Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7117B080DC1911EF9F7C0962762E951A.roa
File: 7117B080DC1911EF9F7C0962762E951A.roa (raw, json)
Hash identifier: kvNS+kqAJqeytLMGmhoT6AWy9DDvzBW2X54amwqAyPQ=
Subject key identifier: C4:EC:2E:DE:1A:07:8C:C6:77:E8:D4:A5:4A:FB:B1:D2:59:B2:00:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01144E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7117B080DC1911EF9F7C0962762E951A.roa
Signing time: Sun 26 Jan 2025 19:12:10 +0000
ROA not before: Sun 26 Jan 2025 19:12:06 +0000
ROA not after: Fri 07 Feb 2025 19:12:06 +0000
asID: 399077
IP address blocks: 156.248.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70734 (0x1144e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 19:12:06 2025 GMT
Not After : Feb 7 19:12:06 2025 GMT
Subject: CN=6796890a-1c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:6b:f8:65:da:d6:52:86:8f:73:a7:21:9c:
b2:fc:de:58:7d:19:4c:b6:ae:78:3f:ea:bd:3e:e3:
81:d3:1e:71:37:a4:28:00:b0:ea:31:18:44:fd:b2:
93:21:d7:eb:6c:68:d0:c5:cd:55:cb:f9:43:31:6a:
53:fe:f6:32:b5:69:71:4f:99:74:12:4b:8a:a4:37:
58:5e:e8:55:a4:29:99:f7:bc:f6:dd:07:e5:36:21:
47:ee:a6:65:10:83:5a:54:36:da:47:6f:07:e3:ec:
aa:2d:b3:cc:34:24:de:c8:6c:b6:45:20:66:00:8f:
f4:66:5d:2d:26:14:93:12:43:6a:30:98:23:22:7d:
33:ae:8a:e5:3f:f3:04:01:f9:18:9a:ec:27:e1:56:
46:e7:3a:13:7a:f0:10:31:31:28:a9:36:e6:8c:f6:
e5:81:4f:4e:60:61:21:7f:9d:3f:21:56:22:22:dc:
89:1f:1c:df:4e:8a:ba:9c:61:f8:50:f4:cd:50:5a:
28:73:63:ed:5d:7b:3b:a9:e3:32:d4:9e:e9:d2:99:
93:bb:66:44:8e:3a:d1:27:c1:2f:d0:20:00:d0:13:
cd:8c:20:34:86:be:5d:50:3f:14:c4:ed:c9:a5:92:
14:ba:3a:a6:74:46:59:a7:a2:7f:bc:c7:ab:30:77:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EC:2E:DE:1A:07:8C:C6:77:E8:D4:A5:4A:FB:B1:D2:59:B2:00:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7117B080DC1911EF9F7C0962762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.73.0/24
Signature Algorithm: sha256WithRSAEncryption
55:af:db:d0:68:04:00:e1:48:3a:f5:d1:2a:97:4c:c5:70:77:
d9:25:02:c3:f1:99:36:e6:30:a9:5f:40:b6:e1:10:82:50:5b:
37:3b:7b:b4:63:d5:31:17:2f:30:65:5b:42:42:d5:a5:a8:eb:
28:28:92:65:23:ec:27:db:ae:e3:ea:54:82:df:39:a9:86:39:
73:e6:ce:65:f8:f5:4d:3b:49:7b:13:02:6c:01:71:aa:90:2c:
b7:3b:9f:b4:07:15:f8:78:7f:06:38:5a:fc:f7:04:da:61:2d:
b0:b1:c4:67:5e:c6:be:45:19:dd:72:c9:f3:e5:12:54:c7:15:
bb:41:e3:5c:41:88:30:d5:4c:64:a5:da:78:17:fb:ed:b0:33:
13:b6:c1:4b:4f:c3:5a:25:29:bf:fa:33:45:d6:6f:ca:d8:7d:
fc:13:6e:ac:c3:a0:f1:28:26:95:7a:29:a7:c9:86:a7:75:33:
eb:e0:1d:83:10:23:9a:d5:c2:ac:1f:c9:ec:97:ab:f4:dd:da:
17:e2:03:da:07:84:6c:f2:c7:6d:ee:21:86:ce:7d:a9:f2:19:
be:90:2d:e2:3d:3d:97:a2:7d:f4:fc:8f:67:0e:6a:7a:92:be:
6e:88:38:e5:43:45:2b:eb:10:57:ce:67:a6:1a:fa:51:82:7a:
f9:1b:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:01 2025 by rpki-client