Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17C8F51CDCD111EFB871CAB6762E951A.roa
File: 17C8F51CDCD111EFB871CAB6762E951A.roa (raw, json)
Hash identifier: Bw0QsBQ+IRZbainfKS3izHlPP/HlXmrVVZeh9c0p2Gg=
Subject key identifier: 8F:C3:8F:86:5F:1A:59:0F:83:C9:06:A3:F4:81:79:69:D8:61:75:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011545
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17C8F51CDCD111EFB871CAB6762E951A.roa
Signing time: Mon 27 Jan 2025 17:06:48 +0000
ROA not before: Mon 27 Jan 2025 17:06:44 +0000
ROA not after: Sat 15 Feb 2025 17:06:44 +0000
asID: 39600
IP address blocks: 156.237.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70981 (0x11545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:06:44 2025 GMT
Not After : Feb 15 17:06:44 2025 GMT
Subject: CN=6797bd28-ea07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:fa:65:ec:d7:20:1c:ea:2e:85:2a:76:ec:
93:65:4a:ad:d6:14:8f:ed:1c:b4:1b:3e:13:b1:b0:
92:18:51:88:f2:c7:89:f9:d0:03:ec:6d:b0:9c:d0:
c0:fc:dd:59:83:94:af:59:79:74:f1:68:80:ed:b9:
ba:50:e5:53:c9:f7:9d:bd:b0:10:93:a4:e4:88:f5:
40:b9:99:6a:69:1c:78:26:83:08:00:02:15:59:f4:
92:39:d6:e9:a7:82:ee:2c:58:bf:05:64:0f:ce:42:
e7:1c:a4:10:0e:4d:d2:99:b1:44:96:b0:ee:be:f5:
27:63:b4:74:30:b3:a1:51:09:16:2d:22:27:e1:69:
32:86:ca:7c:de:87:35:06:92:54:3d:c2:8c:7d:39:
64:9c:9f:6d:6b:47:41:50:e9:d6:7b:7e:d6:53:9d:
e3:df:4f:0c:7e:dc:07:84:b0:2a:8c:3c:98:0f:4d:
d3:eb:fc:ee:e4:4e:2f:88:42:0a:b5:89:d1:53:75:
4e:a9:ef:58:92:3c:25:3b:fb:6f:45:10:6f:bd:1c:
cc:2a:91:26:3f:cd:fe:d3:ed:6a:ba:7a:7f:14:2c:
c7:ca:f5:ba:85:7b:51:f3:c8:4f:8f:58:c9:e7:e1:
30:46:53:59:4a:20:50:a6:49:dd:3a:f1:67:ce:75:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C3:8F:86:5F:1A:59:0F:83:C9:06:A3:F4:81:79:69:D8:61:75:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17C8F51CDCD111EFB871CAB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c9:76:19:68:c5:72:ad:ed:0c:8b:42:fd:97:cc:8b:20:e7:
81:a2:d8:de:34:78:6c:6e:52:be:55:35:4e:ff:95:c7:c4:e8:
1c:fc:72:ac:ee:92:a2:2a:cc:bf:68:9e:f8:75:a0:cc:bd:c5:
e2:e0:aa:12:f0:89:49:be:46:13:a7:c3:7c:fb:16:ad:d8:5e:
45:8f:b4:13:9e:64:aa:dd:a7:24:22:11:ca:0d:68:d3:65:9b:
77:9a:28:05:e4:56:10:61:7a:dc:75:0d:99:73:89:c9:72:87:
13:79:c8:40:f6:f1:4a:7f:57:4c:76:ae:36:9d:97:49:bf:da:
50:19:8d:98:d5:84:6d:a1:dd:41:1a:ff:f3:2b:3c:f8:b6:3f:
bf:f5:77:4f:d9:84:79:ff:43:8e:d6:5e:e3:a0:b8:0b:ec:a6:
1f:62:f2:38:41:e7:9a:f9:aa:5f:77:22:f3:65:60:a5:4c:82:
f4:a3:ca:fa:44:77:3c:a1:10:4d:d3:45:f0:ec:d3:1f:d7:88:
cd:45:b5:e5:7e:6a:89:14:3a:68:df:af:7c:fe:d7:a1:0f:0c:
05:e4:fb:b3:19:6e:57:ed:d8:ee:cc:00:1a:a8:9c:1f:8f:55:
91:25:29:8c:3d:a6:cf:f6:72:bc:60:ec:10:65:0b:36:57:09:
3d:81:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:49:08 2025 by rpki-client