Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4904F432DBE111EF8153756A762E951A.roa
File: 4904F432DBE111EF8153756A762E951A.roa (raw, json)
Hash identifier: aR7bXxTYN5MBR9d4X2pHY7nT51vhj5zBZRMiljGMjRM=
Subject key identifier: 4F:8D:2C:E4:CC:43:6A:C2:10:06:D2:D9:53:17:70:DD:22:16:D3:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01138A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4904F432DBE111EF8153756A762E951A.roa
Signing time: Sun 26 Jan 2025 12:30:11 +0000
ROA not before: Sun 26 Jan 2025 12:30:07 +0000
ROA not after: Tue 04 Mar 2025 12:30:07 +0000
asID: 203020
IP address blocks: 156.253.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70538 (0x1138a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:30:07 2025 GMT
Not After : Mar 4 12:30:07 2025 GMT
Subject: CN=67962ad3-809e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:a9:93:8b:d3:19:3b:e2:b5:f4:47:d1:d8:
a3:78:9b:3a:2d:9d:eb:96:ae:33:5d:e6:12:94:09:
de:11:19:8c:fb:06:b8:c0:2f:7e:c8:ab:46:62:5b:
3f:4d:63:68:31:11:6e:aa:df:8d:d5:19:61:f7:a6:
ce:61:39:4e:16:d1:57:48:25:aa:36:42:ff:25:d3:
89:12:0d:4a:a3:d4:28:68:a6:76:97:96:a7:cc:43:
34:e1:35:f2:84:7e:2f:ad:c6:ab:7d:0b:7b:ff:8f:
5b:8b:00:5f:7e:19:31:22:ab:39:46:cd:f1:80:6d:
b7:4d:fd:2b:a6:9f:20:20:85:6a:ee:3f:bc:8b:ec:
bb:6c:39:b9:e3:eb:e2:47:61:0a:34:d9:02:14:ce:
75:1a:fb:36:ae:6c:f2:8a:11:f4:af:76:cd:9c:56:
65:37:96:33:86:b2:f1:e0:d5:e2:30:09:37:1e:2d:
91:57:24:b5:ad:e0:96:ed:1b:20:21:01:14:49:85:
1a:9a:69:4b:ce:2e:c1:7e:a5:3d:f7:c7:c7:f7:3b:
7e:8b:9b:0c:c8:a6:09:6a:b4:05:d1:a4:f9:08:d9:
ea:3e:c8:3e:fd:9a:89:f1:e5:27:94:bf:31:53:6c:
62:7c:da:37:81:a8:80:5c:cf:0e:56:c8:c7:8f:ac:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8D:2C:E4:CC:43:6A:C2:10:06:D2:D9:53:17:70:DD:22:16:D3:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4904F432DBE111EF8153756A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.194.0/23
Signature Algorithm: sha256WithRSAEncryption
64:73:51:f0:c3:3c:f1:5d:20:b0:be:7e:c7:71:85:63:6b:b8:
e7:65:ed:61:8b:9e:b0:47:25:6c:42:8e:fb:18:c6:51:98:d4:
42:aa:bf:df:32:4a:a1:ad:12:dd:10:21:67:7c:e1:8b:29:02:
e7:e2:42:ae:a4:c8:15:5d:84:ff:22:d3:69:2d:96:2b:47:fd:
58:47:ce:15:46:ce:81:70:fb:bf:ad:ac:f0:93:fa:08:cc:46:
ac:6d:f8:4a:2b:58:33:9a:a6:f1:d9:0f:0d:5d:61:fc:46:f0:
a3:bd:a6:59:cc:40:e9:e1:41:f8:00:fd:c8:46:65:35:63:0d:
81:83:e4:c7:8e:f8:94:a3:94:cf:58:79:57:8d:25:5c:e6:e4:
07:a6:6b:b4:54:5c:82:a0:0d:fd:2e:12:97:02:0f:2b:77:18:
be:90:c9:b2:ae:f0:22:79:e2:fa:c0:51:4a:c8:2e:31:d8:67:
16:1f:1b:ef:32:60:d7:e3:9d:7e:f9:52:fb:99:df:02:c4:b8:
57:cf:fb:40:bf:96:5f:ec:2b:b2:11:31:00:35:9d:b3:d3:88:
dd:91:8b:f7:5d:16:2f:ff:06:81:4d:ca:20:9f:22:d0:a9:19:
f9:b0:e0:a0:52:18:5d:33:80:ef:78:17:c3:57:91:1e:04:83:
88:5c:85:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:07:50 2025 by rpki-client