Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DF07568DFF111EF8DF4AD4E762E951A.roa
File: 7DF07568DFF111EF8DF4AD4E762E951A.roa (raw, json)
Hash identifier: 6IVB01hQ+/Nz/eVVx44XjL+4HKNzwBtRqA5Lk+Jgit0=
Subject key identifier: 7B:6B:8F:F0:32:47:E7:FF:B7:C8:22:92:EB:42:A4:31:CC:C3:5D:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011667
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DF07568DFF111EF8DF4AD4E762E951A.roa
Signing time: Fri 31 Jan 2025 16:36:17 +0000
ROA not before: Fri 31 Jan 2025 16:36:13 +0000
ROA not after: Tue 25 Feb 2025 16:36:13 +0000
asID: 137547
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71271 (0x11667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:36:13 2025 GMT
Not After : Feb 25 16:36:13 2025 GMT
Subject: CN=679cfc00-0a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:81:2a:04:a5:78:81:d7:c7:1d:31:d2:60:
4a:19:b6:cf:98:ed:86:3d:db:66:3a:18:fc:98:4c:
3b:e8:43:b4:e6:7b:f6:a2:b5:14:fd:ae:75:a1:28:
79:6a:b7:e5:14:8f:37:1a:3d:46:6a:84:6e:56:97:
cc:f5:4f:de:ac:3d:e8:c3:c9:47:01:2e:00:b1:b2:
52:44:f3:a6:b8:dc:ce:d1:da:0c:ec:59:ff:ef:e7:
88:d2:bb:a6:b9:f3:b0:a6:c1:6c:b7:13:93:af:42:
2f:4b:0c:6b:ee:f1:21:37:0e:01:fa:0e:b7:60:7a:
d1:9a:fd:c1:45:b6:ea:93:88:c1:fa:26:3c:41:2b:
d1:12:c3:95:90:1d:a1:83:91:b3:82:bd:89:7a:8f:
2e:ab:5c:94:6a:2f:5e:1c:45:15:29:5a:3f:b2:37:
d4:b7:6d:b9:25:87:98:ea:8b:83:10:ae:a5:09:ad:
d2:96:00:6e:69:f9:90:9a:d8:31:de:3b:40:21:c5:
75:64:8f:3f:b5:65:ed:1c:4b:8b:bc:e3:dd:a7:85:
45:bd:b8:0b:15:fa:4d:78:97:5b:48:5a:93:04:38:
5a:fc:78:ee:fb:eb:95:1c:4f:83:76:fc:d7:a9:2e:
38:65:85:85:1a:88:d4:ac:09:bf:b4:a8:1c:da:77:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6B:8F:F0:32:47:E7:FF:B7:C8:22:92:EB:42:A4:31:CC:C3:5D:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DF07568DFF111EF8DF4AD4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
24:a3:2e:b2:d7:2c:aa:b2:7b:98:16:3f:b7:d3:d7:d0:ca:9c:
1a:90:e6:e7:50:a8:a9:7d:91:5c:5f:b4:b0:a4:f0:4a:1b:c7:
eb:a5:ee:42:2d:0f:ed:4c:49:a0:83:4a:c3:32:34:e5:48:74:
09:97:3d:6f:4a:e0:48:c9:23:07:27:9b:07:46:10:e9:a1:25:
e6:f5:ee:e1:22:36:d4:03:1e:fa:e5:20:76:28:bc:a2:db:17:
a8:68:ab:b2:7b:d9:ca:e6:ef:d0:60:62:a5:85:b1:f5:65:78:
2d:f9:1a:4f:37:95:89:82:71:95:34:77:b9:be:84:f0:79:c3:
c7:96:9d:23:2d:42:a5:06:d8:ef:44:78:4c:63:b8:42:0d:de:
86:49:b5:f8:c9:8a:7d:ee:cf:25:17:70:87:43:7c:6d:4e:bb:
de:49:d2:ed:8d:bd:ec:f2:20:b5:78:6c:52:df:be:1a:23:a5:
fb:44:d9:e6:16:cc:95:aa:11:98:be:40:cf:49:d1:da:61:7f:
14:0c:8b:1d:c4:72:25:17:c3:b7:e5:7c:f3:c8:27:e8:92:a4:
ed:14:27:0c:45:d4:7b:89:05:a9:63:f7:5e:70:39:68:42:23:
75:39:c0:1a:28:92:66:f4:79:47:03:01:ce:49:99:54:29:d0:
4a:08:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:36 2025 by rpki-client