Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/393C1D04DFF711EF82EF1977762E951A.roa
File: 393C1D04DFF711EF82EF1977762E951A.roa (raw, json)
Hash identifier: vvgrrpOk803CTk1F+EVsxJbtQKi2T2IrHdWaioc+KYk=
Subject key identifier: 82:AB:5B:90:4B:62:06:DD:B6:CA:38:52:B7:42:B4:61:CB:2B:AE:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/393C1D04DFF711EF82EF1977762E951A.roa
Signing time: Fri 31 Jan 2025 17:17:18 +0000
ROA not before: Fri 31 Jan 2025 17:17:14 +0000
ROA not after: Tue 11 Feb 2025 17:17:14 +0000
asID: 131471
IP address blocks: 156.238.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71347 (0x116b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 17:17:14 2025 GMT
Not After : Feb 11 17:17:14 2025 GMT
Subject: CN=679d059e-22cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ab:95:28:67:88:09:11:96:00:56:c5:1e:da:
9a:15:c1:e8:19:56:7b:71:7e:44:9c:11:a2:7e:4e:
37:57:6c:18:04:33:04:bb:63:86:b3:14:3e:bc:ff:
d8:ff:65:f4:af:b0:f3:5a:bd:fe:61:26:54:d6:91:
aa:fb:96:96:b5:72:b2:38:44:7d:fc:e0:b9:4e:12:
69:b2:e1:e3:0e:db:b4:13:52:90:a6:78:f2:a7:8f:
69:b4:95:e8:bd:71:59:e4:38:0d:b2:43:47:ed:80:
13:02:3d:09:4c:d0:3b:c1:27:27:b5:b9:2b:0b:bb:
d3:f7:1b:67:f8:72:43:c7:5e:ee:65:16:29:52:41:
17:39:58:ba:68:9c:5d:ae:fa:79:0b:02:33:58:77:
dc:db:cb:eb:61:08:16:32:29:cd:cb:e7:62:a1:5e:
c6:f1:d9:f1:c3:9d:49:94:bc:0d:1d:7b:ea:97:3c:
0c:2a:7a:33:13:17:d6:89:09:13:75:2d:ed:1e:d8:
42:07:8f:4e:64:ad:24:f9:05:bd:83:83:46:12:22:
58:e4:23:db:da:eb:a8:d0:6f:82:33:bb:0b:13:84:
92:ea:67:4f:6b:12:4e:88:1d:7a:69:1b:14:f5:73:
2a:fd:f1:30:24:75:1a:f6:0b:ee:7e:d5:3b:34:39:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AB:5B:90:4B:62:06:DD:B6:CA:38:52:B7:42:B4:61:CB:2B:AE:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/393C1D04DFF711EF82EF1977762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.69.0/24
Signature Algorithm: sha256WithRSAEncryption
43:76:8e:76:05:c5:5b:81:15:23:ae:7e:49:e6:ec:b9:b8:42:
15:b6:46:a0:a1:0b:aa:1f:f1:77:88:89:5a:40:90:0b:16:77:
b0:9f:91:64:55:01:0a:3c:90:d3:58:d0:78:65:44:7d:c3:5c:
cb:88:d3:36:91:b2:0f:5f:f2:73:ca:89:49:3a:11:66:11:83:
2b:fe:b0:c6:71:8f:fc:04:54:8c:49:c9:f2:01:ac:d4:36:a7:
e8:22:78:09:8d:98:0d:23:c7:e5:d4:ec:58:22:29:4b:3c:95:
48:cc:a9:47:dd:04:a7:16:68:80:58:4c:fc:05:3a:3e:96:5c:
bc:a5:8c:1f:ea:ae:4d:f1:05:5e:72:45:3a:3b:bb:6d:4d:bf:
26:1a:8e:e4:b0:f6:d3:9e:46:05:20:05:9a:38:0d:59:cd:bf:
e7:4f:dd:7e:70:c1:84:8b:ec:e2:1d:d9:fc:42:7b:04:ba:14:
88:26:f8:da:c9:71:79:49:b7:91:da:9e:f5:9d:b8:7f:7b:7d:
f3:cd:01:f9:61:3c:ae:5f:fe:7b:fe:01:f8:2f:24:c6:3e:64:
c9:e3:e3:f0:5c:0f:03:12:d1:d9:b6:a0:ed:93:36:0b:30:a0:
16:1e:d3:ea:66:b7:6b:7e:3c:90:60:ff:8c:eb:1c:78:f1:21:
3f:e6:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:55:47 2025 by rpki-client