Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45DEA332D56C11EF960FAA7D762E951A.roa
File: 45DEA332D56C11EF960FAA7D762E951A.roa (raw, json)
Hash identifier: SA9o3E+wJZxqylylrXzKbFF8E4KigCHXZrLmXs/r/fw=
Subject key identifier: FC:61:01:33:34:70:39:65:0D:86:CA:FF:72:28:15:DA:79:BB:F0:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45DEA332D56C11EF960FAA7D762E951A.roa
Signing time: Sat 18 Jan 2025 07:17:28 +0000
ROA not before: Sat 18 Jan 2025 07:17:25 +0000
ROA not after: Sat 22 Feb 2025 07:17:25 +0000
asID: 18013
IP address blocks: 156.239.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68371 (0x10b13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 07:17:25 2025 GMT
Not After : Feb 22 07:17:25 2025 GMT
Subject: CN=678b5588-812e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f2:3e:c1:a5:b9:6c:53:b9:5e:ac:05:44:b9:
9a:87:62:9a:b1:6a:cd:24:73:7f:4d:be:df:1c:bf:
2c:c1:90:a0:9f:76:eb:f4:7f:b1:cb:97:91:75:f0:
65:6b:00:ca:eb:d8:ee:8d:c5:a0:53:0d:4e:53:7f:
bd:68:e0:0c:a0:03:97:0c:b9:37:90:81:a7:05:2a:
24:b1:da:22:3e:13:55:e7:41:21:c1:98:5d:da:b7:
ac:8f:30:04:03:40:ac:8a:f6:d4:2b:5f:b5:c9:11:
0c:1d:78:f7:7d:e3:cd:b2:7a:2f:69:76:2a:89:f6:
33:e2:2c:d1:7b:61:1c:31:f8:67:95:0b:ad:2a:cf:
84:99:1b:5d:1c:90:7f:5e:14:0c:00:07:ad:e5:a5:
40:37:6a:48:09:7b:b3:57:1a:cd:ae:29:0a:ff:51:
0d:ef:e9:43:d5:d3:0c:23:ac:ce:a6:58:1c:70:56:
65:39:78:0c:4c:d6:ed:18:82:d1:06:b6:44:b2:39:
5d:33:24:22:3d:08:77:c5:af:3f:5a:63:cb:14:ca:
b0:cf:07:8c:bc:e7:4c:d0:8c:df:b7:eb:2e:0d:6f:
00:20:36:38:95:fd:7b:13:e1:67:73:8b:c5:e6:c9:
a4:e2:d6:bf:51:03:a9:c4:5a:37:86:90:e9:25:2b:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:61:01:33:34:70:39:65:0D:86:CA:FF:72:28:15:DA:79:BB:F0:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45DEA332D56C11EF960FAA7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.32.0/20
Signature Algorithm: sha256WithRSAEncryption
92:04:4d:93:0d:45:de:59:21:c0:16:27:94:2f:ea:ef:bf:49:
a6:21:75:c0:29:9b:26:5d:c1:c0:76:5d:c0:72:f4:27:97:36:
dd:82:a5:c4:4d:3b:08:10:b4:17:c6:8a:3e:ec:0c:25:78:cb:
54:81:3e:7d:33:75:5a:6f:c6:eb:ba:6c:09:0d:8d:b9:c6:53:
86:d6:ff:f0:aa:af:a3:4f:6e:d1:32:c0:26:fa:aa:10:71:17:
e9:a3:3c:19:64:fb:60:35:10:5c:98:46:fe:b1:e2:8c:97:ec:
93:38:cd:ba:b1:b9:f6:9e:ea:a8:36:9a:f1:b8:d0:76:e5:4f:
87:af:3a:83:f8:c7:69:cc:b4:be:80:a7:df:a8:11:11:e6:f7:
50:41:92:73:8c:ef:2b:04:5b:13:8d:7a:50:90:68:eb:dc:30:
c7:da:c3:b8:61:e1:9c:fb:f3:85:ed:dc:24:be:c0:8c:56:9b:
18:c7:1c:37:f8:df:b7:b6:6f:29:d4:10:7e:1c:82:2c:c6:c7:
5b:52:75:41:fc:29:00:85:10:84:85:65:98:bc:94:57:d9:80:
b3:d2:ef:99:ae:27:61:07:ab:c8:3e:23:cb:2f:17:85:f7:1a:
b6:15:41:9c:59:30:37:2b:29:4b:42:50:63:95:c9:25:53:64:
3a:36:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:13:04 2025 by rpki-client