Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E9D69D6DB1C11EFAA0C36B9762E951A.roa
File: 3E9D69D6DB1C11EFAA0C36B9762E951A.roa (raw, json)
Hash identifier: sPiNwcpwEfk0uN3b9/VrutWsZp0st995K+jvODCoRc8=
Subject key identifier: DA:F7:F4:D5:A2:D8:7D:F4:E4:8D:44:C9:C1:B6:C4:23:C2:77:7A:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01125F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E9D69D6DB1C11EFAA0C36B9762E951A.roa
Signing time: Sat 25 Jan 2025 12:59:43 +0000
ROA not before: Sat 25 Jan 2025 12:59:39 +0000
ROA not after: Sat 01 Feb 2025 12:59:39 +0000
asID: 62468
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70239 (0x1125f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 12:59:39 2025 GMT
Not After : Feb 1 12:59:39 2025 GMT
Subject: CN=6794e03f-602a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:ad:46:0d:4f:ad:04:0f:2f:de:a0:85:95:
2e:9d:ca:6a:b7:c0:24:1a:eb:6f:65:83:f7:f7:5e:
43:20:0a:da:2e:d8:e4:98:a2:b1:ca:12:7e:de:25:
2f:35:35:b5:18:34:c0:25:54:fd:34:39:76:65:a5:
d9:c6:8d:17:ca:b0:54:d0:2c:ff:ae:24:28:e7:52:
f1:da:aa:3b:9f:53:d6:1b:22:73:f4:78:3a:76:7f:
37:c4:74:32:88:97:00:2f:b4:76:20:35:66:d1:74:
cd:39:5b:11:83:39:bf:b0:4f:94:cf:23:58:9d:fa:
b8:87:1f:96:64:65:4b:de:0a:fe:9f:0b:6e:7e:2f:
36:51:d0:18:1f:a6:81:c9:9e:51:fa:eb:b4:84:ab:
4b:f8:4b:00:a8:ea:68:c5:0e:f7:10:33:d0:6b:4e:
60:4e:4f:4a:6b:66:ef:39:78:37:08:f7:b9:6b:92:
87:12:4c:b2:ef:3c:ce:77:41:60:2b:30:96:0a:43:
23:fd:c0:c0:6d:dd:d6:a3:31:3e:40:cd:53:f1:09:
36:bd:65:25:c9:45:45:96:65:dc:56:c7:32:cd:b8:
24:46:d1:66:6e:10:a5:21:ef:64:aa:e7:db:a4:d8:
36:37:43:2f:f0:9a:d0:f8:a5:cc:47:82:be:28:2a:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F7:F4:D5:A2:D8:7D:F4:E4:8D:44:C9:C1:B6:C4:23:C2:77:7A:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E9D69D6DB1C11EFAA0C36B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
12:bf:b7:89:85:76:97:c3:86:9b:65:23:d1:20:93:14:24:b4:
54:a1:11:bd:6f:20:cd:b0:42:62:01:86:74:e5:52:c4:62:1d:
86:f9:33:5e:3a:5c:36:4e:20:4a:98:a3:28:1e:7d:d8:11:52:
5c:a0:cf:8b:a2:c1:7e:02:eb:d2:ff:b2:35:db:2a:c0:76:31:
c2:ae:88:2d:ca:dc:b1:b5:ff:00:3d:a3:16:07:a2:bd:49:5f:
c4:8e:2e:ff:3e:76:3c:57:35:c9:58:6c:d0:0e:3d:c6:a7:94:
e3:c7:59:6d:bb:83:8b:ab:f2:c1:17:bb:fd:83:73:9e:d0:0e:
92:f0:37:73:73:dc:50:f0:ca:5a:62:5a:25:c6:e1:7a:96:7d:
f8:9a:c4:71:4d:ee:b2:2e:c3:55:48:65:97:9a:22:50:72:01:
fe:6b:71:4d:c0:8b:4b:bb:73:0b:11:b3:9b:c6:7a:57:ac:a1:
95:a2:52:ce:e7:8b:84:66:85:2c:a5:df:ce:57:1a:3d:1b:32:
13:70:30:83:94:7b:e0:10:96:59:23:47:5d:d4:ae:3b:e6:a4:
e9:c8:4c:f8:91:51:88:a8:3b:e7:90:34:69:82:ba:af:d0:24:
b4:ae:13:38:1c:88:bf:cc:35:74:2a:a4:26:55:b5:cc:4d:82:
1b:46:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:37:12 2025 by rpki-client