Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/107684A0DBE111EFBEF0F269762E951A.roa
File: 107684A0DBE111EFBEF0F269762E951A.roa (raw, json)
Hash identifier: ZnI4ByQ1zf7j6omJ4QrtA6RzrRrH6H1Hw5brsCLyKDI=
Subject key identifier: 94:FA:18:EE:AD:4D:88:B7:1B:5E:DE:8A:FC:3D:66:8C:A1:64:01:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011388
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/107684A0DBE111EFBEF0F269762E951A.roa
Signing time: Sun 26 Jan 2025 12:28:36 +0000
ROA not before: Sun 26 Jan 2025 12:28:32 +0000
ROA not after: Tue 04 Mar 2025 12:28:32 +0000
asID: 203020
IP address blocks: 156.253.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70536 (0x11388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:28:32 2025 GMT
Not After : Mar 4 12:28:32 2025 GMT
Subject: CN=67962a74-4920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:68:ba:97:24:a4:59:6f:d8:9b:14:d9:53:a8:
35:1b:e2:a0:44:a4:92:8e:bb:b6:b2:a9:7c:da:54:
03:de:d7:c7:6c:1e:02:78:78:43:65:e9:ba:99:b2:
32:c1:92:1d:57:9e:c2:73:40:39:a6:11:bc:e6:96:
e7:1f:33:04:b3:5e:0e:f0:ec:66:b2:24:6c:ed:de:
b5:da:05:5c:39:c7:e9:81:d2:83:f7:7a:07:95:61:
31:5f:f1:cc:cd:7f:75:4e:1f:d6:00:fc:3e:09:e1:
bb:35:77:02:ce:e0:db:56:6a:30:55:24:9f:0b:f8:
3c:30:36:96:27:50:7e:26:a9:d9:62:2d:6d:bd:cc:
84:ba:d2:6d:7f:77:42:ce:6e:78:8d:41:1c:e3:ea:
d4:37:19:4a:b5:7a:31:b5:26:04:00:24:da:f1:ff:
18:e5:d2:08:a0:25:d1:89:1a:93:84:c6:5f:5d:61:
36:5c:ac:2f:c1:be:23:75:f5:a7:44:01:cb:08:c6:
db:15:72:d3:ee:2d:36:9a:55:7b:a5:fe:43:b5:ad:
ba:f1:a3:ec:5c:f8:89:02:6e:ac:5d:81:f6:f9:b8:
e7:de:ae:72:6b:89:32:0e:7d:8c:b5:1e:79:25:a5:
21:26:82:cf:5f:76:95:e2:47:9a:af:5e:1f:6d:11:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FA:18:EE:AD:4D:88:B7:1B:5E:DE:8A:FC:3D:66:8C:A1:64:01:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/107684A0DBE111EFBEF0F269762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.194.0/23
Signature Algorithm: sha256WithRSAEncryption
44:34:c6:09:64:75:fc:1c:9e:93:02:52:14:a6:c1:da:9a:63:
46:91:f0:6d:dd:a0:49:d4:22:38:fc:96:a4:cb:d3:c5:67:66:
4e:35:a4:2e:9f:73:6f:78:79:53:73:29:98:2c:e7:25:2a:ae:
01:10:d9:c4:2b:81:57:b7:66:74:89:02:b5:46:47:13:92:74:
ea:8c:31:54:64:f5:ef:4f:28:24:04:29:00:d8:63:59:ec:2c:
47:57:2a:73:68:f0:88:4e:7b:68:3c:97:55:af:cc:3d:98:b5:
94:c9:ba:4d:46:c6:8e:61:74:59:90:14:be:63:df:16:35:d1:
55:d3:9b:5f:cb:a5:d0:3e:66:77:23:d8:30:4b:8f:2b:87:8d:
71:bc:58:73:ea:88:22:87:8b:d5:dd:5e:71:5c:04:fe:48:bd:
7f:86:15:1a:0f:16:10:48:84:e1:51:de:bf:8e:5f:61:13:fd:
c3:96:87:86:9c:de:c5:e1:29:85:a3:09:91:2c:ca:e7:89:a3:
4c:25:68:ce:30:8b:7a:a7:04:9f:b6:a6:99:a5:8c:e1:ac:eb:
3c:59:6a:7c:45:bf:c3:aa:7f:fd:bc:4f:9f:81:1f:a5:2d:74:
fd:92:42:5c:76:3a:6b:32:de:6c:a5:c3:54:3d:ba:36:ec:3c:
d8:d0:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:13:24 2025 by rpki-client