Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31D723A4DCD411EF8CA9FD4C762E951A.roa
File: 31D723A4DCD411EF8CA9FD4C762E951A.roa (raw, json)
Hash identifier: r6G4wlLyXaLNnDSxtLZmLCg8aa/ZudJk5K6P60/VvsI=
Subject key identifier: AF:0F:DD:D5:0D:55:7F:C2:FD:E1:4E:3F:28:C6:5B:43:0C:0A:8C:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011559
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31D723A4DCD411EF8CA9FD4C762E951A.roa
Signing time: Mon 27 Jan 2025 17:29:00 +0000
ROA not before: Mon 27 Jan 2025 17:28:56 +0000
ROA not after: Sat 15 Feb 2025 17:28:56 +0000
asID: 39600
IP address blocks: 156.237.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71001 (0x11559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:28:56 2025 GMT
Not After : Feb 15 17:28:56 2025 GMT
Subject: CN=6797c25c-2847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:34:19:9b:68:0a:ec:61:e9:cf:35:47:14:
9a:1f:50:2b:33:e6:f4:cf:08:2d:73:73:98:db:c1:
23:3f:74:13:c5:33:24:78:9c:c0:45:f5:7c:a3:94:
5a:c2:56:ec:83:08:a4:6a:23:cf:22:68:35:aa:c8:
69:6b:c4:2e:d0:03:b0:df:19:84:b9:a5:57:ee:0b:
5d:c0:32:af:ae:df:11:66:d8:4f:38:49:34:81:82:
02:97:b6:9b:eb:a3:e7:b9:0c:31:c9:29:66:0c:f8:
2a:8f:bf:0d:66:06:da:d0:58:8b:25:fb:41:a5:ee:
ae:d6:c5:9a:d2:82:bb:63:d3:bd:d5:6c:e6:81:c3:
bb:cb:54:29:2c:d8:89:49:5d:d7:fd:c9:5f:c8:4a:
87:b3:9f:75:af:1e:cb:ef:c5:f3:75:c4:d4:dc:20:
d8:ec:0a:12:18:3d:09:28:9f:11:80:ae:2c:44:7f:
f5:00:6b:71:8b:f4:16:ea:46:c1:dc:84:39:1f:fc:
a3:b9:e8:a4:2a:58:d3:18:66:9f:c8:15:0f:c8:06:
14:bf:67:1d:9e:d3:83:f0:af:84:50:0b:6b:60:b5:
c3:38:7f:0b:ad:0f:73:94:f6:b7:fa:fb:b7:16:fe:
94:a8:5e:f8:9d:4d:6f:38:56:45:08:be:ec:b8:3a:
64:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:DD:D5:0D:55:7F:C2:FD:E1:4E:3F:28:C6:5B:43:0C:0A:8C:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31D723A4DCD411EF8CA9FD4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.109.0/24
Signature Algorithm: sha256WithRSAEncryption
32:92:f7:00:4c:75:dc:76:ed:e6:d7:19:b2:8c:6b:25:e0:c6:
37:0f:3b:89:cd:d0:25:b2:9e:d5:d9:8b:cd:80:2b:78:43:fd:
a4:ff:1d:69:da:6a:b0:2c:86:86:66:fe:db:e6:21:79:82:18:
3d:30:05:e4:d1:e6:43:0c:6e:b0:ad:bd:56:24:da:1c:28:2d:
66:84:8d:19:e3:70:31:c9:f6:01:7a:4a:fe:f2:da:a3:bc:ae:
aa:01:57:53:50:4c:46:7e:3f:7b:f5:87:19:f2:5a:81:45:eb:
04:56:d9:f7:b0:c5:b8:d3:34:c7:13:53:19:e6:19:dd:77:d3:
22:9b:af:0f:ab:f1:49:00:7b:59:f8:16:46:04:93:b7:c4:a8:
05:29:0f:f0:a7:70:53:43:73:e4:8e:3c:02:d3:9d:66:8b:3f:
fb:24:c1:f2:27:ed:a6:76:29:15:2f:ad:56:58:19:6d:62:1b:
a9:a4:eb:60:c8:aa:f6:44:d6:8f:30:64:a2:e0:a7:7d:96:94:
14:e7:8c:cf:6a:3a:d9:db:96:e6:91:87:30:37:5b:a1:87:55:
a7:5e:4c:bd:df:cd:5a:15:b5:b9:6f:14:9a:37:c5:bb:3e:51:
ef:92:25:d4:10:19:53:13:f0:5e:fb:5c:fa:53:12:80:32:97:
79:19:ec:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:26:51 2025 by rpki-client