Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/127DF5D4DFF211EFAFEA4A53762E951A.roa
File: 127DF5D4DFF211EFAFEA4A53762E951A.roa (raw, json)
Hash identifier: N0YI7cEtYSxBtuVa6Zr79yvD4RjGvLeOQ8O+8o9B+Sk=
Subject key identifier: 8E:5A:34:75:D3:55:1D:BA:AA:23:47:03:02:22:36:F2:AA:3A:2E:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011673
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/127DF5D4DFF211EFAFEA4A53762E951A.roa
Signing time: Fri 31 Jan 2025 16:40:26 +0000
ROA not before: Fri 31 Jan 2025 16:40:22 +0000
ROA not after: Tue 25 Feb 2025 16:40:22 +0000
asID: 137547
IP address blocks: 156.245.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71283 (0x11673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:40:22 2025 GMT
Not After : Feb 25 16:40:22 2025 GMT
Subject: CN=679cfcfa-c9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:76:f1:d5:01:c4:a6:bd:e5:fb:75:78:4c:
a2:a5:1a:a8:51:da:df:90:ee:99:77:fd:f1:4e:4b:
30:0d:b5:64:8f:d2:c9:c7:f1:a4:aa:b8:a5:17:4c:
f0:1d:a6:df:c3:e8:09:18:5b:cc:36:5d:19:ca:5f:
c5:20:8a:9c:e3:33:b0:b9:36:07:c7:cb:ad:c4:95:
66:38:41:28:45:04:b8:60:be:e5:c9:c4:f8:9b:3b:
cc:77:cc:52:09:26:cc:87:1b:40:d3:b9:62:c2:ef:
4f:71:ac:58:71:98:eb:3e:01:15:2e:b2:f7:a8:da:
24:0c:99:cd:a0:e7:0c:f3:39:a4:b0:27:b8:bf:38:
0b:6c:f3:fa:50:ca:c4:ce:e5:81:6a:a2:7d:32:30:
53:1d:22:65:ec:8b:dd:a9:f0:24:e2:3d:14:1c:7c:
c0:c4:2d:d8:f5:58:4e:fd:59:bf:6b:9a:6c:72:f4:
4a:ec:c1:db:41:2f:45:d5:96:f5:1d:97:6f:69:3a:
8a:07:1f:e5:52:2e:1c:ee:5e:98:4e:2c:47:53:be:
fe:e2:e5:a1:6e:aa:c6:be:d6:06:60:fd:1c:06:06:
dc:83:ed:75:f4:70:6b:08:98:8b:d8:09:d5:f9:a2:
70:c7:ab:94:a7:b3:26:09:93:b9:70:e5:1d:c4:b8:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:34:75:D3:55:1D:BA:AA:23:47:03:02:22:36:F2:AA:3A:2E:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/127DF5D4DFF211EFAFEA4A53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:11:a5:9e:76:0f:a5:06:49:66:ae:29:4f:d6:37:76:a6:c6:
aa:61:13:28:ff:63:5c:90:65:80:4b:1e:51:d8:8c:f7:ff:0f:
35:d5:f9:dd:d1:61:ad:fb:6d:bf:f0:2c:ac:a5:67:2e:64:65:
6a:22:8a:74:41:a3:f4:eb:25:81:cf:41:a7:17:b4:e1:0a:a2:
6a:3d:60:e6:b8:19:9f:b6:64:4d:f3:af:c4:91:2d:df:8f:60:
7c:3d:ea:fd:fe:9c:fc:70:6a:a4:83:b6:e9:ba:10:35:3f:d6:
e6:47:bc:70:90:42:b0:03:c0:41:5e:a8:f6:e7:4a:14:91:7a:
27:11:cc:3c:05:13:63:4b:17:0f:97:ca:b2:7c:9e:65:14:18:
7c:20:fb:4f:ba:66:1c:93:b3:42:08:2b:85:a2:1a:f8:1f:be:
9d:6a:55:f8:74:bc:ab:ab:3f:8c:9a:86:39:e2:76:96:c4:e6:
6b:cc:cb:7b:64:10:f7:56:a4:7c:7e:3f:3e:a0:b7:51:84:98:
92:47:85:08:fb:a8:e7:e8:ef:04:52:dd:64:54:3a:67:d6:3a:
16:83:0c:58:84:2c:f8:d9:de:38:cb:8e:93:ff:9e:14:f7:4c:
7b:62:9f:e4:35:ca:57:07:2e:b6:2a:c6:d8:93:4b:c4:61:a4:
20:d5:70:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:36 2025 by rpki-client