Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6733EC66D31611EFBD8A4258762E951A.roa
File: 6733EC66D31611EFBD8A4258762E951A.roa (raw, json)
Hash identifier: X+j1xznSxd9pOVfD7d3GSlROzjh/1gxJG7ydNrFYjWw=
Subject key identifier: 50:50:D4:FC:60:1F:E0:BD:D9:B9:92:8C:1A:23:A5:18:B5:BC:ED:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01086F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6733EC66D31611EFBD8A4258762E951A.roa
Signing time: Wed 15 Jan 2025 07:57:45 +0000
ROA not before: Wed 15 Jan 2025 07:57:41 +0000
ROA not after: Mon 03 Jan 2028 07:57:41 +0000
asID: 17561
IP address blocks: 156.254.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67695 (0x1086f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 15 07:57:41 2025 GMT
Not After : Jan 3 07:57:41 2028 GMT
Subject: CN=67876a78-ed18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:37:7c:6b:d3:d4:b5:ca:a1:54:98:94:29:
9c:05:a2:83:f7:42:5f:a6:a9:89:ba:42:31:a2:1d:
bf:1a:41:3c:87:c4:1e:88:80:7b:74:ce:70:61:99:
d5:8a:21:28:83:c3:61:3c:29:2c:e8:de:7e:bc:79:
d3:dd:97:74:52:9d:e1:be:e5:8c:9c:21:48:92:8a:
93:1d:da:69:1d:ee:75:49:6d:f6:0d:93:5a:fe:e9:
54:44:4c:c6:75:d0:25:15:dc:56:77:0f:2b:d3:e8:
fe:26:5b:57:fe:42:24:07:fd:d5:93:29:9f:42:bb:
83:76:fc:dc:44:45:d6:a2:b6:c4:f2:7d:5b:d4:8b:
ff:dc:2b:fa:7d:3b:8e:fe:37:76:79:51:7f:2c:33:
ed:03:97:32:f7:20:4e:e5:a7:e6:b1:7e:c7:45:b6:
8e:e3:02:cc:2f:bb:05:95:f7:eb:78:52:96:ff:3f:
98:37:28:3c:8d:85:58:e6:92:45:13:13:c2:30:fe:
91:ca:d2:35:1f:ad:67:5d:6d:7d:c2:1d:e2:29:53:
ba:05:3e:4c:7f:d7:2b:a7:2f:f7:1e:cb:95:22:30:
0b:37:85:bc:5b:fa:a4:e0:c0:e1:25:df:09:fd:ac:
d7:74:0d:1b:57:92:14:23:11:33:23:de:61:6b:77:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:50:D4:FC:60:1F:E0:BD:D9:B9:92:8C:1A:23:A5:18:B5:BC:ED:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6733EC66D31611EFBD8A4258762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.77.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b7:67:38:b4:1c:d5:f0:84:26:ba:e2:74:f6:85:46:3d:fc:
38:f1:ec:1c:70:96:68:a2:ed:cb:7e:bc:06:5e:9a:e3:af:64:
10:d4:80:4b:29:ca:3a:4d:95:61:ee:0b:00:0d:03:3e:a3:a1:
df:4f:96:87:74:71:8c:27:66:eb:d6:9b:c0:c7:7b:62:34:9e:
33:c2:74:26:5c:4a:6f:3f:5a:80:34:c3:70:aa:dd:d8:ef:9b:
e9:4a:93:50:3e:64:e1:e7:27:5b:69:69:2e:86:29:79:86:ae:
18:0c:32:3f:8c:ee:aa:df:e1:73:f8:20:2f:cd:28:28:08:9e:
5d:38:b2:7d:78:ac:38:18:73:b1:cc:98:a7:95:32:2d:a4:02:
a0:f1:b9:d5:f7:1f:76:d6:a7:9c:8e:d3:c7:fd:1b:f8:9e:55:
d0:f7:36:5f:dc:28:04:b6:b6:58:d1:a5:dd:94:59:f3:4c:5e:
dc:49:a5:06:c9:72:a1:f1:88:21:06:c9:e0:c7:ef:52:03:34:
09:f4:5c:4f:92:43:30:2b:fd:39:e5:97:ca:87:e8:f4:a5:55:
8a:71:7e:06:d3:7a:fc:8c:f7:c7:fc:b9:79:6b:68:5c:2c:8c:
a9:5e:71:21:48:bd:13:ca:84:6f:5c:b3:f8:f3:8a:d8:17:a7:
8b:7c:45:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:34:13 2025 by rpki-client