Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A3DA56CDAEB11EFA509C173762E951A.roa
File: 3A3DA56CDAEB11EFA509C173762E951A.roa (raw, json)
Hash identifier: /allY5jlTzaFpPc9nJnUSTBJa9VGv+jRXgTaIZOwt2g=
Subject key identifier: AC:A7:00:EA:63:2B:4B:35:6A:3C:3F:18:20:19:5E:AD:7C:DB:6F:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A3DA56CDAEB11EFA509C173762E951A.roa
Signing time: Sat 25 Jan 2025 07:08:50 +0000
ROA not before: Sat 25 Jan 2025 07:08:46 +0000
ROA not after: Thu 06 Feb 2025 07:08:46 +0000
asID: 39600
IP address blocks: 156.238.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69886 (0x110fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:08:46 2025 GMT
Not After : Feb 6 07:08:46 2025 GMT
Subject: CN=67948e02-feea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:9b:29:20:24:36:54:da:1f:5f:0b:ca:e9:
fd:a2:90:12:e8:84:06:64:d6:c6:b7:9d:72:f9:75:
ad:ee:e1:1a:b6:2d:70:c8:ee:59:2f:ba:80:92:ae:
7f:d1:fd:04:f0:42:1b:55:93:a6:19:98:9a:8a:b2:
36:3d:00:8a:32:93:1b:ff:2b:26:c6:e6:08:b8:1b:
18:fc:51:24:d0:ed:ae:a1:b5:ce:5b:59:96:a2:67:
c3:09:e4:c7:c5:27:af:9e:05:d3:81:85:14:28:56:
63:d4:1d:27:e2:29:f8:29:57:89:f8:a2:9e:fe:55:
24:b9:57:03:f0:f8:e0:47:e4:07:24:ae:9c:87:9a:
5c:57:47:bc:61:bc:ac:51:01:d4:3e:04:82:ef:c4:
c6:57:5b:e7:f6:80:12:6e:ff:83:9c:6f:c5:c6:e8:
bb:4c:91:e5:d2:62:80:9f:8c:7c:cc:f2:5e:55:b2:
a2:76:de:b2:a6:d5:3b:20:41:8c:a6:bb:4e:a2:cc:
73:bc:d6:e5:c3:e3:3c:a1:1b:48:5c:f7:04:76:5f:
69:56:a9:f1:da:f7:49:1b:b9:3e:82:99:71:42:e4:
12:db:af:04:87:76:5e:1c:d2:b3:22:5e:f7:9d:b2:
6d:04:50:5d:5b:c8:a1:51:c8:1e:44:dc:09:01:e3:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A7:00:EA:63:2B:4B:35:6A:3C:3F:18:20:19:5E:AD:7C:DB:6F:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A3DA56CDAEB11EFA509C173762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.161.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:69:b5:3d:42:73:0f:93:c5:93:b7:b1:7f:e0:ba:af:aa:bc:
ae:b8:8b:32:72:61:7c:3f:31:aa:38:61:af:fe:45:6f:1b:42:
15:33:aa:34:aa:f5:c5:73:9a:97:01:80:b1:bc:50:5b:79:6d:
31:1a:a2:51:00:62:01:f1:c4:d3:c3:15:7c:8a:95:d2:fd:61:
fb:76:75:04:3d:8d:22:28:c6:3c:c4:59:a7:22:5f:3c:4d:5a:
b7:e4:b7:07:70:88:5d:a2:98:6e:8e:28:66:0e:0d:4e:a3:9d:
c8:88:25:a4:7b:ed:cf:ad:f9:6c:9a:8a:bc:0e:56:c1:3f:fd:
40:3b:2b:42:b6:eb:3c:0c:13:71:32:cb:41:db:db:1a:d2:e0:
a7:33:2f:b9:6f:5b:fe:89:60:0c:bc:ac:0e:72:be:3b:6d:fb:
f8:cf:9f:a0:27:e3:27:8f:04:73:5f:be:f0:bc:ee:21:44:98:
57:65:aa:c7:f2:f7:36:18:97:28:81:01:27:6a:b0:02:bb:6d:
ee:fc:6a:a4:41:d7:38:4f:9f:66:0d:b0:fc:62:b9:b4:8d:18:
c0:5d:91:75:cf:00:d4:4e:5e:70:6e:cc:8b:ec:05:8f:14:87:
ab:3b:bb:b0:59:00:fe:07:26:3b:55:08:0a:b1:4f:2a:00:ca:
64:29:71:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:05:58 2025 by rpki-client