:65:56:e9:01:3e:c2:33:d5:fa:49:05:bb:08:e6:d9:
45:6d:0d:ed:ed:18:82:e8:62:40:d5:a5:14:32:be:d4:ad:2f:
96:18:cb:63:8d:a0:74:21:85:31:e1:79:47:17:80:56:5a:2c:
95:1b:bf:09:d7:fb:92:35:2c:76:9b:bb:15:6a:0c:4d:be:7f:
42:80:10:51:a5:9d:a0:cf:4e:85:c2:07:f7:67:e7:be:5c:13:
bd:38:89:12:0b:54:63:e3:a5:81:e8:3f:db:c1:bd:f8:54:2d:
f5:e9:45:01:53:9a:30:34:0c:94:60:e9:f8:bb:aa:0a:64:6b:
e0:f7:94:d7:79:b2:b5:b5:fd:b6:3e:18:15:5c:8f:bc:99:12:
96:7e:79:cc:1b:f4:bb:b0:d5:f6:dc:63:15:fe:97:e9:83:ce:
73:08:ab:e6:6c:31:a2:ca:78:b7:4a:57:df:59:c5:3c:3a:4e:
c1:c3:24:1d:23:11:bd:6d:1b:d4:a0:22:8a:28:51:af:16:1b:
d2:a8:38:2e:39:dd:9e:01:ac:82:42:48:c8:3f:16:95:1d:85:
dd:b6:ff:88:16:72:77:81:c7:6f:fb:ee:ca:c9:d1:bb:8c:28:
bc:42:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:29:17 2025 by rpki-client