Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A480C80DFF211EFB2F41455762E951A.roa
File: 3A480C80DFF211EFB2F41455762E951A.roa (raw, json)
Hash identifier: 4Vng4oM0V7N39Ib/BPeUuygT/r9lZf8Ugo1DYi6D/4k=
Subject key identifier: 4D:21:3F:79:24:F2:81:3E:81:85:9B:C3:2A:E3:4A:F5:82:99:9F:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011675
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A480C80DFF211EFB2F41455762E951A.roa
Signing time: Fri 31 Jan 2025 16:41:33 +0000
ROA not before: Fri 31 Jan 2025 16:41:29 +0000
ROA not after: Tue 11 Feb 2025 16:41:29 +0000
asID: 55714
IP address blocks: 156.238.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71285 (0x11675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:41:29 2025 GMT
Not After : Feb 11 16:41:29 2025 GMT
Subject: CN=679cfd3c-fa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:da:17:e2:9e:e3:1f:b5:d1:c6:c7:25:3b:
1f:b8:d0:32:c7:33:6c:9e:1a:9b:1f:14:f3:2d:87:
db:20:7e:17:12:1c:91:a0:fb:7b:6f:1a:d0:1d:91:
31:dd:80:29:56:67:59:1d:25:b5:ed:65:f7:7c:38:
7d:20:c4:2e:54:e0:ae:50:e6:4b:f6:93:3b:fb:5e:
7a:d1:b5:96:6a:c0:d8:28:84:bc:0e:0e:ba:a7:2c:
03:33:1c:9f:fa:3d:ef:76:e3:c4:8b:22:f8:4a:a0:
f6:80:9a:2d:4c:d8:72:54:c2:1f:31:53:ee:e6:5e:
5d:36:c0:de:11:95:77:8c:5b:7e:32:83:73:80:86:
23:4f:80:e7:d3:71:31:29:52:6e:05:8b:53:9a:e3:
76:21:f6:2e:21:68:34:ae:d5:78:47:d7:0c:0b:d4:
3b:69:63:e0:ef:92:cb:9e:6a:f2:5f:a8:e9:b7:68:
5b:3e:2a:19:d5:9f:0e:67:1b:db:c5:bd:24:d2:b7:
62:cc:d1:f3:ab:04:9c:ea:30:e5:8a:91:60:48:3c:
09:c3:47:56:e8:af:ab:61:bb:af:0e:27:ab:d0:cb:
be:ae:35:7a:d6:42:b0:e1:3f:3e:db:97:28:cf:b0:
1d:30:13:62:2a:f8:d6:94:25:29:57:ca:92:f8:55:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:21:3F:79:24:F2:81:3E:81:85:9B:C3:2A:E3:4A:F5:82:99:9F:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A480C80DFF211EFB2F41455762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.72.0/24
Signature Algorithm: sha256WithRSAEncryption
68:bb:13:1e:0d:aa:1d:ed:7d:78:56:a0:5b:63:39:38:24:cc:
59:f1:30:90:88:0b:a3:d9:6d:fa:b5:90:fa:f9:4f:9e:54:3e:
cf:85:51:9f:8b:d5:be:a5:c9:c4:28:b0:f7:4f:ab:fd:e3:b8:
24:98:86:51:41:f6:05:59:e4:0c:8b:c3:e6:2c:4d:df:32:ad:
f5:33:ba:ce:18:11:92:50:6d:c3:cf:3c:66:ac:8b:e3:a2:e3:
2e:ac:8f:96:d0:32:a8:6b:8f:fa:bf:0b:45:3c:a0:f2:f2:ff:
af:27:d7:cf:d0:5f:b6:51:11:6f:d9:0b:4c:3f:01:69:ec:17:
6b:cc:3d:53:0c:16:54:50:b8:5f:54:1b:95:82:97:ff:ea:bd:
31:1e:11:43:f1:e0:b6:58:89:2e:c8:39:37:df:df:f8:c4:6f:
22:f3:83:0e:4d:f3:03:1d:8e:9e:3e:9e:07:f8:34:ed:65:75:
47:2f:42:9e:60:ed:1e:26:d7:34:83:20:28:5b:8b:27:89:af:
7d:ae:27:42:96:6b:4b:08:95:14:7a:98:49:ce:35:fa:00:25:
7c:1d:9c:05:df:03:4e:05:53:eb:a3:85:f5:d3:ed:63:ae:4a:
cc:9b:d8:36:bf:c9:be:e7:90:15:bc:ca:f3:b7:53:3b:f1:35:
5d:16:c3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:24:26 2025 by rpki-client