Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E812772DBEB11EF8D120FAB762E951A.roa
File: 0E812772DBEB11EF8D120FAB762E951A.roa (raw, json)
Hash identifier: FqRKDO5y2TH7K7g+poWQbrkBZ3vQmafIhe0gS+Zpyx4=
Subject key identifier: F1:7C:F9:F1:D5:52:9D:29:68:2E:CF:2B:E9:E2:43:29:4A:03:28:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E812772DBEB11EF8D120FAB762E951A.roa
Signing time: Sun 26 Jan 2025 13:40:08 +0000
ROA not before: Sun 26 Jan 2025 13:40:04 +0000
ROA not after: Fri 07 Mar 2025 13:40:04 +0000
asID: 205125
IP address blocks: 156.255.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70588 (0x113bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 13:40:04 2025 GMT
Not After : Mar 7 13:40:04 2025 GMT
Subject: CN=67963b38-f7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:d3:16:f5:87:73:7c:e4:08:79:b0:20:ff:
1b:ac:1b:45:02:d1:c5:be:48:6f:91:6b:6e:f7:fc:
71:71:0f:6a:92:c0:c6:27:01:c2:07:45:bb:e6:5c:
c7:c6:8e:ba:18:23:8b:31:8a:41:9f:70:95:40:34:
1a:83:bc:4b:aa:82:70:3e:37:ba:6f:2b:0e:95:42:
b9:7f:f5:6b:a5:88:ce:61:13:08:52:6d:c7:be:05:
f0:70:ed:5f:91:f6:fc:b7:26:75:15:99:78:4c:95:
6b:70:6b:03:5b:ff:90:a5:f6:bb:cc:6f:b7:14:1e:
39:09:28:40:1a:bb:76:01:71:fa:99:dc:91:3d:6e:
e5:13:d8:e0:6c:f6:c4:ae:0d:00:2b:2d:81:ba:75:
73:c3:08:7b:8a:be:1f:2f:dd:33:e6:92:b7:50:b6:
bd:b9:8f:c5:e8:08:1c:72:20:45:a1:f4:ed:5b:72:
c6:00:e0:69:17:3f:61:2d:fd:f2:09:b7:50:c5:99:
dd:6f:60:64:ae:1a:7c:df:46:a2:88:a7:cf:25:78:
5b:e7:6a:c0:bb:a2:a8:32:78:97:59:06:9f:11:9f:
74:4d:c0:7e:5f:12:05:4b:81:29:90:50:8c:ba:50:
90:52:d5:9c:16:76:3e:c6:96:9f:54:d8:c5:05:78:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:F9:F1:D5:52:9D:29:68:2E:CF:2B:E9:E2:43:29:4A:03:28:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E812772DBEB11EF8D120FAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.11.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5b:cb:79:54:48:01:ae:d5:ed:75:f1:13:dc:a3:5e:55:3a:
16:d3:5e:d5:c1:87:2e:6e:27:23:63:94:52:de:2a:ba:12:ea:
71:c8:27:0b:95:de:ce:3d:80:d2:0d:02:16:cb:05:ea:42:64:
07:33:74:bb:2b:77:a8:e4:c9:9f:40:62:64:19:44:c9:ca:6c:
24:e7:d2:28:85:5a:61:c7:c4:8b:ab:ec:7e:b8:17:09:b0:e7:
29:ae:b8:69:06:eb:e3:c7:c4:d2:f3:2e:d1:5d:5b:a2:1f:ec:
cb:1a:68:07:bd:1c:aa:39:47:04:53:75:70:2d:23:07:d9:56:
6e:11:54:89:f8:79:c4:e7:39:62:e2:9f:1a:1f:e0:c2:28:7c:
78:03:8a:27:56:fb:f0:3a:8c:c9:52:d5:b0:75:2e:86:e7:6a:
23:d9:b0:0e:e7:51:05:ed:03:99:a6:72:5f:54:6e:4d:c7:4e:
fe:61:3b:bd:df:94:7f:f6:0f:e2:63:35:62:76:84:76:6a:b0:
e4:33:8c:9d:d8:fb:c2:c4:51:01:c2:bb:29:c9:05:6e:4a:9a:
9f:5f:3f:7c:8b:4d:96:0b:d7:3c:e4:37:05:e0:99:38:a1:20:
a0:33:2b:3a:22:92:e4:04:c0:32:7f:41:8f:28:54:88:2a:9c:
c4:d3:29:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:10:51 2025 by rpki-client