Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39FB1AD2DCB511EFBCE5BA7F762E951A.roa
File: 39FB1AD2DCB511EFBCE5BA7F762E951A.roa (raw, json)
Hash identifier: feeh+yVZivG/zNeXzwArKJExk4Lccf6Wh2EmckGOypE=
Subject key identifier: CF:3C:05:84:FD:4F:A8:7C:99:74:A0:6C:1C:C6:BF:9D:3A:AD:C8:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011521
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39FB1AD2DCB511EFBCE5BA7F762E951A.roa
Signing time: Mon 27 Jan 2025 13:47:19 +0000
ROA not before: Mon 27 Jan 2025 13:47:15 +0000
ROA not after: Sat 08 Feb 2025 13:47:15 +0000
asID: 5065
IP address blocks: 156.239.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70945 (0x11521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 13:47:15 2025 GMT
Not After : Feb 8 13:47:15 2025 GMT
Subject: CN=67978e67-3f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:af:60:03:b5:6d:80:11:b3:41:e0:69:2e:
4f:ae:cb:6c:aa:af:ef:66:dc:70:a5:86:8b:16:c2:
9f:79:b8:48:17:a5:71:c5:fd:cb:92:f5:14:09:8c:
dd:d8:fb:00:eb:1e:ea:ac:2d:49:b0:b2:d5:13:b9:
e5:72:c9:e7:b6:9c:e6:d9:02:b0:78:6d:e2:f0:54:
55:05:0a:fd:ab:ca:a4:fa:c8:6c:e4:9f:a1:29:a3:
33:70:a8:7f:13:c2:e6:13:6d:40:61:8b:ee:9b:a7:
d5:43:c8:85:ed:8a:82:9d:97:89:dd:18:f7:37:c2:
12:77:80:6e:61:f2:99:71:67:b3:4c:01:aa:e8:3e:
83:3f:9d:d8:54:ea:3d:a1:ee:16:ba:4f:ed:8d:7c:
b8:ca:e5:27:ae:c6:1a:d9:c8:20:c5:19:eb:42:76:
4c:c0:57:ca:fb:88:6a:b9:b9:a4:71:bf:5f:49:ab:
55:dc:71:05:0f:98:ae:61:2d:f3:91:f0:5f:ed:8d:
29:7a:72:11:25:6c:c6:ab:ff:f6:e4:c3:14:83:cc:
23:83:82:45:b0:f0:06:3a:53:e8:3a:50:42:84:f7:
5a:58:e0:7f:bb:40:50:e3:c1:fc:36:7e:bc:d6:18:
3a:69:6e:df:21:ec:d7:74:e5:60:60:bd:f5:fd:09:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:05:84:FD:4F:A8:7C:99:74:A0:6C:1C:C6:BF:9D:3A:AD:C8:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39FB1AD2DCB511EFBCE5BA7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.143.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d7:52:37:0a:08:1b:07:79:49:19:b2:7d:46:65:07:5b:e5:
7a:89:5b:49:3c:51:79:c5:5f:4e:c0:4f:85:77:ce:04:14:50:
16:62:f5:5a:42:ed:b7:ad:f1:d0:fd:cc:85:b9:c7:9e:aa:ab:
7b:04:b3:a6:d3:08:85:3f:1b:4a:90:db:54:b6:ee:81:00:ad:
43:5d:bf:c3:29:fc:73:10:8a:4b:fa:7f:0f:e5:c0:5c:60:ac:
1a:15:d5:ec:c7:88:8f:81:bd:2a:68:04:86:58:dc:5e:70:1f:
0c:b2:c8:c1:47:89:04:61:a9:81:f1:08:25:b6:41:59:a8:2a:
aa:0d:04:28:1f:91:0f:46:59:a4:bd:bc:55:d5:f8:a3:16:3c:
b4:6b:f9:33:32:c9:d0:44:0a:b3:0f:cd:66:78:9f:ef:4e:6f:
54:a1:1b:6d:52:8c:79:c8:89:18:f1:18:37:0c:a2:7d:bc:60:
c9:ec:b1:1d:c9:4d:6f:bd:b9:95:e1:2b:3a:a8:b1:16:95:ce:
94:d1:46:d6:2f:27:43:35:a0:64:4d:08:42:20:67:3d:98:a8:
b7:03:e5:17:b7:c6:1f:64:8d:45:5b:c4:84:75:df:4a:0d:2d:
5a:48:b6:9e:45:2c:41:25:a7:34:c3:ec:97:e9:44:3c:39:f3:
78:c4:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:03:25 2025 by rpki-client