Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/474CC0EED95B11EF8A89BA5F762E951A.roa
File: 474CC0EED95B11EF8A89BA5F762E951A.roa (raw, json)
Hash identifier: x9j7+j9xq7DbO4ZmiP61fm++Zmo07rs57OvV+XB3HpI=
Subject key identifier: 10:97:0E:0D:07:F9:3D:DE:40:E2:0C:FB:1F:6A:C8:C7:E0:A3:93:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/474CC0EED95B11EF8A89BA5F762E951A.roa
Signing time: Thu 23 Jan 2025 07:25:53 +0000
ROA not before: Thu 23 Jan 2025 07:25:50 +0000
ROA not after: Sat 15 Mar 2025 07:25:50 +0000
asID: 138915
IP address blocks: 156.244.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69309 (0x10ebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 07:25:50 2025 GMT
Not After : Mar 15 07:25:50 2025 GMT
Subject: CN=6791ef01-a9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:e9:08:ec:7d:94:27:53:73:bb:c9:a1:4a:
7f:2e:66:9f:68:17:ac:3f:57:2f:63:56:ed:c8:ba:
f8:ac:df:50:ce:fe:98:e8:ff:c0:ec:2b:d5:08:ff:
23:36:93:88:be:19:6a:c1:fd:7e:1f:4e:0f:ce:1f:
c8:f8:03:66:7d:cc:e5:7c:68:87:d8:dd:c3:bd:cf:
52:d3:e9:d0:cb:98:78:12:b0:d5:96:99:3c:5d:8f:
4e:42:13:11:5e:b9:d6:84:7c:92:50:a1:21:7f:82:
d5:c9:a6:37:57:08:98:6d:76:dc:f6:7b:b9:70:d3:
6c:4a:86:80:7d:7d:dd:19:ae:a2:6c:0c:01:db:9b:
3f:fb:a7:ea:02:04:59:a9:88:5b:6f:31:4c:8c:8a:
49:5d:4e:50:31:dd:e5:82:a7:a1:a8:35:23:47:e8:
dd:93:a2:4a:75:2a:41:eb:0e:0a:50:54:a6:df:68:
bd:2e:d9:d9:8e:67:47:06:c4:c4:3a:62:17:c7:cf:
c5:d7:ad:a8:64:9c:6d:60:8f:ba:a5:f0:fe:e8:74:
0e:b1:e4:69:ea:02:f1:92:94:99:0c:a1:7b:70:d9:
21:80:dc:a8:b2:63:fb:5f:0d:47:69:2f:71:42:f1:
14:e3:94:77:af:99:58:ef:16:51:c6:10:2d:a2:5e:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:97:0E:0D:07:F9:3D:DE:40:E2:0C:FB:1F:6A:C8:C7:E0:A3:93:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/474CC0EED95B11EF8A89BA5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.26.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:07:8a:6c:67:6f:e9:da:3f:ca:28:e4:b9:01:da:9c:be:d3:
93:a8:aa:79:9a:70:07:35:32:80:90:49:51:4b:a5:10:63:dd:
b9:a9:89:1f:04:27:78:f2:3e:cc:e6:37:e2:de:de:c1:9b:42:
7f:d1:59:84:89:d3:6c:73:50:0f:b6:cb:5b:72:c5:3f:df:1f:
b4:46:e9:d4:f0:6d:58:7e:e5:da:93:99:44:5d:03:ca:2f:0a:
94:61:ec:7d:6d:c2:93:b3:a1:4e:14:e0:bb:37:ed:73:ac:45:
86:48:d6:e7:13:43:0f:c3:a6:5d:df:02:40:e6:06:b9:e9:17:
8b:ff:98:0c:8c:71:3d:f4:ea:cc:ff:05:9e:2e:40:18:c9:00:
c7:eb:2a:a6:8b:ac:e0:1d:73:27:f5:e2:ca:54:36:a3:dd:73:
ad:40:30:4f:e0:af:1e:e3:13:ed:8b:9b:24:15:fa:d6:c9:ae:
e1:79:17:12:93:df:ca:f7:57:2f:f1:d5:e6:62:75:34:ec:32:
b0:d9:b7:97:0a:f1:40:b6:df:17:90:97:4c:a1:5a:df:fd:7c:
37:a2:7c:fc:2a:ae:30:b1:fa:90:fc:a3:ca:1a:b5:c3:d7:9e:
7b:a5:04:5c:4e:4b:89:f0:88:bb:b9:d5:c4:6a:f6:92:2a:16:
9b:08:3b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:09 2025 by rpki-client