Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/570DAE14DC1A11EFA2762F67762E951A.roa
File: 570DAE14DC1A11EFA2762F67762E951A.roa (raw, json)
Hash identifier: cB4oVYRjYZw6mm53gLbDQllePK/AbZrLZpHvLzCaySE=
Subject key identifier: 63:7F:24:55:CC:EE:28:3A:10:F0:E5:8D:E6:9C:1C:0C:B1:F5:84:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011454
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/570DAE14DC1A11EFA2762F67762E951A.roa
Signing time: Sun 26 Jan 2025 19:18:36 +0000
ROA not before: Sun 26 Jan 2025 19:18:32 +0000
ROA not after: Fri 07 Feb 2025 19:18:32 +0000
asID: 399077
IP address blocks: 156.248.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70740 (0x11454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 19:18:32 2025 GMT
Not After : Feb 7 19:18:32 2025 GMT
Subject: CN=67968a8c-0bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:24:27:7b:9f:6a:fe:d7:51:59:33:76:90:
56:1b:6a:e5:da:0b:a2:0f:d6:6c:e9:b2:b2:0e:0d:
6d:ac:db:0a:65:d0:45:1f:01:26:54:c2:64:b6:aa:
d3:00:53:ed:1b:48:0f:57:a3:14:0d:ba:de:ef:8a:
db:be:fa:98:44:f0:c3:46:a2:89:c9:2f:bb:a9:92:
6c:60:f6:9d:c5:c1:37:7f:37:04:32:4b:92:c1:cd:
9e:2b:52:2f:3e:8b:f4:bf:24:d1:c1:45:70:20:72:
97:2d:f3:c2:87:21:ab:06:0a:d4:a0:5f:e9:92:b4:
a3:78:f6:0e:15:c6:3d:f5:6c:99:6e:7b:c9:2a:16:
80:68:0e:69:f0:5c:6f:82:73:22:ba:bf:97:cb:68:
46:7a:ee:ba:09:8e:82:ee:6f:f8:43:80:a8:27:b3:
79:ae:8e:20:07:94:d3:21:03:55:8d:88:54:f7:d3:
d3:30:72:cc:ba:c9:3d:c7:1b:72:65:75:12:d8:f6:
a5:d7:6a:c5:8e:14:2d:c5:d2:9a:9d:1d:da:35:59:
34:26:70:d8:47:74:25:66:90:c9:b7:6e:e7:0a:2a:
d5:8d:a2:aa:68:9f:a7:c2:71:c8:b9:5e:13:3e:f8:
53:98:d5:45:ac:d4:f2:d0:61:d7:50:6e:82:46:b1:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7F:24:55:CC:EE:28:3A:10:F0:E5:8D:E6:9C:1C:0C:B1:F5:84:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/570DAE14DC1A11EFA2762F67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:6b:eb:7f:38:b3:42:73:9d:e7:4e:90:5e:aa:81:17:e3:e2:
ca:14:1f:df:e5:5b:3a:f4:99:f5:fd:18:ef:5d:43:99:9c:2d:
78:63:69:38:af:ad:03:0f:c7:7a:35:cf:09:ed:68:a7:ed:ab:
3e:52:f2:67:95:57:1b:0c:1b:ae:2a:46:35:23:d0:32:82:12:
25:f3:8b:54:54:11:41:74:85:d1:22:e8:72:08:36:4a:95:62:
33:e0:c3:6d:54:25:43:ed:59:37:ff:76:a2:9b:3b:8a:44:f1:
8d:d4:c3:84:1f:6e:e9:40:4c:3d:61:1e:f9:03:50:89:c2:3d:
d8:ce:17:f3:5a:f2:53:42:1f:b6:10:c4:5c:48:b8:ae:e1:89:
d6:de:f1:88:65:c5:22:19:e8:38:1e:f4:b0:33:08:ff:e4:79:
31:43:b9:29:5e:76:8b:ec:71:7a:32:7c:ba:12:4a:e6:76:f5:
75:4c:15:4d:a6:3e:0c:7a:c9:ac:32:74:60:7e:86:ed:69:a1:
b3:34:1c:3a:8e:b2:49:a7:20:12:0f:13:a2:c0:64:bb:e1:a1:
11:1c:ae:07:e5:c0:a3:a0:2c:f1:23:5f:59:d0:52:da:ed:23:
6b:ec:53:f3:6d:1b:f5:17:97:ca:3e:ce:04:8e:77:d3:72:a7:
bf:6c:47:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:56 2025 by rpki-client