Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AFCDA5CDAF511EFAEF279B5762E951A.roa
File: 5AFCDA5CDAF511EFAEF279B5762E951A.roa (raw, json)
Hash identifier: YUPGrPS9MbY4ed/zwCAjoxw/ijYa6Md5V+sqCTw5e3Y=
Subject key identifier: 3B:36:B4:94:06:E4:BA:7E:2C:D6:7A:AC:DD:9A:04:90:00:08:BD:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011177
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AFCDA5CDAF511EFAEF279B5762E951A.roa
Signing time: Sat 25 Jan 2025 08:21:20 +0000
ROA not before: Sat 25 Jan 2025 08:21:16 +0000
ROA not after: Sun 23 Feb 2025 08:21:16 +0000
asID: 44559
IP address blocks: 156.246.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70007 (0x11177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:21:16 2025 GMT
Not After : Feb 23 08:21:16 2025 GMT
Subject: CN=67949f00-6744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:2e:b3:5a:61:1b:ac:33:94:e1:66:13:d2:
56:55:7f:f4:85:ba:7c:b7:98:67:f2:c4:88:7a:2f:
fb:e3:d1:17:21:38:87:cb:03:e6:f2:79:ed:0a:da:
08:69:72:4d:df:fc:bb:84:4d:38:2e:a1:95:31:2d:
75:08:42:4a:6d:f5:a7:f1:3a:fb:65:a8:c7:0e:0b:
f2:39:db:55:a1:01:9b:ab:5d:9f:76:b1:27:88:5b:
db:08:24:82:78:43:bd:e7:95:b7:46:13:99:11:81:
1c:b7:70:c6:86:fa:52:36:35:7b:cc:dc:bc:7a:c6:
78:c0:6a:54:e2:68:7d:12:cd:fa:24:8f:4f:be:86:
4d:52:12:c1:c6:9b:e3:f5:4b:e9:ff:37:b9:68:ef:
82:a3:33:59:94:88:d8:27:45:81:6d:f2:db:57:9a:
4b:be:05:bb:31:06:77:38:eb:90:cc:23:e5:06:7a:
34:d2:5e:4d:c3:94:fd:0c:21:40:fc:e4:1b:ee:61:
62:37:c9:24:4f:0a:16:a1:6d:06:9f:ce:be:f4:8c:
4a:3f:e5:34:22:12:57:b7:b6:20:5c:ab:c8:3f:1b:
0e:22:8a:62:5c:ef:19:35:1e:36:7b:b1:6e:0d:36:
08:2e:02:0b:ac:4d:83:9f:ef:98:28:f5:d7:5c:25:
2a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:36:B4:94:06:E4:BA:7E:2C:D6:7A:AC:DD:9A:04:90:00:08:BD:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AFCDA5CDAF511EFAEF279B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.238.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e1:8f:fd:4c:61:fb:0f:73:91:47:27:82:38:09:b8:34:85:
ae:6d:e2:b8:fe:04:5d:2c:70:43:c8:cf:a4:c6:76:ed:ae:0a:
3d:55:29:78:ea:c9:a9:c6:bc:54:bb:d0:c9:59:01:45:c6:01:
82:f0:f8:a6:1c:3f:16:d2:2a:c0:61:e4:7e:84:3c:c9:46:3f:
d9:dc:df:e4:1a:be:4c:bb:2d:ab:d2:57:d2:d5:7a:63:00:c1:
c3:0c:99:04:5a:41:03:bc:0e:4c:b5:f8:2c:ca:a7:68:24:f2:
f6:76:47:1f:89:be:ce:f1:c0:38:7c:98:06:6c:69:7d:34:17:
1f:8c:fe:63:f0:47:1c:b0:c5:2a:a4:4c:57:bc:9b:17:7f:d0:
5e:1b:ec:14:e1:a8:81:43:6e:74:e0:00:30:fe:93:1a:74:c7:
b8:18:96:f9:3b:09:77:2f:f8:d4:5e:dc:43:15:78:6e:26:b5:
1d:3a:ee:6f:f2:7d:79:37:d8:3c:ce:3c:b2:c8:60:22:9d:5e:
43:55:98:63:c2:dd:70:45:74:47:fd:27:ff:07:cc:7f:af:af:
3f:ec:ed:c8:03:af:45:cd:d5:08:49:a1:bd:25:ff:ec:31:aa:
d5:11:23:5d:97:35:c1:68:0f:dc:60:c5:8c:7b:42:b1:41:e5:
f9:49:9b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:03:27 2025 by rpki-client