Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80D65ED0C98C11EFAE5D2D4B762E951A.roa
File: 80D65ED0C98C11EFAE5D2D4B762E951A.roa (raw, json)
Hash identifier: aoUIhtGICwBHnWuftkYF0XC5yo563tPpsl1eRx/F2fY=
Subject key identifier: D3:CF:C6:64:54:32:01:DF:C2:C4:22:40:16:F9:D1:6A:E9:3B:87:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80D65ED0C98C11EFAE5D2D4B762E951A.roa
Signing time: Fri 03 Jan 2025 04:37:57 +0000
ROA not before: Fri 03 Jan 2025 04:37:53 +0000
ROA not after: Sat 13 Dec 2025 04:37:53 +0000
asID: 984
IP address blocks: 156.233.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62907 (0xf5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 3 04:37:53 2025 GMT
Not After : Dec 13 04:37:53 2025 GMT
Subject: CN=677769a5-c355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:c6:32:a3:6d:f2:41:34:ac:25:5c:23:9c:
c8:79:fe:97:33:da:03:2f:45:b9:04:16:b7:d8:7a:
ce:42:69:2c:bc:63:7f:bb:fa:61:4d:2b:37:be:e6:
aa:a8:b5:ad:c0:39:35:d4:c5:61:20:73:1b:f1:90:
66:4c:31:df:bb:e0:23:cc:c1:1f:66:02:13:a9:3b:
78:15:7d:1f:b2:1b:52:63:d2:8f:29:02:1c:fe:79:
ba:ea:47:a4:83:8a:bd:9d:2c:3e:b3:9f:e1:94:78:
18:61:46:c7:71:3b:ad:bb:d2:ba:e7:cb:8d:0a:07:
05:9c:63:1e:26:c0:d6:e1:de:95:7b:46:72:5d:fd:
d1:b6:c9:52:6f:a4:52:c2:d1:4b:c7:13:11:54:b1:
c1:ef:c3:c2:7d:6f:64:0e:9f:ab:bc:44:b5:85:a4:
95:a7:ef:a1:0f:aa:43:ca:1b:83:41:1f:c4:a6:31:
5a:6a:b8:72:9d:b5:9f:99:26:ef:5d:fa:bf:d4:6d:
3a:5e:2d:c0:f0:b8:07:e8:9f:34:d6:29:cc:6e:08:
3d:47:7f:73:76:06:bb:49:c5:e5:19:81:9c:2f:98:
6c:a6:be:14:6b:5b:f2:ce:4a:1e:1b:38:25:c5:2d:
f8:c3:2b:8b:cb:58:7b:16:24:9c:e8:b1:0e:4a:ba:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:C6:64:54:32:01:DF:C2:C4:22:40:16:F9:D1:6A:E9:3B:87:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80D65ED0C98C11EFAE5D2D4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.48.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f3:ee:1d:67:06:db:94:70:20:ce:8a:35:bd:4b:8c:cc:ca:
6a:52:eb:b3:98:0d:96:eb:a2:77:30:24:30:ba:72:01:1a:ab:
d9:a3:9a:42:e5:b6:d4:dc:f5:c2:d1:cb:3c:35:31:09:20:9f:
72:fa:1f:2d:3e:94:d5:31:c8:81:cb:c4:a6:fd:b5:ff:96:c3:
77:22:de:bb:db:24:23:6d:21:9d:ec:f4:5a:6c:27:c4:84:91:
c0:96:8d:61:63:62:ba:40:45:f6:86:44:cd:b0:f8:7a:f7:b4:
cc:96:92:c9:5a:3c:e3:aa:58:fe:f0:c3:99:2d:18:7c:bb:24:
1c:63:e8:3b:95:53:11:b7:05:6f:77:d3:8b:1b:27:61:05:78:
94:1c:f2:c8:65:6e:cc:f4:c8:d6:ae:99:65:51:ac:f8:0b:4b:
50:b1:cf:1c:1e:0d:81:81:3c:29:f3:d0:df:66:e1:70:e3:dd:
63:3f:17:fd:27:17:72:9e:58:72:a6:10:06:19:fb:90:e9:e8:
df:a3:77:73:59:b9:8f:74:ed:b1:24:6e:f2:85:6e:5d:3f:e6:
56:7f:98:a4:38:aa:5d:8f:c6:62:0b:32:41:a0:a3:3b:3d:12:
8a:db:b5:27:a8:d0:e6:11:9c:53:69:f5:5d:27:be:f8:1a:7e:
b1:5d:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:15:55 2025 by rpki-client