Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CABFC5ADB2311EF85A2126A762E951A.roa
File: 1CABFC5ADB2311EF85A2126A762E951A.roa (raw, json)
Hash identifier: UNt3vC/MZAt7S9u1bqgNU87PvpLgL0Lt4s4lnXXOxwU=
Subject key identifier: 94:34:E8:60:4E:11:34:E4:E3:F4:F8:AE:F1:C2:3F:75:9A:4D:2A:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011277
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CABFC5ADB2311EF85A2126A762E951A.roa
Signing time: Sat 25 Jan 2025 13:48:52 +0000
ROA not before: Sat 25 Jan 2025 13:48:49 +0000
ROA not after: Wed 05 Mar 2025 13:48:49 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70263 (0x11277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 13:48:49 2025 GMT
Not After : Mar 5 13:48:49 2025 GMT
Subject: CN=6794ebc4-8dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:29:f7:9a:7c:ba:97:33:8c:b5:a1:be:1d:
26:c1:4d:eb:1a:36:db:25:9c:fc:2e:0e:ef:57:fd:
4e:b9:cd:f9:57:fb:75:c4:99:29:0f:5e:ae:9c:33:
36:18:f1:04:20:d5:0c:a0:c9:28:66:7c:e8:b8:60:
3c:ec:d5:57:b7:e5:a9:98:1f:9b:3a:c1:d8:b3:21:
00:19:04:96:47:b0:ca:2e:7b:4c:a7:48:04:f8:33:
23:9f:d9:9e:58:3f:50:04:62:61:ac:b1:04:28:c6:
69:c6:fb:5e:ee:5e:09:ea:9e:7c:0a:6e:18:80:fa:
b1:e5:60:bc:4c:2f:2e:0d:52:5c:db:58:d7:b2:aa:
de:bc:5a:75:8a:73:50:44:3d:12:75:c1:65:50:c4:
57:45:51:fd:2e:d4:e7:10:e2:81:b1:8b:38:d7:db:
93:b0:67:ec:f4:7a:b3:12:cc:c6:91:05:ef:85:69:
52:3d:94:01:f9:d0:62:cc:ec:fb:57:7c:dd:b6:05:
04:a9:b6:c8:82:d4:6d:cb:bf:a1:e3:a2:e7:13:60:
aa:e7:70:d2:cc:b6:b6:31:f9:1e:b1:aa:08:59:69:
ad:cc:db:79:f9:bf:1b:ff:61:bf:0f:9d:44:ad:f8:
01:c7:db:0a:62:c2:27:2b:62:6a:b4:52:59:d0:ef:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:34:E8:60:4E:11:34:E4:E3:F4:F8:AE:F1:C2:3F:75:9A:4D:2A:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CABFC5ADB2311EF85A2126A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:56:3b:13:10:81:64:6e:96:9d:15:08:40:5c:92:a5:7f:6e:
19:84:93:56:cc:7a:a1:88:e8:78:26:8c:fd:c2:fd:42:60:e4:
2b:73:36:eb:f5:a9:eb:89:16:28:50:33:24:30:1b:d1:f1:79:
f1:5f:05:2a:de:2d:f7:96:e2:4c:19:d7:61:e2:50:7d:40:87:
64:5a:9b:28:77:1c:af:a1:49:63:12:ed:8e:af:a4:41:9c:8a:
85:72:52:9e:a1:63:35:d1:eb:e2:73:84:dc:e8:ac:7b:30:5f:
2c:b3:13:cc:76:75:60:a6:f0:6b:1e:a5:8d:3b:74:52:ee:74:
14:6f:4a:2e:cb:fe:44:f4:64:f1:42:e7:8f:74:20:d4:b8:84:
01:58:0d:ff:6b:08:25:aa:aa:84:5a:72:41:81:1c:ac:0c:f9:
52:12:6b:44:62:2a:a3:e8:53:35:25:1d:d4:24:d8:d6:0e:a2:
1f:8c:9e:d5:e2:b1:50:9b:c0:0d:6c:a4:6e:24:f8:5f:c0:6b:
65:12:d4:7b:95:d2:6d:51:2c:84:6e:11:d7:95:bf:bb:16:03:
bc:09:3a:58:57:b2:fb:de:17:e3:06:b4:f2:81:92:23:eb:20:
a1:79:a6:d9:00:52:a1:0a:52:53:12:00:7c:01:34:da:68:3d:
1a:d4:e7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:17:53 2025 by rpki-client