Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83EE4FE6D95511EFB63A22B9762E951A.roa
File: 83EE4FE6D95511EFB63A22B9762E951A.roa (raw, json)
Hash identifier: PMYGHfkiJql1Rm9+RJuaFxwH0Mxic+jFahuwAmrY3w8=
Subject key identifier: 13:E6:C7:33:91:24:78:DA:99:E3:A5:93:21:54:02:2C:CA:27:01:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E9F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83EE4FE6D95511EFB63A22B9762E951A.roa
Signing time: Thu 23 Jan 2025 06:44:38 +0000
ROA not before: Thu 23 Jan 2025 06:44:34 +0000
ROA not after: Sat 15 Mar 2025 06:44:34 +0000
asID: 138915
IP address blocks: 156.244.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69279 (0x10e9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 06:44:34 2025 GMT
Not After : Mar 15 06:44:34 2025 GMT
Subject: CN=6791e556-2675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:4d:bd:d5:54:cc:46:9d:1f:c7:3d:c3:06:
87:dc:16:a9:96:d5:49:d4:e9:a7:02:61:75:2d:90:
d2:5f:7a:18:b6:68:ad:0a:f4:69:63:11:99:7f:f7:
ef:45:18:29:0e:58:bd:58:f3:8c:bb:a5:0d:09:dc:
1a:79:31:b5:6d:dc:4b:4f:e7:d8:a0:3a:64:f9:38:
a7:7f:21:af:1f:68:b7:d2:49:d4:3a:0b:e6:e7:9e:
15:3f:fd:82:07:36:cf:9f:71:7b:32:99:ac:51:82:
3b:9d:e7:0b:2f:65:27:cd:18:39:bd:d1:fe:1e:7d:
be:19:a9:21:9f:04:de:97:ff:72:2b:35:b3:72:48:
3b:8a:83:2f:a4:a3:9f:47:9b:a7:51:82:ba:13:8a:
fd:2d:e0:37:64:3a:1a:5c:26:39:c2:e0:82:26:a3:
8a:22:18:2b:2f:5b:61:b5:f5:c7:b2:2b:31:4e:62:
ee:86:69:0e:9a:c5:de:36:91:a9:8c:3f:68:79:95:
33:01:fc:11:c8:43:92:40:ee:f4:a1:fd:b0:1f:9a:
37:17:50:69:44:a9:64:7a:17:0b:42:19:1f:cb:f7:
0b:be:24:dd:ab:0d:a7:b5:16:3a:c3:81:1a:0e:62:
6f:14:fa:22:87:d0:cf:22:1f:b4:b0:ba:e7:4a:9b:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E6:C7:33:91:24:78:DA:99:E3:A5:93:21:54:02:2C:CA:27:01:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83EE4FE6D95511EFB63A22B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:03:09:b9:03:a4:3b:36:e6:42:54:ab:d7:0e:43:50:be:6b:
12:b6:e6:f6:d8:9b:40:05:e9:48:8f:d6:4c:11:78:92:0b:b4:
07:92:0c:62:ee:a7:74:9a:f7:d9:34:da:de:4e:40:80:85:7a:
13:09:40:ed:3c:53:ee:78:14:49:62:39:fd:c1:cf:ae:62:8e:
b6:df:c5:58:cd:eb:1c:71:a8:3c:98:14:19:d2:3b:d1:14:4f:
9a:fb:ba:16:e5:51:d0:12:d2:00:63:9c:96:68:fc:12:39:8e:
c8:fc:5c:8c:a9:84:b4:e1:e2:f9:80:d6:be:8d:5e:a7:50:3c:
f9:e3:ed:48:bd:a1:aa:d0:40:93:b7:ab:1b:55:69:11:2e:14:
59:c3:a1:9e:0e:f5:9a:01:3f:ea:c7:2f:35:ab:b6:93:9b:5d:
b3:aa:f2:c9:e4:81:fc:c1:c5:57:39:c4:40:be:cf:76:db:1e:
4d:cd:50:f4:a9:17:59:36:32:39:e8:9a:42:21:78:13:12:16:
9b:8f:db:e2:0e:c6:52:79:c3:b9:8c:c1:51:5e:16:e8:e1:44:
a4:ba:be:e0:86:8b:87:02:6e:96:2a:c2:c2:8c:db:88:30:7a:
ea:6d:f7:11:38:0d:4b:12:ae:67:cc:88:46:4d:ba:79:35:ca:
5d:7a:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:15 2025 by rpki-client