Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C3B4D1AC47311EF887BAF55762E951A.roa
File: 5C3B4D1AC47311EF887BAF55762E951A.roa (raw, json)
Hash identifier: r7GA9ImP+gJdcmWdAlxAIEi8JQHD3cqWRZFu1UFqSPs=
Subject key identifier: 51:42:C2:0A:CC:3D:81:26:D8:38:AB:4E:77:07:C5:A7:7A:40:31:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C3B4D1AC47311EF887BAF55762E951A.roa
Signing time: Fri 27 Dec 2024 16:55:22 +0000
ROA not before: Fri 27 Dec 2024 16:55:18 +0000
ROA not after: Sat 01 Feb 2025 16:55:18 +0000
asID: 203020
IP address blocks: 156.253.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61640 (0xf0c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 27 16:55:18 2024 GMT
Not After : Feb 1 16:55:18 2025 GMT
Subject: CN=676edbfa-9c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:65:0a:2f:82:2c:7d:03:14:43:40:0c:c7:
88:ab:bb:47:20:83:45:44:d9:09:41:6f:41:ae:be:
16:2a:72:23:e1:28:48:c3:f0:44:b2:73:f2:9f:f8:
bb:a1:f8:e1:db:22:9e:40:42:9f:c0:9c:b1:14:2e:
80:6c:4e:52:de:40:bf:28:85:96:f5:59:31:05:cc:
8f:f0:29:8a:c1:20:27:a7:7d:61:7d:8b:e6:a2:6c:
e0:4f:9e:88:2f:f2:07:24:d7:85:17:41:22:eb:00:
ee:e4:84:17:c3:33:0a:7a:bd:d6:08:4c:b5:dd:ae:
73:fc:1c:f1:63:30:e7:fe:15:36:62:3e:37:d2:fe:
09:24:5e:e1:cc:5e:c9:c6:79:86:3d:fa:58:22:82:
52:8d:7d:6e:39:7f:b2:a6:7e:b8:e5:6a:e9:62:cc:
b5:6c:d3:84:ba:93:2f:fd:fe:95:15:7e:d0:65:ac:
d0:83:fb:3a:fe:cd:fb:bf:75:b1:69:98:ff:f6:17:
d5:02:01:a0:ec:84:fb:67:4a:05:8f:a0:75:ba:6a:
33:14:34:0e:df:53:03:bc:50:da:16:63:69:be:05:
e5:dc:3f:bb:c9:b6:30:5c:56:fb:cc:e6:ac:52:ef:
75:d6:6a:9a:df:96:46:95:25:f0:59:ae:d6:7b:94:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:42:C2:0A:CC:3D:81:26:D8:38:AB:4E:77:07:C5:A7:7A:40:31:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C3B4D1AC47311EF887BAF55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.182.0/23
Signature Algorithm: sha256WithRSAEncryption
06:f3:35:73:e8:b1:ad:5d:9d:45:99:37:ba:51:40:9c:28:a0:
25:6e:9c:8b:4a:4b:6f:a1:e4:09:34:bd:57:cd:5e:4c:5c:6a:
e8:bc:e3:b8:f0:5e:c2:aa:aa:7c:66:86:98:77:7c:21:40:3d:
a0:7a:2b:58:04:6d:39:ba:c7:66:f6:ec:8a:33:9c:48:90:10:
73:a4:69:71:e8:8b:26:32:18:4b:15:85:9d:55:be:fc:4f:6f:
ba:cb:30:0a:55:d8:88:e8:ac:62:92:88:be:42:09:7a:4a:ce:
10:93:3e:6e:3c:c9:89:6e:34:59:18:11:94:1e:27:44:ad:ed:
36:ca:e3:b3:7e:a4:b2:52:a4:72:8d:0c:30:72:57:04:6b:bc:
27:70:6e:e3:fa:0f:82:d9:a2:55:69:59:b8:f9:c0:87:de:dc:
86:8d:ae:9a:ff:ee:35:f8:a6:8e:4a:70:76:f6:cd:4d:36:2e:
d2:c9:6f:1c:7b:1e:44:80:57:e9:37:33:9c:2d:e8:c0:9c:cc:
2c:7a:78:68:b4:54:c3:30:46:11:8f:b3:8f:4a:ab:14:e8:b9:
8d:82:5e:c0:8e:ab:d2:fe:00:98:99:c4:e2:62:0c:aa:a1:27:
f9:ac:ef:3a:c4:b3:6f:ba:57:5a:a7:31:ee:ab:61:61:2c:83:
69:33:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:12:29 2025 by rpki-client