Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1593560CDC9511EFBF1F3AA9762E951A.roa
File: 1593560CDC9511EFBF1F3AA9762E951A.roa (raw, json)
Hash identifier: VCY8+aOJ4L0amvdbr1UPPWQ6Lruo5EAs7gDn6ic5R2g=
Subject key identifier: FA:FE:00:12:86:0A:B9:31:98:B8:06:78:FF:10:15:8B:50:C3:18:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1593560CDC9511EFBF1F3AA9762E951A.roa
Signing time: Mon 27 Jan 2025 09:57:14 +0000
ROA not before: Mon 27 Jan 2025 09:57:10 +0000
ROA not after: Sat 08 Feb 2025 09:57:10 +0000
asID: 212238
IP address blocks: 156.232.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70861 (0x114cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 09:57:10 2025 GMT
Not After : Feb 8 09:57:10 2025 GMT
Subject: CN=6797587a-178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:26:03:21:97:b2:70:9c:1c:10:1e:e1:81:
d2:f0:2e:b9:18:5e:d3:fa:cc:ca:94:5d:e8:33:5d:
7a:2e:9e:a2:7a:60:93:de:d6:34:16:82:1b:24:2b:
cf:43:62:32:b7:95:bb:5a:00:bb:ec:7f:79:32:b3:
8e:bc:4e:35:9d:31:1e:99:ae:e0:d3:09:a4:bd:93:
6e:d8:c3:24:02:76:8c:34:e9:cc:67:f4:7a:cc:47:
2c:a9:7f:81:ab:4b:43:5b:ee:a9:43:c3:bd:f8:d6:
51:cb:52:1c:05:85:95:38:61:d4:1d:35:20:0d:2e:
0d:63:23:e7:e9:d0:4e:67:a4:74:47:75:f2:b3:22:
b0:85:42:1e:68:4f:b9:e2:c0:d8:b5:bb:47:ca:ef:
09:5b:52:8a:68:f3:48:c4:fe:b3:a3:ad:3f:ea:3a:
a8:77:b2:13:49:24:2b:9b:d2:81:d5:82:5b:93:c5:
3e:e8:35:31:19:50:eb:13:e4:51:28:3a:b6:9b:8e:
4b:bc:9d:03:af:98:3a:11:f2:18:42:a9:53:b5:25:
10:69:ea:ac:c0:26:5a:be:2e:42:a3:c7:15:f2:47:
61:51:b6:ff:44:03:ca:b7:6f:5d:1f:b4:34:8d:16:
78:49:41:76:24:cf:f8:1e:c9:66:c5:d2:6e:14:3c:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FE:00:12:86:0A:B9:31:98:B8:06:78:FF:10:15:8B:50:C3:18:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1593560CDC9511EFBF1F3AA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c8:da:2f:82:4f:31:6f:47:13:3e:df:5d:0e:37:1f:9a:86:
4d:af:94:4a:3c:14:b1:ca:da:de:5a:1a:fa:df:1d:37:f2:73:
e9:4c:06:ac:26:f1:eb:20:a2:85:f9:ef:9a:04:0d:e2:36:ae:
7d:41:be:87:cb:3e:18:d7:a3:bb:fe:d5:2c:d2:31:43:6e:52:
6b:2a:98:0f:df:7b:41:5b:31:12:30:22:05:5f:4a:a8:ff:a0:
72:fa:26:75:f5:34:58:85:89:f2:fd:ae:03:a0:25:4e:51:bf:
ca:93:6e:47:25:c1:e6:c4:9d:42:10:66:3d:58:c2:59:1b:35:
34:bc:35:71:3a:b4:f3:53:ed:0d:4d:c3:36:dd:fe:b3:98:74:
fe:27:c0:a6:c4:b2:5d:b0:ae:47:23:89:25:78:cf:e0:83:33:
b4:9e:5d:90:b4:ce:03:ad:81:67:92:bd:e6:61:5e:1e:a1:5c:
40:43:f3:c1:5f:0c:d4:b4:a6:fb:89:40:1d:65:8b:bc:0a:06:
67:63:0c:28:1d:1e:6c:5a:d3:2f:9d:84:33:3b:7d:63:ca:63:
ab:5b:9f:2c:17:c4:3e:c9:fc:f3:52:99:ce:0f:5f:ac:4d:7e:
ce:47:e4:5d:be:0a:a5:b9:4a:ab:b9:20:1d:84:d7:93:79:3d:
cc:c0:21:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:09:02 2025 by rpki-client