Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E5DEE66DC1E11EFB4FB2C81762E951A.roa
File: 3E5DEE66DC1E11EFB4FB2C81762E951A.roa (raw, json)
Hash identifier: 2rP81aKq5ayFQ+Rx54GZfv/uOxgUywl3S/M2Pr+JCWw=
Subject key identifier: 90:2E:89:A0:DB:2B:D5:E1:7C:C1:9F:FE:17:1C:B5:9C:DC:59:EC:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011470
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E5DEE66DC1E11EFB4FB2C81762E951A.roa
Signing time: Sun 26 Jan 2025 19:46:33 +0000
ROA not before: Sun 26 Jan 2025 19:46:29 +0000
ROA not after: Sun 09 Feb 2025 19:46:29 +0000
asID: 395793
IP address blocks: 156.243.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70768 (0x11470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 19:46:29 2025 GMT
Not After : Feb 9 19:46:29 2025 GMT
Subject: CN=67969118-240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:1a:b0:1b:3b:76:ba:b7:cb:fd:ee:40:8d:
e5:d1:b7:54:d8:c9:91:01:47:c3:36:b1:e1:e4:55:
bb:b8:ec:e6:bf:41:7a:b9:63:b8:52:4b:14:b4:8a:
6f:63:9f:ad:f2:72:5c:65:0c:b9:28:c3:7e:6c:ec:
54:07:d5:66:41:e4:25:dd:4e:03:de:77:88:8f:a7:
31:66:ab:41:f9:0b:60:ef:af:4a:fb:b9:ff:cd:e8:
13:73:e4:57:f5:fa:a0:f6:72:77:8e:2e:63:bd:41:
50:d1:a3:e0:bd:2c:0c:4e:ea:d1:95:a9:e6:e3:7f:
1d:e7:c2:2a:a1:f5:a2:97:ed:1e:ef:b5:dc:0c:80:
ed:1f:d2:3b:e6:77:99:23:b8:20:80:5d:f9:fc:28:
29:c1:33:ac:f3:97:3a:ab:7a:da:fb:39:83:09:90:
26:8c:af:b9:a9:81:5b:6e:38:98:63:35:0c:7c:a7:
90:ac:16:f4:0f:e9:3a:13:c2:9b:4d:06:8c:cf:a0:
3f:99:2d:85:29:80:91:6f:a2:44:a1:09:d7:a6:a3:
87:50:dd:c9:04:77:f9:17:13:f6:b7:cf:7f:3d:b7:
37:0d:76:e8:60:0b:1b:09:4c:57:a7:d6:d3:cf:bf:
c6:14:53:57:dd:2c:64:4b:da:77:32:1f:05:0b:f5:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2E:89:A0:DB:2B:D5:E1:7C:C1:9F:FE:17:1C:B5:9C:DC:59:EC:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E5DEE66DC1E11EFB4FB2C81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.241.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d6:a4:b8:c2:60:06:1b:32:ac:8e:1b:08:27:1d:05:02:4f:
22:14:60:45:31:b7:1f:91:e0:da:00:d1:8c:ae:68:5f:dd:bb:
95:2d:0b:b2:2f:fd:ab:ef:57:1c:bf:60:c1:2e:a9:1e:17:cf:
d7:48:8d:38:4f:e8:f6:e7:d7:7e:22:fe:50:eb:92:8c:65:7d:
28:3b:73:a1:e5:89:1a:4b:75:9d:e6:d6:1b:56:59:34:d2:24:
bb:71:4f:be:90:d4:6f:0e:90:17:7d:fa:11:34:a6:08:5a:04:
60:ea:6a:40:f0:1c:68:36:c2:70:96:14:ef:fe:ac:d7:9f:80:
1f:6c:4c:af:be:54:56:5f:4c:9b:43:17:51:ba:b2:aa:92:47:
6c:e6:52:6f:64:54:a2:ad:57:35:f6:e2:62:e8:71:df:7b:ca:
90:07:de:d6:7d:09:16:8c:fb:ab:90:56:96:87:40:d5:e4:20:
55:b3:8b:5d:f3:b6:56:63:04:27:a4:31:c8:8d:3d:d3:e2:f5:
1b:a5:88:9a:69:5b:d6:d1:41:ea:58:5f:be:9b:b5:6f:f9:ca:
c4:1f:fe:99:1c:d7:5a:16:91:e2:e2:5f:31:09:3c:bd:59:6d:
f0:10:e3:ff:f3:d0:55:6d:ec:47:01:ef:1c:e5:1f:e0:f1:18:
cb:c5:f0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:11 2025 by rpki-client