Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43421E38D51C11EFB60E2463762E951A.roa
File: 43421E38D51C11EFB60E2463762E951A.roa (raw, json)
Hash identifier: hQcxW0aL/05bPHpPkkN4Cq1tWK/0EjAUNGtGBsDwZ8U=
Subject key identifier: 32:4E:3C:03:01:9A:0B:14:53:48:44:BC:49:4C:AD:67:3E:A3:5A:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010ACE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43421E38D51C11EFB60E2463762E951A.roa
Signing time: Fri 17 Jan 2025 21:44:44 +0000
ROA not before: Fri 17 Jan 2025 21:44:40 +0000
ROA not after: Sat 22 Feb 2025 21:44:40 +0000
asID: 141883
IP address blocks: 156.242.10.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68302 (0x10ace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:44:40 2025 GMT
Not After : Feb 22 21:44:40 2025 GMT
Subject: CN=678acf4b-bda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:15:99:23:8e:74:cd:1d:06:05:cd:cb:52:
99:43:ad:66:86:c2:67:14:2b:41:06:a6:52:45:6c:
e0:17:1f:34:08:eb:03:d7:0b:05:a7:97:5f:8b:22:
73:04:75:32:f1:02:5a:93:75:5d:70:62:a8:40:4c:
6a:4b:f3:ef:aa:08:3e:d5:e6:d5:bb:9a:58:9f:45:
b9:cf:7f:02:80:26:53:e3:4f:ad:84:db:ec:92:c5:
34:fd:5e:81:01:69:98:8a:0c:48:cc:36:fc:0a:20:
99:43:de:b2:a2:8c:d1:26:7c:96:bd:a8:e1:c8:6f:
18:fd:6e:e5:92:b9:44:43:99:2e:e8:74:60:d0:82:
4f:cc:2e:d7:c0:5c:e1:80:39:a0:29:bc:f2:9e:b9:
02:73:a6:3a:b7:41:49:30:34:5e:9a:ce:86:64:53:
1d:23:f4:7a:4f:8f:66:7e:4b:24:5e:f5:8e:75:42:
74:54:ad:87:34:03:fc:db:48:19:a2:be:43:a8:a3:
62:29:0d:08:d0:50:64:af:f4:6b:38:a3:d5:c0:c5:
19:4c:5b:74:f4:3e:6d:47:29:e9:35:72:d5:17:31:
3d:13:06:5b:4b:73:3b:a3:8c:ec:18:c1:7b:7c:40:
14:83:96:a1:9b:2e:77:a5:08:95:38:8a:9e:f0:bf:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:3C:03:01:9A:0B:14:53:48:44:BC:49:4C:AD:67:3E:A3:5A:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43421E38D51C11EFB60E2463762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.10.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:95:8c:da:42:8d:7a:06:73:dd:36:b3:ad:ad:f6:fe:18:d6:
34:bf:b1:99:1b:c2:ba:94:32:ab:5d:d5:4d:ac:8b:fe:31:7a:
b0:b6:9e:57:d3:6e:64:38:83:75:58:49:c3:d0:d8:77:d6:6e:
fb:81:9a:b6:72:38:8e:8d:21:47:fa:fe:c7:c8:b2:a4:6f:0e:
40:7c:ea:db:36:29:c6:84:d7:54:9e:fc:d6:12:bc:cc:a1:47:
cf:78:d1:7d:cf:30:20:69:4b:33:83:34:70:0c:41:9a:32:ff:
8e:cf:41:99:35:de:b1:fb:0d:41:66:9f:33:2e:50:55:e8:c0:
54:80:ee:fe:25:7f:72:eb:b4:99:63:b7:88:fd:e5:50:85:0f:
25:50:10:00:7a:45:ca:2f:48:84:d2:4e:71:0f:68:fa:df:37:
9b:83:77:d2:03:d2:fa:60:e3:19:67:d0:d5:67:3d:62:35:6d:
dd:89:7d:19:e2:67:f1:ef:42:ec:80:34:6e:ab:63:8a:63:7c:
a1:c6:28:1c:16:b8:9e:13:24:c2:70:ba:26:7f:98:f5:6c:c5:
13:c9:73:c9:6f:54:19:f4:2b:f0:45:8b:fc:c9:d9:86:5f:2a:
1d:aa:0f:be:d1:8c:90:06:a7:73:f9:ad:bd:27:aa:88:84:78:
2e:4b:30:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:19:40 2025 by rpki-client