Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16910438DBE011EFADA81863762E951A.roa
File: 16910438DBE011EFADA81863762E951A.roa (raw, json)
Hash identifier: hmaNkcGbhlb0B4fnckOklvxRycCetvwbSXu8zksFipk=
Subject key identifier: D2:CD:EE:04:4E:80:7F:B1:53:90:2D:95:C9:0E:D7:B4:0E:27:87:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01137A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16910438DBE011EFADA81863762E951A.roa
Signing time: Sun 26 Jan 2025 12:21:37 +0000
ROA not before: Sun 26 Jan 2025 12:21:33 +0000
ROA not after: Tue 04 Mar 2025 12:21:33 +0000
asID: 203020
IP address blocks: 156.253.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70522 (0x1137a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:21:33 2025 GMT
Not After : Mar 4 12:21:33 2025 GMT
Subject: CN=679628d1-6a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:18:f9:7b:53:9c:11:90:31:5c:4b:47:39:
f0:fc:9e:f5:47:b2:0f:3c:b7:6d:a6:20:9b:01:bc:
80:61:e6:1d:0c:3a:82:10:e9:c1:1e:79:fd:b3:d7:
79:63:5d:d9:de:dd:2e:14:a5:a9:eb:cc:a3:cd:d6:
30:35:1a:06:ee:0c:88:61:80:d0:0b:c9:9d:a1:85:
39:82:97:d5:e0:14:54:a6:8f:65:87:ec:ef:6f:b9:
08:4c:a5:d7:c3:34:81:fd:ec:d2:99:c5:46:1f:eb:
02:e8:83:70:c3:d0:d9:56:ca:61:9e:fb:22:8f:58:
a9:87:f8:f0:9e:68:6d:5f:05:48:8f:0f:f7:88:2f:
cc:c6:d8:aa:ca:06:2c:81:7d:0c:6a:90:2b:5c:34:
c8:0c:1c:a9:1b:83:16:c2:df:df:85:20:d1:21:10:
17:be:94:63:14:bb:8d:4c:6e:df:6f:a5:7c:e2:12:
8d:38:f7:8e:9e:a3:8b:2b:22:20:76:f8:58:fb:63:
3d:c8:6a:61:0c:d1:c3:26:3c:97:d2:3e:4d:4f:71:
44:9b:d4:85:53:84:07:ce:20:25:27:4d:0a:ae:30:
f2:90:4a:1b:0e:d2:15:bc:91:df:4c:ca:a7:83:d2:
00:c2:37:df:06:cc:a1:57:99:30:d2:c9:69:1d:1e:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CD:EE:04:4E:80:7F:B1:53:90:2D:95:C9:0E:D7:B4:0E:27:87:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16910438DBE011EFADA81863762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.210.0/23
Signature Algorithm: sha256WithRSAEncryption
56:0a:0f:15:8a:6b:58:86:e2:60:30:e5:78:9e:7d:09:da:6a:
03:8b:1f:41:47:e3:0a:dd:14:48:a1:f2:75:6f:21:36:da:d3:
90:11:02:06:1a:39:52:72:34:64:bb:3d:21:c2:0f:6b:89:8d:
4f:76:db:36:0b:19:3b:30:5d:46:ba:ff:fb:6a:70:70:ef:2f:
e3:28:db:d4:15:96:cc:37:ca:1b:a9:b6:33:36:b3:94:8e:46:
ff:69:bf:46:dd:ed:8a:7e:5c:8e:be:24:22:c4:21:f2:48:6c:
e6:d1:6f:c1:c3:1b:c5:06:9f:34:80:ac:15:61:33:04:7d:3a:
89:0a:01:41:a2:7e:a7:67:bd:96:2a:68:da:75:50:cb:26:78:
1e:4a:9f:61:0a:15:4a:6f:cf:3a:15:aa:40:db:91:4e:66:83:
a9:e0:9c:ad:27:37:d2:3f:a2:10:13:32:9c:22:4f:db:41:3a:
32:ff:cd:42:42:2c:d5:8d:74:f9:83:a1:51:cb:12:3e:a3:7f:
64:d7:23:3b:c3:b7:a0:90:cb:79:cd:0a:08:3c:b1:ce:62:dd:
92:62:61:e2:16:c6:b1:f7:31:a8:7a:e0:a3:11:cf:66:42:d9:
e1:13:14:1e:d5:0c:e2:7f:8f:42:67:cb:f3:ab:2e:6f:5e:ca:
d5:03:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:47:44 2025 by rpki-client