Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89014904DFF711EFA59DA777762E951A.roa
File: 89014904DFF711EFA59DA777762E951A.roa (raw, json)
Hash identifier: 1zFby5HCjXds7p9mvhWPGNfuD9F8JWip4Xo5JQi19w8=
Subject key identifier: 7A:CE:23:90:95:2F:4D:28:6F:CA:11:2A:48:6D:E8:BD:BC:3D:29:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89014904DFF711EFA59DA777762E951A.roa
Signing time: Fri 31 Jan 2025 17:19:32 +0000
ROA not before: Fri 31 Jan 2025 17:19:28 +0000
ROA not after: Tue 11 Feb 2025 17:19:28 +0000
asID: 131471
IP address blocks: 156.238.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71351 (0x116b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 17:19:28 2025 GMT
Not After : Feb 11 17:19:28 2025 GMT
Subject: CN=679d0624-31c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:95:03:09:cd:53:fe:0e:48:46:a9:5b:9f:
2a:b1:93:36:2c:68:da:93:d2:4c:09:74:50:a3:ca:
d7:56:93:37:d7:14:45:07:76:f1:43:3e:18:d8:3f:
35:7f:18:74:db:6f:18:5b:2d:b2:22:f8:8a:11:06:
3e:14:c4:45:da:f7:9b:bd:be:74:6a:21:70:cd:c0:
5a:14:fa:91:d0:23:6a:eb:ee:2f:09:40:12:ba:04:
ab:59:f6:bf:64:d1:e7:8e:a6:cd:c4:9e:df:ca:7c:
32:61:da:e7:8f:c8:0b:31:11:17:99:0d:cb:03:a1:
0c:34:69:fa:9b:cc:42:f9:1f:76:c2:7d:34:d2:ba:
17:b6:a8:fe:01:2a:17:9b:ab:e8:0e:fd:e6:fa:f5:
0c:af:bc:98:16:78:bf:b5:48:47:01:75:ec:a3:d3:
33:f2:2a:ae:3a:20:d4:99:30:83:b3:bf:34:bb:5e:
66:26:24:fc:90:8a:5b:46:48:1b:ff:d2:53:2b:3c:
14:33:25:b2:1a:65:f6:70:6f:58:bb:7d:4a:cd:2d:
2c:f3:7a:01:94:7f:31:d3:b1:a6:68:23:9d:96:7f:
00:fa:07:e3:13:4c:17:1f:ed:fe:fb:2f:d8:e7:0c:
f1:ed:d0:0a:22:27:e8:7f:81:c1:b3:a0:9b:d8:fc:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CE:23:90:95:2F:4D:28:6F:CA:11:2A:48:6D:E8:BD:BC:3D:29:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89014904DFF711EFA59DA777762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.70.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e6:1b:5b:32:f9:d9:9e:0d:39:bd:28:b6:bc:53:6c:63:06:
de:f0:6d:5d:43:1c:4d:db:fc:8c:47:44:f0:06:18:f6:88:33:
40:7f:65:b2:e3:16:2b:47:98:c5:f4:40:d8:8e:55:ca:0a:05:
ae:5b:40:63:2a:f6:7f:a2:90:65:71:4e:f6:8c:28:b8:80:df:
e5:a2:d4:94:82:8b:e2:54:79:c5:48:a9:cb:2c:19:1f:a9:6d:
51:16:4e:5d:61:77:ef:1d:2e:31:0c:5e:dd:18:27:91:48:eb:
f9:5a:ce:fa:9d:c3:8e:7e:f1:f5:69:a1:35:31:8a:61:93:40:
47:96:e7:aa:3d:20:92:4b:bd:94:ae:00:a1:56:08:e1:6d:3a:
a3:12:84:54:2c:95:c4:bb:1b:19:5f:91:19:c6:69:db:58:2a:
07:c8:e7:b8:98:7d:bc:40:8c:b5:83:8c:97:5a:9b:42:8c:3d:
ed:e5:d4:eb:8b:9b:eb:08:94:eb:57:8a:98:b5:81:56:c1:1d:
fb:2d:f4:96:53:74:03:77:b1:1c:72:ea:2e:62:e4:ed:fc:6f:
2c:19:9c:40:94:05:12:6f:fc:df:a8:e1:05:f9:45:2d:98:62:
b2:7d:16:02:e1:6c:28:c1:26:9e:35:78:2e:28:af:9d:6a:52:
52:5f:f5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:05 2025 by rpki-client