Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54BFAE56DCD211EF9DFA05BE762E951A.roa
File: 54BFAE56DCD211EF9DFA05BE762E951A.roa (raw, json)
Hash identifier: Keh3/1h/4I1mmWtXaK8IlqAIVMoSSZbgJbK7r9BPIMU=
Subject key identifier: E0:52:F6:0C:18:34:88:BA:69:C5:E1:50:BC:01:71:7C:52:87:9B:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01154D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54BFAE56DCD211EF9DFA05BE762E951A.roa
Signing time: Mon 27 Jan 2025 17:15:40 +0000
ROA not before: Mon 27 Jan 2025 17:15:36 +0000
ROA not after: Sat 15 Feb 2025 17:15:36 +0000
asID: 39600
IP address blocks: 156.237.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70989 (0x1154d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:15:36 2025 GMT
Not After : Feb 15 17:15:36 2025 GMT
Subject: CN=6797bf3b-a150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:0b:5b:19:68:31:12:98:99:e7:43:1f:c5:
d1:2e:31:f9:d4:2d:c6:b7:97:5e:03:03:46:f8:49:
21:0b:cc:2e:d1:1f:a0:f2:68:26:23:aa:e7:12:2d:
1f:52:0b:11:1b:ad:cc:33:11:db:cb:04:97:a9:5b:
48:71:79:66:bf:3b:06:84:de:f4:1b:a3:00:78:1a:
03:ca:88:bb:6b:c8:50:64:36:79:3f:ac:01:e0:c3:
2d:4b:5c:e2:7c:f1:04:e2:a2:4d:66:9b:7f:d5:07:
0e:f4:70:d4:c7:cf:d2:48:d4:82:a0:ed:2e:a7:fc:
af:5a:00:90:68:63:10:a3:90:43:c1:1b:80:2e:c9:
e1:57:a0:d7:7a:13:75:44:67:2c:eb:c4:08:b6:ae:
cc:30:f8:62:50:7f:1f:f9:06:15:ca:24:3b:46:ac:
94:5e:4f:41:06:4c:6b:e0:6a:25:75:88:fd:47:8e:
cb:dd:94:a7:b2:a6:76:9d:55:b9:06:00:94:01:4c:
30:36:57:c7:2a:19:c2:54:5a:04:03:24:8f:3b:9e:
46:2d:1b:c3:b7:a4:f9:cd:24:37:36:35:7b:04:bc:
02:33:02:98:09:5d:1d:32:98:9a:eb:7a:10:dd:a6:
7f:8d:86:70:a7:d1:55:d6:0d:44:85:26:fb:5e:6e:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:52:F6:0C:18:34:88:BA:69:C5:E1:50:BC:01:71:7C:52:87:9B:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54BFAE56DCD211EF9DFA05BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.115.0/24
Signature Algorithm: sha256WithRSAEncryption
29:0c:3a:f6:28:ae:b7:01:5a:1b:c7:49:7a:38:70:ad:bf:f8:
f3:b0:ff:d1:ac:4b:b4:21:cb:16:d4:cf:30:fe:cd:30:b3:c0:
56:a6:4b:a0:a0:9c:e1:71:6c:7a:41:59:76:fc:be:4e:58:ab:
1b:f2:d5:8c:fc:4a:06:9c:0e:2f:c9:cd:c0:3e:8b:72:b0:52:
fc:55:1f:19:a1:45:f5:7b:5e:aa:33:af:47:67:f1:ae:0a:d6:
22:0a:15:45:06:9e:3e:56:b1:42:20:a5:16:f9:90:34:00:9f:
16:2d:9e:db:c4:cc:9c:8b:77:0c:77:fd:03:66:7d:86:80:8b:
49:46:ae:4c:fb:20:4e:df:bf:68:9c:8c:31:77:50:2b:97:cf:
f6:c7:de:7b:c5:ad:e2:98:05:13:70:66:ca:b5:01:d3:1c:bc:
5c:de:4c:9d:d3:00:9b:cf:cb:41:c4:be:99:78:e2:58:1e:ce:
9f:ea:19:ee:bb:ea:e6:60:87:d1:52:52:a4:2d:66:aa:62:40:
18:80:51:95:52:ec:b0:ce:45:44:d1:de:f5:4c:33:84:0c:43:
b2:5e:0a:07:cf:02:02:29:0c:0b:83:1a:c4:2e:bc:db:ec:2c:
22:4e:da:af:bb:a5:5a:1d:8e:77:69:d8:a2:c5:c6:00:d1:39:
80:64:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:33:52 2025 by rpki-client