Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/758ADE7EDCB611EFB0DA3F85762E951A.roa
File: 758ADE7EDCB611EFB0DA3F85762E951A.roa (raw, json)
Hash identifier: cBv/fqvn7WkuzsmGOZKZJymlLiillqFTW34R4Bl61d8=
Subject key identifier: 51:19:A6:12:0D:00:70:81:8C:FD:57:A0:69:B6:FB:2F:66:B4:AB:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011529
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/758ADE7EDCB611EFB0DA3F85762E951A.roa
Signing time: Mon 27 Jan 2025 13:56:09 +0000
ROA not before: Mon 27 Jan 2025 13:56:05 +0000
ROA not after: Sat 08 Feb 2025 13:56:05 +0000
asID: 22773
IP address blocks: 156.246.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70953 (0x11529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 13:56:05 2025 GMT
Not After : Feb 8 13:56:05 2025 GMT
Subject: CN=67979078-d22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ef:aa:a0:f0:6c:2e:27:85:ee:e1:ac:8d:0e:
18:a3:04:41:00:6c:53:6f:ce:6a:3b:63:cb:3c:96:
39:a8:23:3b:ad:54:0b:70:5b:69:de:56:9f:10:30:
2d:d6:97:88:4b:b3:f2:5a:0f:eb:79:68:95:c6:76:
0c:71:66:21:2f:6e:79:29:6d:db:41:b6:0c:54:62:
88:74:26:01:62:b8:f1:44:de:42:0a:b1:31:08:2c:
8b:14:8c:78:45:1c:c8:ec:80:05:34:44:61:86:70:
1f:5e:72:d6:a9:c2:a8:2f:ed:97:b2:ce:8b:02:2a:
84:9e:59:84:0b:1b:6d:ba:8b:ab:18:6e:5f:e7:65:
fc:b9:bf:71:c1:30:a2:3d:8c:8b:a9:62:63:f4:59:
eb:ec:05:49:e5:11:aa:2c:45:3d:93:1c:f1:00:c9:
65:07:b6:c2:87:42:67:69:a2:f1:03:8f:cc:81:4b:
db:71:24:8d:2c:12:d7:a0:bd:04:01:16:b1:c3:bd:
9a:9b:fa:80:0e:31:d0:2b:60:4b:e9:ac:7e:0a:41:
60:93:b8:df:c3:08:e7:4a:90:f7:f3:12:e6:ab:bf:
9b:a1:f2:6a:26:c6:87:79:25:f5:24:a8:f6:77:aa:
3f:f6:22:c5:3d:a9:45:dc:61:5d:f5:6d:13:fd:66:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:19:A6:12:0D:00:70:81:8C:FD:57:A0:69:B6:FB:2F:66:B4:AB:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/758ADE7EDCB611EFB0DA3F85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.64.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:33:cd:3d:81:58:3d:75:4d:6b:fb:e4:10:79:d3:9c:9b:3b:
a1:a4:b3:65:77:60:ca:1b:92:b7:32:6a:14:30:6a:09:92:be:
42:43:57:36:e5:b6:dc:79:35:48:12:75:3b:0f:40:1f:db:d0:
ca:b1:e0:64:f0:3d:24:ad:2f:11:8a:32:6f:15:62:0c:96:59:
6d:28:4b:75:e6:e8:c1:aa:3c:8e:de:9b:82:5d:02:29:e7:5f:
6b:eb:97:58:7b:12:76:6a:58:08:6f:3a:3c:f5:09:da:8f:42:
67:3f:75:5a:e0:95:5c:14:42:e0:ba:e3:48:a9:51:f5:dd:41:
06:8b:3a:54:51:fb:33:15:25:68:13:c3:73:42:32:20:a4:92:
e3:db:d8:88:08:93:47:c3:42:19:c9:20:6a:b4:4b:11:7a:af:
84:f1:bf:1b:d9:e0:a2:66:a4:43:58:8c:cc:4b:7f:8d:d9:04:
e3:28:48:08:b9:29:6b:2d:63:ee:82:6a:f8:ff:45:1f:15:75:
29:bb:aa:a8:c9:9f:08:1b:c7:b1:16:20:b1:e4:47:b2:d9:fe:
ae:bf:83:9a:d6:1e:a9:83:76:87:88:6c:2c:60:da:0e:1c:f6:
d7:43:fe:f6:b1:5e:4b:93:ea:9c:69:b4:94:9d:1a:1c:5d:ae:
18:bb:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:30:01 2025 by rpki-client