Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EA30880DA5211EFB8F3DF63762E951A.roa
File: 7EA30880DA5211EFB8F3DF63762E951A.roa (raw, json)
Hash identifier: Ui3FPdWggFGtGAnyYAYG+nB4zwEXZ3NUIH3oE2WqxV4=
Subject key identifier: 4F:31:47:2D:6E:E7:9B:29:0C:C9:72:42:15:02:9F:09:8A:30:4F:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EA30880DA5211EFB8F3DF63762E951A.roa
Signing time: Fri 24 Jan 2025 12:55:32 +0000
ROA not before: Fri 24 Jan 2025 12:55:28 +0000
ROA not after: Thu 06 Mar 2025 12:55:28 +0000
asID: 21859
IP address blocks: 156.225.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69478 (0x10f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 12:55:28 2025 GMT
Not After : Mar 6 12:55:28 2025 GMT
Subject: CN=67938dc4-25fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:42:59:63:02:27:d3:a3:7c:5b:b0:4b:e5:
e1:d1:be:8a:16:a0:95:32:41:0e:18:8b:e4:bd:a7:
f0:46:8d:76:c6:41:78:76:41:f4:7f:2b:e1:63:a2:
55:7d:da:50:43:ac:81:fb:7f:05:ca:8a:d1:ea:2e:
bf:c3:b7:f1:9a:35:3b:1c:dd:61:f8:b4:84:63:7d:
6f:b9:b7:b9:d7:41:06:be:9e:19:be:94:c2:5b:87:
28:94:a2:44:0b:e0:43:f0:cb:f6:b6:70:62:30:41:
f2:22:d6:c3:f9:d6:62:e1:83:2b:d9:9f:6b:28:dd:
84:7e:bf:7b:96:a9:3d:e1:3a:e1:28:2c:fc:6d:63:
f6:bc:38:68:9d:5a:47:48:3a:c1:5e:74:9a:79:48:
e3:7f:eb:9a:47:f2:f4:00:a7:3a:eb:b4:e0:28:63:
27:58:2c:3f:a6:0b:0d:78:6f:e5:c1:53:61:cd:d4:
a9:fb:95:cb:a3:c9:29:11:33:b9:73:f5:53:6a:2b:
82:21:df:9a:82:93:01:8a:1d:db:33:55:0a:be:1e:
46:d4:7d:bb:f5:72:1a:49:7f:bc:10:88:a0:d9:be:
bb:b2:22:88:88:8b:8b:c0:94:47:d2:31:8b:57:82:
b2:97:fe:2d:27:d1:33:f6:89:34:33:1f:e5:ca:c6:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:31:47:2D:6E:E7:9B:29:0C:C9:72:42:15:02:9F:09:8A:30:4F:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EA30880DA5211EFB8F3DF63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.10.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:97:b6:5e:7e:ca:f3:39:4b:a8:65:6a:5e:95:bc:66:5b:88:
70:fb:23:45:9a:1f:ee:e5:b9:6c:c6:e5:1b:42:22:e3:96:66:
33:0d:75:5f:53:60:19:05:de:4a:60:2e:43:ca:89:6c:30:26:
cf:4d:cd:7d:61:be:fe:fd:89:69:83:de:9e:5f:c5:61:4b:df:
6c:39:81:83:ee:cd:3f:0b:58:ef:cc:a3:ee:36:cf:25:89:c9:
c3:a4:ef:db:38:66:ff:49:e6:40:57:a6:0b:e0:ac:fb:1f:5b:
62:79:8a:71:52:91:4c:c2:f4:88:e9:af:7c:94:f1:43:7d:e3:
20:5a:bf:79:b5:87:6c:09:fa:dd:57:b5:6c:ae:8f:4b:fb:08:
bc:f5:8e:0b:e3:f8:6d:fe:17:43:8b:3a:ad:d9:4e:44:3f:f8:
69:1e:5b:39:1b:91:34:74:37:cf:68:be:cf:88:bd:ca:be:1a:
82:9d:6d:47:30:ed:c9:b3:9c:35:6f:de:7b:be:2e:8e:b3:da:
bd:92:0a:91:cf:23:73:35:a3:d7:81:36:ba:5a:5c:e0:54:b9:
e6:64:e7:e2:06:f7:24:23:99:f3:7f:b1:dd:3a:f3:7d:20:04:
a7:dc:8d:a6:57:af:e6:5b:61:5b:b6:5d:de:23:3d:93:d9:15:
e7:f5:6d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:17 2025 by rpki-client