Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81A38D10DA5311EFAFAB736D762E951A.roa
File: 81A38D10DA5311EFAFAB736D762E951A.roa (raw, json)
Hash identifier: 66K/RMAYUhSePHS1WFTfLmTly5T9p8J37Sse+jDHXDA=
Subject key identifier: 8A:7C:DC:50:23:FA:87:03:EA:25:19:EA:5B:59:86:59:B6:1A:B3:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F68
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81A38D10DA5311EFAFAB736D762E951A.roa
Signing time: Fri 24 Jan 2025 13:02:46 +0000
ROA not before: Fri 24 Jan 2025 13:02:43 +0000
ROA not after: Wed 26 Feb 2025 13:02:43 +0000
asID: 59187
IP address blocks: 156.238.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69480 (0x10f68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 13:02:43 2025 GMT
Not After : Feb 26 13:02:43 2025 GMT
Subject: CN=67938f76-bc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:39:64:ca:16:63:8b:45:9e:dd:93:f8:be:
3b:67:b8:73:bf:b5:44:18:ac:41:fc:d7:69:7d:a7:
64:15:50:54:5e:16:51:7a:cf:e6:7e:a3:bb:b4:a5:
21:50:6b:bb:88:3e:0c:74:f0:9a:0d:06:49:3d:cc:
ad:fb:92:21:3a:7f:58:48:31:b0:a2:0e:3f:f2:80:
bb:6b:73:2c:d6:c7:4e:c6:0c:89:d5:96:6b:80:66:
27:b6:f5:ef:86:42:5c:27:6b:cf:0b:84:49:bf:b4:
db:96:2f:2b:45:1d:57:b0:87:bd:bd:50:fb:7b:91:
b3:50:3b:58:20:b6:10:b2:ad:aa:9c:1a:64:4f:03:
ff:45:40:a1:8f:14:59:9c:ba:a5:cd:0e:29:f8:48:
ef:80:cc:b3:81:75:88:f4:66:c2:25:0b:97:e8:1d:
44:85:e9:54:ea:ea:86:f9:aa:a7:ed:6a:72:95:25:
e5:66:49:a5:39:7d:f9:ba:15:0a:9f:e1:d6:52:7b:
1b:ca:94:66:22:68:70:2a:87:21:df:df:29:3d:03:
27:17:f5:ea:89:e8:a1:0b:7a:e5:32:2d:a1:38:53:
99:5c:84:aa:26:f0:bb:40:9d:68:af:59:0b:a3:6c:
14:8b:0a:bf:76:eb:6f:35:47:21:3d:88:64:98:85:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7C:DC:50:23:FA:87:03:EA:25:19:EA:5B:59:86:59:B6:1A:B3:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81A38D10DA5311EFAFAB736D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.100.0/24
Signature Algorithm: sha256WithRSAEncryption
36:2c:35:8c:9f:5f:3d:05:f8:9d:d9:0c:b2:05:25:4c:fc:18:
fc:58:f7:bb:99:8e:ae:68:dc:e2:c1:17:86:bb:51:eb:c9:bc:
87:be:ad:b9:5d:1a:11:8b:52:e8:d7:fd:d0:7b:b2:ff:82:e0:
c8:02:44:47:30:06:74:a1:be:ab:8b:07:58:2f:cb:d5:a3:c5:
3a:cd:a2:57:76:5c:cc:05:18:bf:da:c4:37:77:22:c5:79:6d:
85:13:5f:7f:ca:2b:84:63:eb:50:c1:b5:b2:71:97:ae:d5:2d:
ae:c7:cb:76:bb:68:f0:12:72:33:a6:7b:c8:86:e6:d1:bd:25:
9a:75:61:41:d2:eb:d3:d3:46:24:bd:e7:e7:36:32:ff:b4:41:
f7:1d:8e:ad:16:13:04:77:16:4f:7c:b8:97:f6:bf:a7:b1:25:
55:7a:22:76:e1:0d:c7:de:de:f9:7d:4f:58:28:81:43:50:91:
2a:4e:40:c3:51:f9:d4:ad:e2:ec:73:09:07:c4:e2:c1:ab:9d:
06:1a:0f:55:db:b4:80:b5:7e:4b:c2:66:10:7a:b5:5e:37:fa:
d0:26:bd:b9:e8:a0:91:ff:ac:cf:ed:6e:47:ba:3d:1c:11:c6:
ee:7a:05:94:02:c3:16:1b:e7:bc:4e:43:c0:4f:77:80:26:95:
55:46:1f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:02 2025 by rpki-client