Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A20CEEDBE011EF84E15865762E951A.roa
File: 64A20CEEDBE011EF84E15865762E951A.roa (raw, json)
Hash identifier: 0fqtJmopRtgTHKjHzTyFpQxiF2LDgXQ/EJ8L3xLQLr8=
Subject key identifier: 29:CF:09:16:4B:DA:C4:85:06:0E:9C:C6:18:14:65:89:7A:44:AC:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01137E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A20CEEDBE011EF84E15865762E951A.roa
Signing time: Sun 26 Jan 2025 12:23:48 +0000
ROA not before: Sun 26 Jan 2025 12:23:44 +0000
ROA not after: Tue 04 Mar 2025 12:23:44 +0000
asID: 203020
IP address blocks: 156.253.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70526 (0x1137e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:23:44 2025 GMT
Not After : Mar 4 12:23:44 2025 GMT
Subject: CN=67962954-b04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:a3:93:4d:8d:ef:1d:66:1f:4c:03:59:14:
d2:f2:e5:eb:ba:b7:39:8b:ac:fb:06:d5:da:84:8f:
8e:e9:5a:e0:00:0d:0c:80:83:7f:a7:32:f7:38:2b:
89:6c:b8:eb:e4:bc:31:56:76:a4:9e:70:e9:80:f5:
f1:8d:65:f0:2f:22:a2:d3:b3:fe:2a:f0:08:16:a5:
34:74:e5:69:e9:93:3e:fc:57:02:28:e0:50:88:47:
2c:2d:d1:6d:64:c6:33:46:fd:59:98:7c:66:62:9b:
a4:7d:38:c4:f5:83:03:d6:9f:0d:44:ad:91:05:d1:
1c:2c:62:24:31:88:30:36:34:71:d9:a9:06:60:3e:
23:57:4f:8d:56:fb:2e:d0:5a:cc:38:97:84:5b:bf:
dc:99:bf:55:28:50:51:ba:64:12:68:4c:f3:6b:c2:
33:1b:dc:62:ca:2d:24:ae:1a:c5:76:ae:bb:16:47:
04:7e:b3:14:c6:ef:2c:f5:6b:8d:04:fd:f3:3b:b2:
7b:e0:54:c6:37:24:bc:fc:0b:ff:f9:8a:d7:97:40:
ae:34:98:c2:24:38:33:f6:9c:e4:1f:b5:da:67:3d:
87:b6:cb:a5:fc:f7:1e:6a:42:d2:6d:7b:72:a3:c3:
e2:6f:63:b4:6d:26:13:43:57:71:30:1f:44:20:1f:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:09:16:4B:DA:C4:85:06:0E:9C:C6:18:14:65:89:7A:44:AC:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A20CEEDBE011EF84E15865762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.214.0/23
Signature Algorithm: sha256WithRSAEncryption
40:59:18:f0:79:9f:02:92:d1:f9:e4:0a:4e:1b:28:81:98:fb:
e0:ef:c7:b4:7d:14:04:70:e4:3a:37:87:b5:0d:e9:05:98:89:
b9:2c:b4:c0:65:6e:71:fb:14:06:37:4b:85:46:2b:28:2c:60:
b3:36:e5:ae:2b:4a:ed:7b:0c:9f:10:69:42:a9:79:7e:9a:1e:
1d:8f:30:dc:90:95:15:5e:12:01:2d:ff:15:25:89:4b:52:ee:
d3:0f:9a:be:19:ce:a4:ba:ab:40:92:c2:c2:c8:28:8c:ad:98:
b8:2b:e7:fe:04:f0:0a:5a:3d:90:af:a9:26:1d:2f:8f:b1:fc:
c6:1f:ee:8b:0f:f7:f9:77:a0:a4:bd:bd:91:01:98:94:20:bf:
99:33:c3:ea:5a:3c:9d:a0:47:bb:28:67:18:fb:3b:ad:f2:f1:
ee:71:26:58:03:c7:7e:a7:26:2f:52:35:c3:ed:43:8a:54:03:
ac:38:2f:66:19:de:84:dd:e7:8b:81:ba:49:ec:90:68:07:2f:
fc:1a:a8:ca:9e:af:8a:d4:e1:57:21:fc:14:96:c7:f2:69:ae:
c3:77:6a:bd:5b:61:b5:7c:76:6a:b5:a8:16:ea:63:fa:17:f7:
df:f1:20:65:c2:82:3e:ce:93:e7:29:8a:0f:1d:c8:22:ca:98:
c7:46:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:53 2025 by rpki-client