Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FE7BD78DB1B11EFA8F950B4762E951A.roa
File: 4FE7BD78DB1B11EFA8F950B4762E951A.roa (raw, json)
Hash identifier: sqpnpD2U+OPm0C+QSOzk3R5dnK4HWO7UMuMMTq8o5PY=
Subject key identifier: D2:B5:3E:D5:95:11:4F:3A:D9:F2:48:59:AB:3C:97:48:9C:C8:08:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011259
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FE7BD78DB1B11EFA8F950B4762E951A.roa
Signing time: Sat 25 Jan 2025 12:53:02 +0000
ROA not before: Sat 25 Jan 2025 12:52:59 +0000
ROA not after: Sat 01 Feb 2025 12:52:59 +0000
asID: 62468
IP address blocks: 156.245.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70233 (0x11259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 12:52:59 2025 GMT
Not After : Feb 1 12:52:59 2025 GMT
Subject: CN=6794deae-0fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:f6:6d:87:9b:cd:94:86:e9:6f:80:4e:82:
c9:34:97:09:0b:62:53:f1:4c:ba:0d:e7:fd:8c:84:
1d:0c:5e:a7:b6:f8:d0:d4:7d:ad:d3:5f:1e:bf:19:
6e:3c:c4:3e:54:4e:45:c0:26:47:2a:b7:3a:54:90:
0c:54:56:0d:0a:da:e7:66:44:01:b4:f6:67:4d:49:
0a:46:2d:9b:fc:01:5e:6f:71:6e:c2:52:82:23:9c:
ff:b4:cc:e9:1b:f5:b7:68:a8:65:7f:05:91:19:c5:
8f:84:8d:7f:59:61:9f:5a:a1:4b:46:10:9e:90:7e:
70:9f:f6:9e:c2:e6:3b:d9:c0:a0:d7:98:fc:2b:ff:
79:1a:f0:b9:7b:95:75:dd:76:ee:d7:1a:87:92:6d:
29:3c:85:a2:c8:58:ca:e6:12:52:55:67:0f:66:52:
c9:13:39:b7:dc:9f:1f:55:c9:1a:91:f7:0b:9e:e3:
71:ef:69:26:cb:2c:68:5a:c3:b4:14:d0:23:00:00:
39:6e:86:5e:a5:e8:64:bb:31:1d:f0:dc:5e:41:48:
d3:a6:1c:8a:62:b7:c6:77:f0:1b:c5:c7:fb:93:2e:
ec:08:ca:6c:fa:75:9d:04:44:4e:f1:48:e9:6f:c2:
9d:43:e8:5b:d9:cf:a4:78:05:b4:06:db:4f:57:96:
3d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B5:3E:D5:95:11:4F:3A:D9:F2:48:59:AB:3C:97:48:9C:C8:08:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FE7BD78DB1B11EFA8F950B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.188.0/23
Signature Algorithm: sha256WithRSAEncryption
23:bb:50:33:c1:e6:a5:0b:0b:37:6d:36:8c:89:b6:f3:7c:d5:
e9:a3:92:4e:dc:db:cd:6d:ad:0a:23:25:23:d0:af:c6:38:a7:
53:87:6f:14:b9:05:f1:1e:b1:af:0a:e4:73:15:57:ba:4e:31:
fd:46:81:74:64:69:51:30:75:11:57:d0:89:30:ec:c6:bd:fd:
ca:4e:bb:f2:8c:2c:d9:1e:3c:08:1c:d5:a1:5a:d5:fa:38:fc:
fd:b4:75:f8:d9:54:16:45:b4:5b:b0:22:42:4d:68:dc:43:d6:
e1:cb:8e:d3:95:23:3b:a1:02:f5:7a:1e:48:6c:e1:61:4b:85:
e0:14:6c:59:ee:0d:b6:ae:e5:96:3c:76:2b:ce:50:e3:eb:cb:
0c:b4:61:9a:48:5e:f7:56:65:81:ce:2d:38:2c:61:bf:d1:5a:
f1:f4:ce:6c:ab:30:f4:1a:de:9a:04:61:ba:8a:44:56:99:5c:
6d:21:48:68:10:62:eb:83:2e:52:3b:df:b1:34:09:67:e5:a1:
63:a6:e9:29:4c:10:07:4b:40:8a:9b:f7:a5:90:68:e5:d2:e3:
bf:74:0f:e9:e4:8d:12:7a:9e:0c:19:db:00:56:5c:57:8a:87:
de:5e:e9:de:b8:2b:e5:06:ec:f5:76:35:77:d1:48:a7:3e:72:
14:04:9a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:41:07 2025 by rpki-client