Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20607452DAEC11EF9A3ADE78762E951A.roa
File: 20607452DAEC11EF9A3ADE78762E951A.roa (raw, json)
Hash identifier: sYvmqu6/qYUx+xiDvDNk8vHqQ7TcMPIWJp75dIQ1rUQ=
Subject key identifier: 70:9E:91:90:77:EC:D5:4A:6C:31:C6:6B:CB:FC:FC:02:70:D0:AB:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01110A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20607452DAEC11EF9A3ADE78762E951A.roa
Signing time: Sat 25 Jan 2025 07:15:16 +0000
ROA not before: Sat 25 Jan 2025 07:15:12 +0000
ROA not after: Thu 06 Feb 2025 07:15:12 +0000
asID: 39600
IP address blocks: 156.238.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69898 (0x1110a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:15:12 2025 GMT
Not After : Feb 6 07:15:12 2025 GMT
Subject: CN=67948f84-32f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:a2:11:a5:68:c4:71:3d:1b:6e:e9:f6:1e:
47:4b:9d:60:67:16:12:a9:91:12:25:b7:5b:01:6b:
5c:c3:e4:d4:75:9c:e8:77:4f:06:b9:13:c8:b4:64:
5c:7e:59:46:9d:f0:80:1d:2c:d2:a4:f4:5c:01:24:
c9:a6:da:a9:47:13:22:dd:26:4a:1f:58:e5:9d:29:
9c:0c:82:18:d6:4e:d0:f1:1a:c9:55:0e:d9:44:9f:
86:f0:e0:f4:b8:38:22:77:5f:d2:e9:0c:c3:99:f9:
e8:f0:20:c4:c9:81:fc:30:1f:56:75:a6:62:63:df:
1b:a7:82:be:d0:74:0f:af:00:ef:71:00:f5:9e:bc:
77:e7:c2:0c:66:b0:6e:74:98:d4:2f:7e:00:62:97:
4a:f5:49:39:47:e2:0a:61:ee:fd:f5:e5:f5:80:6f:
a7:f5:c2:8f:22:3b:13:6a:5f:97:9b:b1:f7:53:c6:
e2:88:7d:a3:18:17:93:d1:81:2f:9e:ef:29:fd:46:
cf:a1:ef:f8:65:44:80:f7:f8:be:12:5b:8d:ec:ae:
5f:b6:56:ad:6f:4b:38:ce:33:86:4d:90:3a:d1:d9:
d7:18:b1:04:70:22:03:97:37:c9:d0:08:0c:6e:c2:
d0:5e:94:6d:8a:6d:43:52:93:8c:30:8c:f9:bd:ec:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9E:91:90:77:EC:D5:4A:6C:31:C6:6B:CB:FC:FC:02:70:D0:AB:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20607452DAEC11EF9A3ADE78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.164.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:82:50:63:74:94:6b:70:c2:7c:2b:3d:fb:a0:cd:49:0e:29:
ed:c3:44:a2:82:90:92:aa:5a:9c:66:a9:20:b4:2e:27:d7:a0:
a4:51:43:a8:9c:ad:f9:e9:3e:4e:72:53:ab:0c:16:b9:b4:f9:
56:4b:b8:e4:04:7d:6d:22:a1:c2:5b:63:a3:4d:a3:03:ce:24:
4c:fd:54:79:c4:18:75:94:41:23:b2:62:df:ed:f8:49:1b:e7:
6b:73:7d:28:b5:d5:27:f4:f2:65:0d:62:2e:48:0e:6d:37:21:
68:d8:6e:a3:26:7f:c0:13:8a:10:54:26:24:21:c1:d9:a5:0f:
51:dd:22:5e:e4:3b:70:a4:50:ae:68:7d:c5:28:72:63:3a:9a:
60:1b:a7:88:73:62:bc:94:a5:a3:d6:33:64:7f:d4:68:5c:8a:
2d:36:e0:d8:89:34:73:c3:6a:6b:f6:2a:52:94:57:c8:70:83:
86:75:2a:e8:8d:27:41:74:66:07:72:75:35:27:b0:ff:5e:5c:
4d:c9:31:51:d6:9a:e9:5a:5a:42:c8:b0:a1:6f:5d:6e:f4:fc:
9c:57:b1:41:0b:64:c2:e5:60:af:87:3b:7a:da:ab:4a:a1:e1:
57:e9:2d:bc:a8:5a:b6:9d:85:d8:59:a3:7a:f6:ad:fb:aa:e0:
e8:da:04:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:03 2025 by rpki-client