Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48DF4B7CDCD811EF9C5C1C68762E951A.roa
File: 48DF4B7CDCD811EF9C5C1C68762E951A.roa (raw, json)
Hash identifier: ZAwHpzZMNJiHVa1l5Dq9t/yt9xTd9hspRjifKUFGahk=
Subject key identifier: FD:DB:06:FD:CD:7B:BE:B5:20:C3:F8:3E:20:75:87:23:F5:6B:47:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011571
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48DF4B7CDCD811EF9C5C1C68762E951A.roa
Signing time: Mon 27 Jan 2025 17:58:17 +0000
ROA not before: Mon 27 Jan 2025 17:58:13 +0000
ROA not after: Sun 16 Feb 2025 17:58:13 +0000
asID: 135097
IP address blocks: 156.245.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71025 (0x11571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:58:13 2025 GMT
Not After : Feb 16 17:58:13 2025 GMT
Subject: CN=6797c938-78ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:a9:0f:39:e4:66:6e:44:8a:44:57:3c:52:
47:32:70:88:d1:b2:29:b3:78:09:1d:db:db:70:84:
8b:c0:11:40:e6:43:94:80:eb:97:d9:5d:78:e3:16:
6d:87:fb:5f:42:41:0b:ec:65:de:37:6a:b7:68:40:
b6:fb:dc:83:41:9c:41:eb:d2:a9:da:6c:77:83:a2:
bf:0e:66:ad:5c:85:2c:79:0f:5a:78:65:ce:1f:08:
47:88:08:a1:e3:e3:9c:25:7c:06:74:4a:f0:27:6b:
b0:0c:df:73:6f:ed:4c:46:f4:67:e2:ab:d3:29:87:
49:42:9e:b6:36:59:57:e5:c2:24:7b:0f:89:c7:fc:
a6:7d:16:0a:e7:0e:26:f6:b3:4d:e7:1a:f9:96:1b:
52:9f:cd:c3:43:2b:02:22:77:b3:2b:22:20:fc:8d:
26:b8:aa:8e:30:ab:d8:c0:d7:8f:69:8d:59:16:e3:
99:2d:ac:d8:0d:d4:dc:99:b0:e7:00:fc:ce:05:54:
df:1d:f2:9a:76:21:2c:20:91:2d:83:40:7d:39:d1:
7b:4c:27:85:aa:89:6d:ab:89:b0:90:c0:2c:c5:28:
2c:f1:ec:b7:45:38:52:0b:3f:e9:0f:84:77:5f:a0:
11:c8:5a:c7:8d:bd:1f:06:c6:c5:49:57:aa:d8:d9:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DB:06:FD:CD:7B:BE:B5:20:C3:F8:3E:20:75:87:23:F5:6B:47:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48DF4B7CDCD811EF9C5C1C68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.32.0/19
Signature Algorithm: sha256WithRSAEncryption
07:3a:1b:fe:87:43:21:a1:bf:5a:11:1d:d1:98:d7:94:55:2c:
6a:78:e1:77:0f:bb:82:4e:29:43:5f:2c:4a:81:69:bd:e4:36:
97:0d:23:c1:17:7e:a4:1a:d5:74:c1:d0:54:ac:8e:73:3f:31:
a4:0c:b7:f3:f6:0c:ca:1c:bf:de:ba:b4:71:18:8e:37:91:c0:
15:0a:15:9e:1b:07:62:11:42:bb:76:df:e1:40:76:6b:cf:75:
70:ed:44:87:95:ab:c8:04:56:74:10:34:9e:5e:e2:f6:02:7e:
ba:60:06:64:5d:f5:22:58:94:7b:c3:76:05:10:ca:8e:df:44:
36:09:f8:fd:00:b0:78:73:02:bf:b2:06:23:e4:04:5b:ba:31:
dd:27:bf:29:49:a3:d8:e3:44:dd:bf:65:1f:7a:56:23:34:0a:
a5:e5:29:1a:a6:cc:63:4c:56:0f:24:c0:ba:42:f8:ae:70:a3:
c5:89:c1:53:3b:7f:d5:37:84:f8:02:44:01:ce:65:ca:1c:b9:
e3:39:f6:d0:af:57:01:f4:0f:87:dd:c0:50:7d:89:d2:b7:94:
8a:0b:d8:bb:61:85:9a:ff:26:09:14:90:b6:55:bf:1a:c3:d2:
59:e8:77:32:8c:3e:06:46:e8:57:9b:c4:37:dd:df:1e:da:c5:
69:32:d5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:23:08 2025 by rpki-client