Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DD4ABF2DBE211EFBD9B0B73762E951A.roa
File: 7DD4ABF2DBE211EFBD9B0B73762E951A.roa (raw, json)
Hash identifier: lyrVxEjCB3tNjTyun4eoz++kvaYGraa7fGTZj88pu7M=
Subject key identifier: 0B:25:DE:0E:0E:B0:A2:AF:9B:D5:71:EF:7E:BB:D0:DD:09:93:34:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011394
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DD4ABF2DBE211EFBD9B0B73762E951A.roa
Signing time: Sun 26 Jan 2025 12:38:49 +0000
ROA not before: Sun 26 Jan 2025 12:38:45 +0000
ROA not after: Tue 04 Mar 2025 12:38:45 +0000
asID: 203020
IP address blocks: 156.253.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70548 (0x11394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:38:45 2025 GMT
Not After : Mar 4 12:38:45 2025 GMT
Subject: CN=67962cd9-e8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:83:13:f1:35:74:d3:01:3a:af:f3:f3:68:
12:44:8a:7c:7f:48:80:ad:60:7f:7d:e1:97:27:f8:
02:e7:ea:d1:a9:d1:02:71:f4:25:f7:b6:6f:52:a1:
35:98:6c:13:33:6a:9a:44:94:38:d0:88:1a:11:11:
cb:cc:56:47:f3:b5:5a:14:e1:e5:c2:5d:4f:0e:a6:
10:fe:e7:9e:7b:75:18:7f:84:fd:25:2a:7e:14:61:
73:9e:d6:15:7c:e7:7a:dd:cc:a2:62:4e:f1:4a:0a:
e4:a1:78:1f:f1:b3:c1:a1:f9:f3:6a:da:90:61:e1:
61:e0:a9:d2:f3:f5:31:17:16:21:2c:33:55:14:fd:
d5:1a:58:e9:4f:df:49:62:f9:df:6a:35:47:30:55:
50:67:b6:6a:0e:b0:e8:c1:a9:68:ee:2f:16:a1:45:
fd:0c:a3:c3:12:26:e5:c0:a4:c3:8c:10:eb:f5:18:
70:dc:b3:6f:6b:c9:0f:f6:96:64:f1:4e:74:76:ea:
fd:d3:60:37:b4:2d:05:7f:a9:78:99:a8:ad:a1:e3:
73:a2:38:eb:ca:24:9f:ad:ef:4c:c0:a8:7c:1d:be:
d1:96:14:9b:9c:40:8a:5d:88:f4:ce:63:2c:a7:c3:
26:bf:49:8f:75:17:90:95:b4:ae:4a:55:1e:86:e7:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:25:DE:0E:0E:B0:A2:AF:9B:D5:71:EF:7E:BB:D0:DD:09:93:34:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DD4ABF2DBE211EFBD9B0B73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.182.0/23
Signature Algorithm: sha256WithRSAEncryption
80:51:18:86:46:26:e1:20:b5:bd:3a:20:95:9d:1d:fe:05:67:
0f:42:37:9c:78:4d:d1:8d:84:e5:bd:40:e6:ec:f2:f7:7c:f8:
39:61:66:4e:08:32:1e:c5:5d:79:7c:ea:b4:c5:5f:c7:70:ba:
96:39:80:c1:99:98:5b:71:9b:28:48:e1:f0:44:a2:ea:40:e4:
66:ca:0d:fe:da:d7:ad:21:3d:c9:40:e2:52:3d:0d:a9:dc:1a:
10:60:f6:6b:d2:f2:80:7f:d2:73:42:ac:91:75:89:ef:a0:51:
af:5e:d9:ec:f4:4c:b7:dd:49:9d:80:dd:86:6e:a7:94:ac:d9:
c5:49:0c:3f:97:60:4b:5c:ed:72:80:67:f6:86:d8:4b:be:4b:
d6:76:7f:fb:c6:ed:92:5f:5e:18:fe:80:1b:72:4a:5a:aa:02:
24:13:5f:3d:d3:d1:f2:12:c8:1c:36:d9:af:8c:f5:e5:f3:50:
89:1f:e1:49:d9:5c:14:bb:34:f2:0f:c9:d5:5d:30:5a:16:46:
85:b5:1f:9a:f3:9e:a2:37:1f:b1:14:7f:3e:50:5a:90:f0:03:
b7:84:8a:14:7d:b4:28:23:1c:87:e0:4a:c7:cd:6f:57:98:80:
bf:ef:6d:58:b3:65:7f:46:5e:85:df:03:e8:1f:9a:2d:95:7e:
73:d6:bb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:13:05 2025 by rpki-client