Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/127613CEDCD611EFB2E23A5A762E951A.roa
File: 127613CEDCD611EFB2E23A5A762E951A.roa (raw, json)
Hash identifier: RTn5G21vamEs4EH9hzEfWg9NQsTb9TjAIvvkCPzoUHw=
Subject key identifier: 7F:94:0B:F2:BA:70:19:7E:D4:DA:87:BD:1F:7B:E8:F8:15:D7:DA:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011565
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/127613CEDCD611EFB2E23A5A762E951A.roa
Signing time: Mon 27 Jan 2025 17:42:27 +0000
ROA not before: Mon 27 Jan 2025 17:42:22 +0000
ROA not after: Sat 15 Feb 2025 17:42:22 +0000
asID: 39600
IP address blocks: 156.237.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71013 (0x11565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:42:22 2025 GMT
Not After : Feb 15 17:42:22 2025 GMT
Subject: CN=6797c582-6cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:32:02:d0:4e:f7:b0:20:30:48:3a:8b:17:
92:cc:89:67:4b:e6:bb:a0:de:ed:51:54:62:0d:f6:
5c:4f:00:5f:3e:92:e7:ac:86:6a:a2:9a:b6:04:35:
83:2a:c1:78:1a:53:a7:9b:9c:19:78:15:bc:52:48:
bc:26:34:ca:ec:7f:e0:26:66:44:da:8b:ee:ea:c3:
22:dc:29:2e:f6:0f:64:83:3e:27:81:ab:3c:80:03:
ce:66:4a:fb:dd:30:63:95:65:fb:21:20:b2:69:26:
90:ab:17:db:7c:5b:22:b6:72:e7:b5:13:01:44:ec:
3b:4a:22:06:cf:2d:bd:41:82:dd:52:f9:fb:91:c5:
5a:31:e7:37:3f:a4:08:57:f8:7b:b0:dc:15:85:23:
32:9b:e9:c4:b5:2f:3a:68:5b:67:88:9a:96:1b:87:
22:52:ee:1f:da:ad:03:be:f3:6d:3b:03:2e:91:25:
23:71:7d:51:fa:96:d9:5a:19:5c:c0:9e:19:26:ad:
c3:f4:cd:d3:12:ea:52:93:cb:0c:f8:63:4b:49:35:
00:55:4e:0e:34:1f:2d:e4:98:5c:27:6c:4f:e7:d0:
d1:e4:c5:0d:37:3c:56:f7:f4:19:4b:2a:fa:2c:ab:
70:2d:c5:6d:b1:82:78:22:c4:60:95:e4:ef:e7:82:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:94:0B:F2:BA:70:19:7E:D4:DA:87:BD:1F:7B:E8:F8:15:D7:DA:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/127613CEDCD611EFB2E23A5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:0d:eb:1a:e2:d6:a2:75:d3:ee:e9:0f:77:2a:ac:04:22:b0:
99:af:3a:eb:96:a7:fc:50:5d:87:27:87:7f:2e:30:48:51:b4:
a0:7f:4a:d8:3f:24:51:66:7a:61:65:8e:61:30:bf:ae:84:35:
0d:b5:3e:b8:59:db:87:af:2f:3f:9d:b4:c6:86:e0:61:ec:31:
61:0f:2d:6d:4e:93:46:16:16:86:5a:17:7b:76:47:29:92:bd:
15:b6:c6:d5:44:7b:0d:87:c8:f7:e2:ea:47:c6:cb:3c:16:35:
3f:6d:f2:1b:98:f4:81:ef:a9:06:fd:7a:dd:68:a6:06:c6:63:
dc:29:15:07:5c:1b:35:91:08:48:5a:e7:44:4d:8e:be:a5:df:
ea:04:3c:8d:52:b2:3d:41:ff:67:c8:1d:44:b4:9f:e0:27:02:
b8:31:33:58:35:2c:4a:80:31:76:90:a8:64:d0:68:da:aa:70:
b2:a2:58:bb:4e:5f:ee:c3:10:03:f5:f8:e6:c7:5e:b8:86:2e:
ce:79:c2:e8:bb:7b:ca:42:d2:38:9b:ea:75:50:da:5f:a0:79:
95:e9:8d:af:00:89:e7:1d:97:93:51:37:18:02:e9:c8:7e:03:
2c:c2:d7:8d:94:c1:d1:49:7b:9f:34:18:d4:45:f5:94:03:87:
b4:f7:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:35 2025 by rpki-client