Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B58C4D4D51E11EFAFB96970762E951A.roa
File: 5B58C4D4D51E11EFAFB96970762E951A.roa (raw, json)
Hash identifier: +y1AYU9UwhQoFGz95JIkGbxErAZTeVqcCEdI+grKIFY=
Subject key identifier: 85:6A:80:38:5C:96:A2:CE:AC:FD:25:71:6C:EB:90:C2:82:F3:29:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010ADC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B58C4D4D51E11EFAFB96970762E951A.roa
Signing time: Fri 17 Jan 2025 21:59:43 +0000
ROA not before: Fri 17 Jan 2025 21:59:39 +0000
ROA not after: Sat 22 Feb 2025 21:59:39 +0000
asID: 141883
IP address blocks: 156.240.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68316 (0x10adc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:59:39 2025 GMT
Not After : Feb 22 21:59:39 2025 GMT
Subject: CN=678ad2cf-44b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:64:71:98:e0:42:80:62:9e:90:43:ee:7e:
f1:db:df:00:29:f2:e8:a2:ee:4b:bc:32:67:10:f0:
a2:80:cc:7d:d9:a5:fc:34:d1:3f:57:f4:0c:71:62:
4f:87:d5:7d:fa:71:3c:c1:e9:24:59:ea:b0:59:5c:
43:f7:7c:97:54:72:13:10:4e:1c:73:63:9e:61:23:
fe:21:9b:8b:25:8c:e0:ff:37:9a:4b:c7:9b:6f:17:
0c:7a:c8:f6:82:f5:7d:1b:43:ce:5b:f7:55:8f:c0:
7c:c9:b3:0e:6c:22:0c:93:2b:62:a1:55:6f:99:cf:
de:1d:7d:8f:7d:3e:79:12:67:2b:f2:21:ef:6f:38:
af:e2:0b:af:43:5f:24:10:3d:b7:b0:5b:6b:70:de:
9a:2a:15:7d:ac:84:d2:ef:88:6e:2b:e5:a8:ad:df:
53:56:fe:92:46:48:aa:ed:ce:22:4b:f0:af:f4:b7:
4a:e8:c8:a2:d4:da:ea:2d:f2:ae:a9:23:56:09:91:
37:32:73:8a:aa:3a:ad:d1:aa:0e:80:27:4d:0c:05:
12:84:28:d6:e6:63:5e:ef:9f:80:a3:17:b6:ac:46:
2f:d8:bc:82:85:ef:2d:24:25:ff:c3:c6:ef:2e:66:
21:33:e0:dd:d1:50:4f:e4:8d:6d:56:a3:ae:8d:ab:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6A:80:38:5C:96:A2:CE:AC:FD:25:71:6C:EB:90:C2:82:F3:29:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B58C4D4D51E11EFAFB96970762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0/19
Signature Algorithm: sha256WithRSAEncryption
66:bc:05:68:13:f0:82:55:5d:2c:3c:03:74:a2:89:0d:0b:fc:
15:e2:d1:ea:55:0d:eb:c3:e2:82:45:26:8a:62:d8:f7:33:82:
e2:72:1b:01:43:da:7c:e0:25:f9:d5:ac:81:c8:67:30:56:a9:
aa:53:dd:c1:87:98:51:b6:22:6b:4f:6c:97:07:b1:c4:b0:42:
dd:98:8e:93:18:32:ab:dc:8a:d5:dd:a8:63:e8:ce:ea:5b:79:
e3:2e:00:17:ef:55:e2:af:99:92:0e:04:1b:b2:04:1e:3e:ca:
c3:9d:22:bc:b2:11:e1:98:ef:53:08:76:03:9f:13:48:9f:7d:
d6:69:12:80:73:71:bd:74:98:1c:1a:9e:9c:2a:7d:a1:65:5a:
b4:06:90:49:e3:4a:08:56:0c:bb:31:da:d0:a1:d4:ac:9e:65:
2d:42:c9:96:30:2f:44:74:40:9b:8a:03:e9:75:df:b6:67:3f:
89:d1:9a:9d:a4:29:d9:f0:23:7d:0b:1a:af:01:b1:c2:ef:db:
0c:f7:49:e6:7d:48:a8:10:2b:8b:c9:7d:49:36:12:21:c9:9f:
8e:2b:d9:e2:14:fc:1e:54:45:5d:dd:b1:4f:8c:b9:ae:4e:b9:
9f:be:84:ec:60:8e:fa:c3:3b:8b:a1:24:6a:65:96:a4:94:84:
95:87:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:54 2025 by rpki-client