Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C295730D3D811EF979B5EA5762E951A.roa
File: 0C295730D3D811EF979B5EA5762E951A.roa (raw, json)
Hash identifier: 3Uo1VgUorLk3JAZUdKD+bgkNySxYkt7L+MCAlygZyfA=
Subject key identifier: 1F:DE:63:59:E3:9E:EF:01:41:1B:9A:95:2F:B6:4E:CC:BD:E5:59:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C295730D3D811EF979B5EA5762E951A.roa
Signing time: Thu 16 Jan 2025 07:03:54 +0000
ROA not before: Thu 16 Jan 2025 07:03:51 +0000
ROA not after: Thu 06 Feb 2025 07:03:51 +0000
asID: 198247
IP address blocks: 156.238.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67764 (0x108b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 07:03:51 2025 GMT
Not After : Feb 6 07:03:51 2025 GMT
Subject: CN=6788af5a-1bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:52:38:f2:fd:0c:07:3d:03:11:e8:0d:fc:
76:35:92:c2:0e:45:b6:c0:cf:71:17:22:7d:f7:6b:
37:f7:88:d9:9b:9e:1f:2c:4c:d7:06:9f:a4:85:25:
18:57:18:b6:a3:6a:c7:83:77:5c:e4:c4:60:27:3a:
5f:69:de:67:0f:ca:d0:70:e1:50:c6:b4:5b:ef:2e:
90:86:c6:81:68:eb:d6:5d:6c:9e:ff:1e:0a:fc:07:
89:c9:a6:40:73:4e:a6:4d:3c:e0:3c:36:99:73:be:
91:07:c5:22:42:90:03:3e:94:c5:44:f4:31:84:a3:
c1:69:cb:ce:ee:d4:33:ff:41:6e:cb:bb:96:b1:f7:
32:1f:6d:88:ad:ea:7f:c5:1e:d7:cb:29:2e:05:11:
1c:99:eb:f6:37:d9:07:c0:99:42:28:36:c5:9e:2b:
08:cd:13:a9:2e:d4:9d:10:e4:b4:04:00:37:18:98:
61:ff:c8:07:54:22:fb:57:27:62:d7:1c:52:f0:7d:
9d:d1:f6:43:d4:fe:02:2c:6f:be:2a:2e:29:1f:33:
48:00:f8:90:88:2d:48:f9:f0:4e:85:c6:c4:62:4d:
8b:fa:0e:4d:c4:0c:fc:b8:41:62:fe:e8:72:12:bc:
e6:a4:57:3f:d8:9b:a6:20:42:5b:ef:65:63:c8:51:
e0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DE:63:59:E3:9E:EF:01:41:1B:9A:95:2F:B6:4E:CC:BD:E5:59:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C295730D3D811EF979B5EA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f3:92:cf:80:fa:69:f9:b4:e5:8f:7c:08:68:18:6b:0a:d5:
94:46:7e:0c:3e:29:9f:79:03:b6:0c:ca:b8:96:e8:75:5b:f1:
e0:1d:d9:48:79:7b:f2:ff:dc:6d:30:da:8c:7e:5d:3a:5c:f6:
93:43:70:5e:fd:79:c4:c9:7b:cc:ea:11:43:8b:c4:08:92:e9:
97:4e:b1:8b:b1:3d:b8:55:a8:18:94:c8:e9:82:d9:2c:ba:19:
38:d7:9d:b6:0c:d0:78:9f:cc:3d:d7:be:44:a5:3d:19:fe:44:
f5:fc:0e:76:7b:2c:c6:2e:e4:4d:b4:5b:ea:5d:43:81:28:ce:
de:41:46:71:d4:2f:6c:61:df:f5:6e:97:ef:b4:58:7a:4d:49:
d4:52:08:0b:8c:12:39:63:1b:00:81:cb:4d:48:a3:da:41:c7:
6b:c0:1a:75:58:d1:29:60:e6:93:6d:56:c3:ec:4f:bc:76:10:
e5:cf:5d:ea:ab:05:68:3f:30:66:49:13:08:fc:0c:08:07:ae:
0b:e7:0d:ff:84:b3:27:74:98:02:50:2b:35:5e:4b:f1:3a:32:
14:b1:e1:c0:e6:0b:0f:f5:9f:cb:90:be:3e:f5:b3:b4:a9:5d:
97:e0:6c:1f:07:b9:b8:79:65:3d:dd:4a:b2:f4:87:80:84:db:
d6:09:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:18:55 2025 by rpki-client