Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13CBB1CCDC0211EFAC549644762E951A.roa
File: 13CBB1CCDC0211EFAC549644762E951A.roa (raw, json)
Hash identifier: alXORddbS+wdQbALU9jIbLZTu7Dx6Lqf6xsqNcQGoAI=
Subject key identifier: A4:B7:4C:FF:BA:C6:FE:85:5E:6F:06:14:FA:CD:EE:56:F9:51:37:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13CBB1CCDC0211EFAC549644762E951A.roa
Signing time: Sun 26 Jan 2025 16:24:55 +0000
ROA not before: Sun 26 Jan 2025 16:24:51 +0000
ROA not after: Sun 23 Mar 2025 16:24:51 +0000
asID: 63139
IP address blocks: 156.225.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70650 (0x113fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 16:24:51 2025 GMT
Not After : Mar 23 16:24:51 2025 GMT
Subject: CN=679661d7-f704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:91:02:c1:f0:7e:a2:97:e3:2d:0e:e7:3e:
a2:bc:51:d5:8c:40:8b:a5:ff:c4:ad:5a:e4:59:e7:
2f:58:5f:9f:f2:9a:ea:cb:bc:54:6d:fb:8f:e1:a7:
db:80:95:5d:1e:2d:e7:81:4b:fa:73:2e:a7:03:b3:
80:2d:30:12:a1:55:99:e3:5f:7a:e6:f7:bc:06:f9:
ee:c5:cd:d6:1e:ea:18:93:61:c1:0f:29:1d:2f:e4:
20:1e:8b:9c:29:a7:9a:3a:74:6b:4a:f0:7a:0a:6f:
8c:2f:07:0d:fa:4c:d9:13:6e:d3:7b:95:48:41:a2:
c4:a6:d3:75:d0:c2:0f:93:e5:93:8f:43:92:fb:c4:
a5:17:c3:07:0f:f5:d2:cc:e8:1b:9d:e7:35:92:dd:
01:c7:3c:98:fc:c7:71:2d:6a:cb:62:b5:d9:51:02:
77:2a:2d:d1:15:d0:81:fd:ad:a5:c7:8f:9c:c0:86:
26:ec:93:fb:3d:32:96:77:9f:1c:29:ad:08:8e:53:
ca:2d:89:51:f6:b3:b5:b9:6d:07:69:3a:f7:ee:06:
ea:5d:1d:c4:9b:97:da:d7:6f:4a:25:1a:3f:4e:3d:
32:ac:b9:fc:ac:91:83:c8:fe:be:79:d4:53:99:15:
0c:52:1e:69:55:bd:f4:07:d1:32:59:fe:69:a7:98:
1c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B7:4C:FF:BA:C6:FE:85:5E:6F:06:14:FA:CD:EE:56:F9:51:37:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13CBB1CCDC0211EFAC549644762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:54:b7:bb:97:35:8a:32:1b:f8:6d:2e:62:58:54:b7:1a:53:
3c:76:63:83:c8:48:b6:dd:45:94:69:92:3f:23:d2:44:85:1a:
b2:6e:9c:13:64:e0:84:d7:be:fa:b8:0d:a2:60:ee:d0:e6:06:
f9:48:95:66:20:1a:1a:81:c4:7b:3b:2a:af:6d:44:b1:7c:3e:
66:cd:97:8b:99:f5:79:3a:6f:3d:02:94:5b:57:2a:2c:b2:49:
2a:28:dc:22:b6:ed:67:08:4e:1d:3c:cd:6f:06:ae:9c:6c:6a:
38:61:84:84:90:f3:b2:36:47:23:6c:40:1b:2e:8a:f0:bd:65:
a4:6f:c2:88:16:24:76:58:05:ff:1a:aa:cc:0e:10:f0:f4:25:
d2:73:a0:6a:26:48:a9:77:6f:1c:f7:5b:7f:83:0e:c0:28:d3:
24:6c:88:46:85:c2:e2:3b:e5:86:5d:05:ef:98:5c:d3:d0:a6:
c7:71:5d:e1:18:4a:5f:4b:b1:51:b8:4d:57:be:0d:57:fa:cc:
d1:a2:e2:7f:34:e2:05:0c:ff:24:fd:bd:3c:4d:bd:e3:a8:42:
dc:cf:90:90:d5:69:82:0d:ef:e2:ee:b5:a2:2d:f8:0e:20:85:
88:dc:60:91:69:25:93:d2:02:06:a7:dd:48:52:cf:22:b0:f7:
e1:b8:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:55 2025 by rpki-client