Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89E71004D96411EFA14B0E9E762E951A.roa
File: 89E71004D96411EFA14B0E9E762E951A.roa (raw, json)
Hash identifier: GKSukZ9DPVdN6GpdBBxu/BEYmD4z3/f6dDD/Q8KjeWk=
Subject key identifier: F9:12:99:88:7E:86:1D:5D:57:ED:BC:B7:99:9B:D5:01:5F:9E:BD:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010ED7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89E71004D96411EFA14B0E9E762E951A.roa
Signing time: Thu 23 Jan 2025 08:32:11 +0000
ROA not before: Thu 23 Jan 2025 08:32:07 +0000
ROA not after: Wed 26 Feb 2025 08:32:07 +0000
asID: 59187
IP address blocks: 156.238.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69335 (0x10ed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 08:32:07 2025 GMT
Not After : Feb 26 08:32:07 2025 GMT
Subject: CN=6791fe8a-cfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:f9:3c:61:56:14:86:19:c3:47:14:f3:97:
39:de:0b:06:20:50:d5:5c:ac:73:77:7b:24:6b:04:
07:af:d2:2a:f5:d7:6d:50:78:f1:4c:69:57:68:26:
d4:e0:b0:60:46:ff:59:30:2b:23:32:67:7b:6c:d1:
9f:93:83:a7:11:39:8a:94:95:12:82:30:83:2a:7b:
31:2b:6b:fe:fb:b5:00:df:f9:84:fb:66:d2:47:73:
64:43:08:ad:fb:9f:5c:88:97:18:ec:72:9b:d0:20:
04:11:19:47:72:29:2a:47:ec:d2:f5:bf:dc:3c:7f:
e6:1e:34:96:9e:8b:f1:35:7c:f0:71:7c:8d:e9:9d:
41:e9:6b:74:0b:67:49:49:da:94:32:35:da:ca:c3:
96:07:e9:cf:0e:8c:b9:60:8c:8b:d2:e3:10:3a:b8:
d4:45:bb:e7:ca:3d:df:bd:19:ee:b7:b6:98:b8:8c:
16:43:db:a4:73:4f:39:88:03:09:bc:1d:31:53:c3:
1d:39:11:9c:45:61:2c:b6:ab:35:66:f8:92:99:90:
e3:84:c7:97:56:28:d8:a6:79:d4:05:b3:36:bc:d2:
5a:21:4c:b4:be:10:f8:67:17:54:0a:06:0e:1a:d1:
9d:32:12:fb:91:99:8d:93:3b:51:66:fb:c1:ee:ea:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:12:99:88:7E:86:1D:5D:57:ED:BC:B7:99:9B:D5:01:5F:9E:BD:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89E71004D96411EFA14B0E9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.100.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:93:de:e5:d5:22:6a:34:25:13:1f:8a:f8:d3:55:fd:a7:32:
35:3f:69:1b:cf:9e:d2:08:a9:28:c1:13:f4:d6:a3:d9:94:48:
22:4a:5b:6b:bf:ae:7c:29:92:5c:33:82:29:92:e5:67:34:63:
c7:7f:99:b8:fb:f6:c1:a6:28:69:79:8b:32:ac:34:f7:80:a7:
ef:87:f9:86:a5:5a:87:1c:1c:83:37:5c:5c:b9:6a:ee:15:26:
d7:e6:aa:fe:1b:fa:cc:83:29:7f:42:c4:c0:bd:ae:79:82:a3:
c3:e8:2a:e6:b6:89:71:7d:03:8a:e9:81:86:89:7a:34:d4:0a:
f4:36:bf:1a:71:f8:8e:c1:b8:2f:24:2a:b1:52:e0:58:e1:c9:
14:3b:ca:cc:64:cc:ef:a7:cd:7a:c5:90:b6:e0:93:de:5a:e3:
7d:e1:10:cf:32:ce:cd:52:49:23:20:3e:f4:88:7c:99:9b:89:
54:f5:90:9e:1c:3c:4c:8c:21:de:66:36:8f:9b:12:7c:8d:12:
33:13:25:12:4d:9d:96:ac:98:9c:d6:3d:51:94:a5:c6:50:b2:
f6:d8:44:f6:f8:e2:95:0e:d8:c1:a0:80:c5:d0:fc:fc:e1:a5:
e3:9e:fa:36:11:17:de:10:52:2e:13:84:ed:54:57:94:de:7f:
c2:e1:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:32 2025 by rpki-client