Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78BB2C5CDA2211EFAD64819F762E951A.roa
File: 78BB2C5CDA2211EFAD64819F762E951A.roa (raw, json)
Hash identifier: yuu3VlGTFI6UusVdoVwLRxnJirlGwfZ+qFvd4jugSdA=
Subject key identifier: 01:43:DA:23:A1:A6:AD:6A:02:BE:31:E6:62:E8:A8:9C:8E:B7:AE:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78BB2C5CDA2211EFAD64819F762E951A.roa
Signing time: Fri 24 Jan 2025 07:11:46 +0000
ROA not before: Fri 24 Jan 2025 07:11:42 +0000
ROA not after: Sat 01 Mar 2025 07:11:42 +0000
asID: 61112
IP address blocks: 156.243.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69409 (0x10f21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 07:11:42 2025 GMT
Not After : Mar 1 07:11:42 2025 GMT
Subject: CN=67933d32-6421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:df:39:58:37:b4:7f:a7:80:b0:89:df:a3:
d9:12:2d:b7:79:87:ac:9a:98:b3:32:7f:cb:66:ef:
48:f7:cf:21:b3:e9:39:d6:25:1f:c2:9a:18:d9:16:
7e:e4:34:c8:e5:c6:9c:01:59:c1:2a:0b:a1:36:5c:
81:10:52:fa:62:5b:93:57:61:5d:64:f9:f4:bb:53:
c0:52:0f:55:7d:ba:fd:ba:b1:8d:52:12:88:db:e2:
13:30:75:d0:a7:3b:f5:b3:e2:bf:d9:7c:39:00:96:
fa:7d:36:f9:7f:b6:01:ca:53:15:2a:f5:7d:04:71:
a5:48:6c:ba:b6:4e:23:79:8c:a4:5e:00:58:71:13:
b7:a4:69:a6:61:39:2c:98:79:8b:c0:ca:0e:2f:55:
d4:b4:0d:70:2b:ff:b1:0a:2b:f1:e6:b1:d7:7b:f4:
a7:2b:04:0d:9e:bf:66:78:9f:fd:31:12:81:93:21:
95:10:54:f1:ed:c9:3e:99:70:3e:b4:3f:1d:1d:96:
95:3a:74:74:1d:9f:68:69:aa:c2:b2:c1:b1:a9:fc:
51:e5:70:37:cc:f5:3b:f5:84:96:f2:c8:a8:03:c6:
74:3d:10:9e:89:b9:a1:90:f9:c0:20:fd:82:38:08:
63:80:8c:a2:12:39:e0:3f:e9:cd:14:4e:94:45:69:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:43:DA:23:A1:A6:AD:6A:02:BE:31:E6:62:E8:A8:9C:8E:B7:AE:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78BB2C5CDA2211EFAD64819F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ec:05:01:6d:f0:b7:3b:a6:f5:44:55:c2:c5:09:ea:32:5f:
44:c2:54:be:5a:3c:ef:65:02:91:f5:8c:8b:26:ca:c3:f0:65:
f9:69:12:46:a4:1c:df:f2:8c:d4:40:7e:53:e5:98:bd:e5:69:
78:20:81:8d:d4:95:97:5f:23:30:8e:09:bc:f0:52:65:d6:07:
03:f9:a2:e9:72:a1:77:f2:17:d0:95:90:e9:67:46:49:96:91:
fe:f0:43:43:76:af:dd:84:b6:1a:ed:c1:5b:0b:09:31:d9:9d:
15:6d:bf:7a:c6:c7:e8:0b:f6:e1:f8:64:a4:ae:97:f5:ef:97:
9b:cb:18:ef:52:9c:52:36:41:7c:cb:37:d7:d7:69:2e:dc:26:
c1:63:6a:e5:8a:c6:c8:4f:91:c4:b7:85:e0:5e:6d:7e:63:90:
c6:e9:23:77:72:c8:db:ea:f8:39:b1:2e:49:0e:a1:78:f6:10:
bc:cc:d3:28:a8:13:92:4b:37:54:72:45:1b:2d:80:ac:06:ff:
b1:2a:32:8b:63:ab:b4:a7:e2:1f:11:39:6c:fb:27:1f:54:72:
4b:b9:75:8d:f6:29:f7:41:08:07:4d:7e:0d:96:cb:6a:7a:09:
6b:5b:f9:8e:4b:f0:d4:a5:68:4f:ac:1c:eb:6b:20:46:a7:d8:
52:57:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:35:18 2025 by rpki-client