Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5417D6F4DC0511EF9E25A05B762E951A.roa
File: 5417D6F4DC0511EF9E25A05B762E951A.roa (raw, json)
Hash identifier: d4tHB4HPdhMm7colrBXey880CkS/fXj6nq9WanHc23Q=
Subject key identifier: 4F:62:BA:64:BA:AC:C3:2D:C4:E3:B8:6A:6F:80:67:EC:F4:0F:F3:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011410
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5417D6F4DC0511EF9E25A05B762E951A.roa
Signing time: Sun 26 Jan 2025 16:48:12 +0000
ROA not before: Sun 26 Jan 2025 16:48:08 +0000
ROA not after: Sun 23 Mar 2025 16:48:08 +0000
asID: 63139
IP address blocks: 156.225.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70672 (0x11410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 16:48:08 2025 GMT
Not After : Mar 23 16:48:08 2025 GMT
Subject: CN=6796674b-918f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:43:73:7f:9d:72:c3:7b:01:d8:37:ef:6e:
7d:49:33:b2:ec:0a:d2:74:83:40:e5:d9:21:df:50:
67:e9:89:cb:d4:00:fb:f0:29:2a:af:33:5d:23:0a:
06:ab:8f:65:c7:1d:91:ab:88:65:87:07:f0:0e:19:
99:30:d0:f2:76:bc:2e:66:39:68:3f:46:fb:8d:f5:
85:8b:ba:86:57:2d:00:09:a1:b0:e2:62:07:15:a7:
38:0f:9c:27:e7:0d:9d:f8:2b:c6:a3:d9:8c:ab:da:
77:e3:1d:9c:de:3e:3d:9f:b3:b4:a2:47:fa:e2:5b:
13:59:95:7e:73:27:fc:92:41:40:65:53:30:72:53:
60:1d:22:cb:6f:6b:0f:7c:cf:29:44:dc:27:93:ba:
67:a4:a2:e4:18:dc:d6:7b:89:fb:37:fd:d6:87:45:
4e:38:3a:55:e4:12:c6:b3:4d:26:4b:8c:6a:00:fe:
24:b3:58:46:66:69:4a:26:44:bd:b5:7c:b2:95:3c:
fc:33:59:46:7c:fa:40:c2:32:74:c4:74:2a:fc:7a:
0f:0e:1f:e4:5a:e4:b0:4f:52:95:75:c8:03:cf:71:
93:bf:f5:f7:88:5e:1b:0b:b9:ab:1b:26:69:82:60:
66:16:9a:32:dd:33:b8:d6:83:e8:a7:e4:71:80:de:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:62:BA:64:BA:AC:C3:2D:C4:E3:B8:6A:6F:80:67:EC:F4:0F:F3:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5417D6F4DC0511EF9E25A05B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.125.0/24
Signature Algorithm: sha256WithRSAEncryption
48:11:67:de:68:3a:4e:75:ee:33:50:ab:7a:1a:69:5d:23:e9:
3d:5a:6b:63:a5:0b:3e:5a:a9:13:c7:98:76:4b:35:bb:3a:fc:
af:af:81:ed:fc:67:d8:ea:96:66:36:c8:77:bd:ba:e2:50:5f:
75:01:85:2d:03:57:eb:ee:b5:3a:09:40:6d:9d:d2:87:0a:6d:
c5:b9:55:1b:b3:98:1d:ca:45:2a:ff:5b:d1:c3:30:90:18:6a:
28:5c:cf:1a:8e:81:6a:e3:cd:47:41:fa:a9:e0:fd:14:b0:ff:
9e:88:58:c7:f4:b1:f3:be:0d:6a:19:f6:36:11:bf:90:83:41:
f2:54:e4:09:ac:31:eb:4d:e0:3f:d1:ff:06:72:53:41:87:e6:
66:50:94:10:b7:1c:85:0c:5c:7a:b5:c9:f4:c0:ee:73:2f:85:
ab:94:6c:46:e2:a9:32:9f:f9:81:e4:3d:ef:72:1c:16:11:04:
37:b7:63:d1:10:9a:72:de:d5:19:a0:66:f5:bd:84:46:97:02:
4d:2e:2b:4a:f2:0b:39:a0:4f:30:4c:b7:a6:47:ff:c1:77:25:
0a:13:ef:33:8e:15:a3:f3:99:a1:b4:4c:5f:bb:ac:09:1d:27:
cf:08:77:e3:f3:ca:b3:18:34:cc:82:9f:00:2c:4d:c8:e5:c3:
d3:5c:f6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:35:48 2025 by rpki-client