Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/211D5A5CD50311EFA16FB9BE762E951A.roa
File: 211D5A5CD50311EFA16FB9BE762E951A.roa (raw, json)
Hash identifier: UFEaqu+7gx6vS2LKvKdSgOzJvYJP+dgVUV+AB9swE1s=
Subject key identifier: 9C:AC:87:A9:BA:FF:3F:F8:53:4D:3D:6A:BC:79:95:E5:D5:EF:96:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/211D5A5CD50311EFA16FB9BE762E951A.roa
Signing time: Fri 17 Jan 2025 18:44:49 +0000
ROA not before: Fri 17 Jan 2025 18:44:45 +0000
ROA not after: Fri 31 Jan 2025 18:44:45 +0000
asID: 39600
IP address blocks: 156.255.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68182 (0x10a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 18:44:45 2025 GMT
Not After : Jan 31 18:44:45 2025 GMT
Subject: CN=678aa521-a235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:0d:cd:12:97:d5:9e:03:e7:a0:86:08:b8:
55:51:f5:4a:a4:54:56:b9:24:05:9c:78:08:92:d3:
e2:dd:af:93:29:ec:9c:50:3c:2f:b3:d2:7b:6c:d4:
9f:b2:6f:2a:57:e2:73:a4:c7:a1:23:5a:bd:ad:07:
22:f9:ab:40:24:0a:45:ee:8b:d8:62:4b:61:5b:7b:
1b:de:8d:50:af:e0:94:fd:75:48:5f:3c:31:8a:8b:
2d:3a:8c:41:be:4e:a3:a2:ce:32:eb:5b:93:92:dc:
c8:79:20:9a:39:35:8e:1f:a4:b0:49:3b:a5:0a:bb:
4f:2e:ea:73:30:6c:c6:cc:ad:d2:14:cc:13:2a:c3:
25:58:2f:99:07:3d:d6:6a:48:57:7b:74:45:40:43:
11:05:ab:63:3e:9a:7f:3c:33:3d:3e:84:f9:c8:7e:
a5:ed:7f:75:76:d1:46:87:cd:0c:11:bd:25:35:59:
a8:b5:7d:f3:30:9a:0e:6e:45:9e:65:fc:b4:fb:e5:
12:6e:09:cf:fd:45:aa:7a:04:42:b1:91:e3:d2:c9:
3a:c4:3e:93:39:47:b8:cd:8c:04:35:eb:14:5c:81:
b2:10:02:6b:13:4e:23:b7:6e:83:4c:f2:85:73:47:
17:e9:05:62:4e:24:53:a3:10:e0:c8:10:33:86:be:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AC:87:A9:BA:FF:3F:F8:53:4D:3D:6A:BC:79:95:E5:D5:EF:96:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/211D5A5CD50311EFA16FB9BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.84.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:c4:b6:63:73:1d:83:2b:5a:39:f8:b5:3f:52:ac:22:d7:32:
76:00:21:d8:83:60:f8:ff:9e:90:96:b8:4e:15:39:00:e4:55:
0b:31:e9:44:b4:ab:21:c4:a0:f2:46:11:39:c6:34:13:51:f3:
7f:f2:4c:4a:ff:21:78:df:5b:5b:7f:a1:2e:2a:c5:4c:a6:bd:
3f:e9:12:7e:5c:24:d9:2d:81:e7:9d:84:d8:dd:a4:77:f4:35:
c3:db:3d:41:9f:51:d2:33:a7:eb:d0:4d:63:09:cd:72:c1:47:
5f:d2:db:de:b0:0c:71:11:f7:b3:08:36:55:d2:d2:dd:0c:59:
fa:24:3a:22:e7:75:fb:aa:ea:d6:d9:93:d6:ff:e9:2a:38:7c:
b5:00:65:f7:16:f1:b1:a0:96:ee:1e:69:ad:45:9b:b7:b3:81:
06:06:82:8f:5c:1c:5c:93:ca:d9:e4:84:8c:a1:13:ff:a8:8e:
c6:ae:54:4c:fd:99:6b:56:27:2a:1d:8f:36:13:43:88:49:5d:
70:9d:c1:51:4f:f1:28:b5:f3:d1:d3:44:86:ea:67:8f:92:f6:
88:ff:62:37:a8:04:b9:0d:a4:23:6c:72:84:ee:41:a3:d8:c1:
ae:11:9d:ce:00:ad:b5:3f:c9:e3:41:c6:d9:89:45:a3:49:db:
ad:93:00:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:03:22 2025 by rpki-client