Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F442F8ED2E911EFA34C99B2762E951A.roa
File: 5F442F8ED2E911EFA34C99B2762E951A.roa (raw, json)
Hash identifier: flzcJ44pNUfEnMvL5uGYiZOOBRM5X21Q0t9OjGwAYjI=
Subject key identifier: 15:79:14:4A:76:A8:C1:CD:03:9E:0A:A9:64:A8:74:98:D4:0F:B9:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01074B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F442F8ED2E911EFA34C99B2762E951A.roa
Signing time: Wed 15 Jan 2025 02:35:24 +0000
ROA not before: Wed 15 Jan 2025 02:35:20 +0000
ROA not after: Sat 03 Jan 2026 02:35:20 +0000
asID: 984
IP address blocks: 156.226.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67403 (0x1074b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 15 02:35:20 2025 GMT
Not After : Jan 3 02:35:20 2026 GMT
Subject: CN=67871eec-1ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:d3:73:25:de:70:c7:a7:12:27:a2:b3:ba:
5f:b6:0b:a5:d1:be:49:ea:47:6f:70:5b:cf:d4:00:
87:f2:fc:01:61:48:1a:4e:4d:a8:ca:f4:c7:43:9a:
92:01:84:86:aa:47:e8:b4:f7:90:37:4e:76:14:25:
ea:36:ce:cb:e4:c6:ae:f9:88:04:26:89:65:4e:a0:
3e:1c:4f:a6:65:c6:8d:e4:a9:6f:79:d4:3c:55:a3:
5a:f8:0e:26:93:e8:0f:bf:b0:5f:0b:aa:63:f8:28:
f3:8e:b4:9a:7e:34:9d:b4:e1:39:04:90:1e:a9:55:
4b:3b:74:68:05:86:fe:44:03:b2:dc:f4:0f:41:17:
02:90:16:d6:3c:a8:72:e7:3c:0b:ca:82:dc:bb:7f:
22:6a:74:73:85:56:7b:2f:ba:e8:47:e6:3e:91:bc:
da:78:1e:14:3d:3d:2e:0d:cd:e7:1c:50:ba:e6:84:
99:f5:5d:30:1f:2b:dc:d9:7b:1b:89:24:6e:e8:cf:
6a:16:a5:ab:62:f8:7a:3b:c4:34:41:81:8d:ea:b6:
58:71:d3:e2:f6:d7:ae:10:ca:15:69:67:e2:be:b4:
7c:9c:a0:55:24:6e:bf:0e:cc:c4:10:cb:e8:5d:67:
b9:81:06:99:7a:70:1f:64:d8:97:6f:b5:36:59:aa:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:79:14:4A:76:A8:C1:CD:03:9E:0A:A9:64:A8:74:98:D4:0F:B9:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F442F8ED2E911EFA34C99B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.201.0/24
Signature Algorithm: sha256WithRSAEncryption
85:bc:9b:e8:2a:aa:73:29:c9:95:28:17:aa:bd:29:a5:60:56:
36:2c:d9:48:95:e2:70:14:60:d0:6a:7c:2d:4c:c0:76:4c:30:
24:7a:fb:16:09:ce:ce:7d:6b:4a:b3:e8:01:f9:9a:24:29:56:
c6:23:9f:16:dc:6b:96:fb:52:4e:95:f5:d1:93:89:eb:3e:63:
f3:6e:6b:c4:f2:e3:9e:90:cb:2d:0d:7e:35:cd:99:d6:00:41:
43:71:e3:cf:2d:49:c2:43:30:a5:0a:bf:cb:7b:5e:e9:bc:93:
eb:ed:3c:98:c9:22:91:31:d7:c4:fc:38:8b:40:5f:8c:0e:55:
bb:01:b8:79:fe:e5:4d:78:30:53:fd:96:06:68:6d:8a:da:7b:
99:23:99:b9:90:56:d3:3a:7b:0e:ba:5d:7c:40:d3:73:17:aa:
39:b0:87:55:62:6a:30:fc:e6:9e:40:d6:0d:dc:5f:aa:97:1c:
09:a2:3f:bd:b0:db:eb:c6:9a:ab:78:6f:2c:a2:5e:0d:7f:b8:
e0:96:fb:32:94:d8:b3:1e:7c:bb:b7:5f:c6:2d:e4:0b:21:d1:
8f:92:8d:62:a8:f3:72:42:86:6e:19:ff:db:1b:0f:3c:5b:aa:
5f:9d:cd:8f:2c:42:5b:d9:0d:e2:1f:7d:75:f5:82:b5:69:54:
87:f1:04:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:53:26 2025 by rpki-client