Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D284E3ED95A11EF83559D5A762E951A.roa
File: 5D284E3ED95A11EF83559D5A762E951A.roa (raw, json)
Hash identifier: BSOC6sPla47+Augri82taNw26xZcims5FHzIVDIFycY=
Subject key identifier: AA:CA:0F:57:28:EA:F5:94:30:62:36:53:0A:F2:FE:DE:6C:CA:10:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D284E3ED95A11EF83559D5A762E951A.roa
Signing time: Thu 23 Jan 2025 07:19:21 +0000
ROA not before: Thu 23 Jan 2025 07:19:17 +0000
ROA not after: Sat 15 Mar 2025 07:19:17 +0000
asID: 138915
IP address blocks: 156.244.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69303 (0x10eb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 07:19:17 2025 GMT
Not After : Mar 15 07:19:17 2025 GMT
Subject: CN=6791ed78-8f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:1a:19:fe:83:a3:1b:69:a3:f6:5e:e6:cb:
fe:ac:2a:83:f3:c4:70:ff:bd:c2:bc:be:3a:5e:d2:
e6:10:8e:74:c5:69:45:12:e7:ba:66:22:59:08:5f:
71:86:38:83:d8:bc:ed:d9:34:14:e2:08:a6:ab:4f:
46:f2:74:31:9b:cc:5e:47:63:8d:9d:37:c5:19:5a:
4b:3f:9e:b8:c5:7a:c8:09:57:78:f7:2c:36:37:37:
a6:4c:c2:66:5d:a4:60:af:40:39:b8:d7:e1:c7:08:
7f:90:2f:67:64:bb:17:da:1d:1e:67:ba:28:bb:6b:
c0:18:d4:6a:42:95:90:cb:53:44:f8:5c:56:e9:24:
18:bb:bd:11:62:d5:5d:16:c5:d6:bf:04:ee:ad:62:
61:f9:03:a7:f8:c5:23:d7:88:c0:9d:03:03:8e:07:
4c:19:03:5b:5d:b4:1c:9c:d8:3b:d5:3e:18:70:65:
4c:17:12:12:5b:a7:3f:6f:a8:8e:e1:64:af:fc:75:
d9:fa:e5:0d:bf:f3:78:b8:9a:38:ad:ee:46:9e:0c:
0b:19:f2:3f:68:56:f0:8e:16:7d:64:50:91:4d:d1:
7a:5b:e7:22:1d:6c:d9:8b:12:8c:cd:62:ea:60:05:
96:0b:3b:1a:d1:91:d4:cd:af:59:09:6f:a3:16:02:
e5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CA:0F:57:28:EA:F5:94:30:62:36:53:0A:F2:FE:DE:6C:CA:10:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D284E3ED95A11EF83559D5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.28.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3b:c6:af:33:60:a1:f4:aa:e1:fe:d1:a7:16:41:c6:b0:9a:
b6:de:1f:7e:49:b9:95:d6:58:e3:13:0b:9a:8e:72:20:bf:c0:
b3:1e:b0:ec:71:c3:2b:5f:da:3a:53:3f:82:f5:99:08:13:d7:
a5:c2:41:c6:94:44:e9:13:60:74:86:db:8f:f6:01:4c:13:66:
05:4e:61:31:4c:8e:ff:6b:74:f6:e7:d9:7d:f4:25:9e:71:ef:
fe:2e:e6:f7:a8:bb:b1:09:27:59:bb:b4:8d:d3:ff:8b:97:95:
18:f5:be:58:01:16:86:4f:1f:bd:c0:44:a8:88:18:9b:37:7d:
47:25:c4:31:28:97:a8:97:ea:ae:1e:d6:c6:e5:73:3f:7c:15:
a8:a2:47:bf:2e:d9:f0:6a:38:ca:b7:e9:1b:43:04:e1:55:75:
cf:e5:d6:7f:a7:5d:7b:10:76:f1:8d:50:d0:9d:f8:29:31:9b:
90:a3:59:f4:aa:61:47:e6:4d:a8:9e:2c:ac:4c:54:73:df:1e:
0c:6f:7c:7f:9f:c3:d7:39:ce:97:e1:a2:f8:7d:a7:93:62:b7:
9d:32:ba:af:03:5e:28:15:a1:42:03:c2:b3:5b:c3:37:91:08:
98:a2:85:42:03:ad:28:56:9f:ce:74:23:67:e5:c6:45:07:37:
d3:0b:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:33:58 2025 by rpki-client