Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86CC43C6D2E811EF812C04AD762E951A.roa
File: 86CC43C6D2E811EF812C04AD762E951A.roa (raw, json)
Hash identifier: ciuZ48lepsFdY02d4+j+i4WYYKrezlIX92KeFo1srBU=
Subject key identifier: 1C:5E:59:D6:AE:2D:18:56:A2:2A:93:89:2B:42:05:A3:68:FE:C4:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010745
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86CC43C6D2E811EF812C04AD762E951A.roa
Signing time: Wed 15 Jan 2025 02:29:21 +0000
ROA not before: Wed 15 Jan 2025 02:29:17 +0000
ROA not after: Sat 03 Jan 2026 02:29:17 +0000
asID: 984
IP address blocks: 156.226.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67397 (0x10745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 15 02:29:17 2025 GMT
Not After : Jan 3 02:29:17 2026 GMT
Subject: CN=67871d81-f08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:40:76:cd:38:d8:ce:24:de:43:b8:e8:3b:
6b:ef:92:0e:53:e7:d8:57:b4:5d:13:54:62:7f:5b:
99:54:e7:aa:c3:d7:91:70:4c:5f:fe:dc:09:ef:3e:
1f:fe:54:03:cc:40:05:33:05:70:9d:2c:09:d1:b3:
f0:78:62:5c:64:08:30:b6:9b:a4:ee:f8:41:b7:20:
43:7e:73:2f:2d:86:38:15:41:19:b6:2b:5e:26:dd:
2b:14:be:7e:42:66:49:20:af:1a:da:d5:71:01:a3:
d4:f0:b4:4a:fd:20:0c:43:87:4e:f4:45:45:da:37:
07:ff:28:5d:d9:bb:d5:1f:24:a4:4f:f5:ca:68:aa:
a1:15:14:1d:4e:79:cd:b2:9b:6d:7b:79:e4:fa:06:
29:68:d6:96:14:d1:ad:56:ff:e6:cc:f3:a0:0f:45:
c3:b8:75:f4:7a:52:b4:5c:db:a9:15:32:f8:a6:55:
93:2d:ab:72:2a:40:2a:e5:7e:e1:b2:ab:44:c0:17:
54:ec:67:a8:a4:d8:9a:b8:62:f1:5e:ae:0f:f0:4d:
93:81:6b:99:44:cb:93:8e:4a:0f:f1:9c:3f:3b:e5:
ad:2d:04:19:97:c0:7c:ff:b8:69:c5:f6:af:6c:9d:
79:38:74:dc:ad:fa:73:14:49:6e:b0:42:61:06:23:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5E:59:D6:AE:2D:18:56:A2:2A:93:89:2B:42:05:A3:68:FE:C4:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86CC43C6D2E811EF812C04AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.152.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4d:22:7f:a4:c5:3d:b7:a2:d6:29:a4:63:f6:bb:54:d2:b2:
ea:f4:14:fc:9f:f4:33:1f:97:c0:45:56:ee:ba:24:45:bd:f2:
47:3a:eb:6a:78:6d:56:02:94:1c:21:8a:40:e1:c8:f9:ac:c8:
67:ac:d8:83:02:07:50:1f:80:91:97:a2:33:ae:ec:f6:f3:af:
83:2c:09:e4:fe:f2:43:9c:ef:08:6f:9f:93:00:8d:3a:d7:9d:
21:b2:49:c6:82:c3:15:7e:6e:be:71:2a:89:06:17:f9:c7:e2:
12:79:9c:e0:38:01:e8:3f:8c:96:4f:9f:34:24:ea:38:57:fa:
df:25:7a:a9:aa:24:3c:a1:d1:ca:0d:d3:c6:dd:91:28:a9:89:
fe:56:14:66:ff:a3:3d:ad:b2:8e:f7:c9:97:d5:27:2a:dc:16:
d9:77:21:b9:c1:e1:44:cc:9d:05:9c:32:b5:56:25:19:3e:60:
19:34:a8:23:00:c2:32:d4:6f:4b:d5:07:e9:1c:fd:ae:ae:7d:
44:04:6c:7b:57:89:80:d7:54:3c:6c:cd:25:75:55:46:59:d1:
03:b5:99:6c:66:c0:35:49:50:63:8c:9c:41:cc:0a:3b:a6:6b:
fb:b6:4f:59:9e:6f:0f:c7:8b:5d:5e:8d:e8:a6:0e:d1:8e:97:
15:fd:ff:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:46:25 2025 by rpki-client