Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/294FDE34D95411EFA53921B0762E951A.roa
File: 294FDE34D95411EFA53921B0762E951A.roa (raw, json)
Hash identifier: HDEjierQ1Xo++lAc/g4o7uYUWF+5WGP+b6owqPl+Wkw=
Subject key identifier: B4:3D:83:76:9F:BF:97:75:AB:D0:B5:B3:B3:8E:03:5C:D4:2C:E1:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/294FDE34D95411EFA53921B0762E951A.roa
Signing time: Thu 23 Jan 2025 06:34:57 +0000
ROA not before: Thu 23 Jan 2025 06:34:53 +0000
ROA not after: Sat 15 Mar 2025 06:34:53 +0000
asID: 138915
IP address blocks: 156.244.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69273 (0x10e99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 06:34:53 2025 GMT
Not After : Mar 15 06:34:53 2025 GMT
Subject: CN=6791e310-75b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:8c:b8:be:dc:bb:c2:85:69:20:ab:9c:e7:
65:42:d3:f9:ef:da:b8:a2:17:c2:98:1e:94:69:93:
8b:b1:a1:49:ed:81:c3:cb:30:e6:65:ce:53:ec:ef:
b4:34:fa:42:11:05:a6:17:f1:78:52:1b:d0:ec:82:
14:21:0a:28:b9:db:52:b6:58:1c:32:93:ed:bf:2a:
47:3d:71:00:8f:c2:bb:7e:d3:ba:82:7e:16:22:26:
23:3f:3b:96:b6:2a:ca:e3:44:1c:c2:17:43:6c:f6:
e2:70:f6:01:5f:4f:7c:7d:a3:ec:72:ca:a7:64:12:
8b:72:f3:a0:fc:d2:dd:9b:5f:73:23:87:36:7b:1d:
39:93:3a:0f:6d:88:ad:e9:42:be:23:2d:69:ce:2b:
33:68:c8:28:4e:ca:01:8b:bf:65:5d:c7:95:31:e6:
9e:64:4a:29:bc:d1:08:1b:60:8c:3c:2f:7c:1c:d8:
d8:44:44:c3:92:28:81:45:ef:71:e7:06:7e:a1:15:
fe:61:4e:09:23:91:b9:8a:26:05:3d:be:73:01:f0:
f8:b4:2a:63:64:ac:26:5e:73:b8:59:16:03:8b:48:
e6:d6:a7:0b:d1:31:eb:e1:10:f8:9c:fc:6d:26:00:
07:78:18:6f:0e:68:d3:b8:ee:ee:4a:5a:d0:52:93:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3D:83:76:9F:BF:97:75:AB:D0:B5:B3:B3:8E:03:5C:D4:2C:E1:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/294FDE34D95411EFA53921B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.40.0/24
Signature Algorithm: sha256WithRSAEncryption
98:26:1d:fd:0e:c7:54:f3:89:bc:70:da:fb:da:d3:a6:ed:f5:
82:06:62:fe:0d:4e:62:04:2f:14:bb:12:01:09:b9:5c:bd:bf:
33:96:3b:48:5e:f4:4e:9d:19:ec:0a:7a:4e:bf:35:10:c7:48:
69:50:dc:b8:5f:01:14:76:f0:21:e0:6d:60:41:57:85:1c:c8:
6c:50:4a:7c:63:fd:bd:76:7b:1e:be:3a:63:21:6a:8d:31:33:
8d:e7:11:52:53:1c:66:ba:95:2f:61:4d:ac:c3:4e:1a:66:b1:
c4:d7:8c:f6:c3:34:21:a9:7a:c3:0e:ca:3a:8b:f3:ef:0f:99:
89:00:c3:1a:01:78:03:f6:d9:76:58:a0:95:20:17:d0:20:ba:
26:02:1e:fc:51:61:e1:58:a7:97:a9:c5:40:9c:16:69:0c:19:
ec:b0:8c:63:ec:7f:db:31:5a:c2:bc:e6:ba:bb:d5:ab:a0:35:
59:62:bd:92:f7:d9:5f:45:4a:a9:68:a4:88:ed:e6:92:5e:f6:
2f:25:3d:a6:50:79:b5:1e:19:2f:91:9a:e1:e8:39:a1:f2:92:
dc:0d:74:cb:fd:bc:55:64:18:2a:ac:cc:8a:94:35:ca:99:e9:
85:19:d2:f0:cb:d7:a2:a0:59:dc:51:27:c6:54:83:bd:85:ce:
f2:d1:81:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:15:38 2025 by rpki-client