Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/760D4EB2C74511EFAAC01EBD762E951A.roa
File: 760D4EB2C74511EFAAC01EBD762E951A.roa (raw, json)
Hash identifier: a77NXPvHaC8kjq/Q1P9JaYilhZ4z/UkjP5KsZRuP7S8=
Subject key identifier: B8:0B:80:4D:32:B4:8F:1D:16:77:23:1A:16:E9:BB:05:74:D4:36:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F2A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/760D4EB2C74511EFAAC01EBD762E951A.roa
Signing time: Tue 31 Dec 2024 07:04:22 +0000
ROA not before: Tue 31 Dec 2024 07:04:18 +0000
ROA not after: Fri 07 Feb 2025 07:04:18 +0000
asID: 205125
IP address blocks: 156.255.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62114 (0xf2a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 31 07:04:18 2024 GMT
Not After : Feb 7 07:04:18 2025 GMT
Subject: CN=67739776-a205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:01:22:3f:0f:09:69:24:34:3c:8a:6b:ea:
77:fc:c0:19:c6:55:4d:c0:f8:af:06:9a:64:3a:5c:
78:61:d4:67:b3:db:24:65:25:99:b1:e6:e7:32:11:
4c:5c:57:e6:68:3a:62:50:5f:40:41:23:5d:7a:84:
7a:66:d7:43:a0:1f:83:32:7f:c7:69:ac:55:21:cd:
60:dc:45:71:42:78:00:d0:ff:52:d5:32:06:5f:90:
35:52:00:b5:e4:2a:54:6e:27:5d:25:08:9c:87:31:
8e:f4:52:06:b4:67:52:63:6e:0e:b1:05:72:4c:98:
64:5f:ed:bf:88:04:5b:5c:c4:81:41:f9:80:0f:46:
63:f4:80:8d:85:26:85:b5:ff:8b:6d:4b:22:f5:70:
4c:47:d7:ea:d3:d2:fb:23:d9:7f:79:ab:ca:3b:f7:
d6:c6:09:7a:a6:f9:35:21:99:79:eb:ac:32:cb:d8:
9a:00:eb:66:e0:1b:67:da:4e:dd:c6:14:a8:f0:45:
58:89:c7:60:49:36:01:54:16:80:76:29:c5:2c:08:
da:ef:43:05:04:4d:93:b3:47:5c:e3:26:fd:93:4c:
97:7b:26:8b:a7:35:79:15:6e:0e:c3:75:e6:14:22:
15:d9:f4:b5:a0:bc:b0:cb:6a:a8:22:7a:d2:6a:b4:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0B:80:4D:32:B4:8F:1D:16:77:23:1A:16:E9:BB:05:74:D4:36:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/760D4EB2C74511EFAAC01EBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:23:d3:90:36:ab:ee:08:5f:6d:ee:67:c6:d1:67:75:9c:db:
e9:19:cc:4d:1d:06:cd:33:64:ac:6b:d3:3a:6b:8a:83:18:31:
10:db:f0:34:a5:8d:59:8d:ad:ff:b6:f6:20:fc:9c:2d:68:cd:
e1:41:1a:16:45:b0:e0:99:b8:2a:dc:40:ad:67:35:20:cd:ca:
16:aa:27:2f:fa:88:87:fb:70:c3:69:c4:8f:b7:df:3c:2a:cb:
ff:d4:d7:ef:7d:e8:0e:f9:c9:bd:7a:55:09:da:76:1e:60:dd:
2e:52:10:77:6f:fc:a7:75:f3:ce:0b:f2:c3:69:ce:fd:ed:50:
eb:d6:6a:1c:60:b3:39:01:b1:aa:8e:63:8e:ab:71:ba:52:23:
f5:88:fe:0f:6b:a5:9c:eb:04:5b:3e:fd:a8:2a:89:6f:ac:b8:
eb:71:97:56:99:e3:75:90:66:66:1e:14:be:e8:bd:33:e2:df:
2e:e7:9f:66:36:b0:50:08:91:36:e2:f4:63:bf:f6:72:4a:c9:
4d:5c:7b:eb:79:69:84:d0:9f:9a:1c:b3:d7:cc:04:06:8d:cc:
86:5c:e4:8e:f6:85:3c:e6:59:6b:a6:46:4a:74:3c:82:70:04:
5d:24:ca:d9:e2:32:9b:69:ea:ab:74:6b:a4:b0:e4:b8:96:f6:
bf:f3:76:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:24:27 2025 by rpki-client