Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BFD193CDBD611EF90C68DA3762E951A.roa
File: 8BFD193CDBD611EF90C68DA3762E951A.roa (raw, json)
Hash identifier: 4EwTCP/fR9TNJAMiwaBfSHyCpakPYpkhw2YVkjqDqBY=
Subject key identifier: 14:02:B2:F7:53:FB:D6:83:B2:84:C1:7A:E4:26:DF:27:99:C6:C6:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011340
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BFD193CDBD611EF90C68DA3762E951A.roa
Signing time: Sun 26 Jan 2025 11:13:21 +0000
ROA not before: Sun 26 Jan 2025 11:13:11 +0000
ROA not after: Tue 04 Mar 2025 11:13:11 +0000
asID: 203020
IP address blocks: 156.253.204.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70464 (0x11340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 11:13:11 2025 GMT
Not After : Mar 4 11:13:11 2025 GMT
Subject: CN=679618d1-78f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:df:08:41:36:29:3d:76:9d:9c:fa:de:74:
7e:96:14:9a:91:64:59:1f:9b:54:16:dc:55:fc:b2:
b7:5e:85:5c:80:7e:9a:6e:3a:5b:0b:36:5b:34:13:
45:22:d3:4d:94:af:23:33:18:6e:7b:a6:32:1a:72:
b7:0b:b2:f2:26:00:51:f1:71:17:8f:86:3d:b6:85:
71:c9:dc:2e:1f:94:05:e2:99:b7:54:94:fa:b4:6a:
d7:1c:84:2f:ca:bd:03:e8:5c:26:68:51:16:e4:3d:
1e:d1:35:6f:29:5a:2d:2b:59:d5:ab:71:52:b5:0a:
3c:5d:59:81:c4:b4:ea:4e:2d:c6:8d:07:8d:f6:3c:
95:9b:42:62:53:7f:04:3c:97:8a:cb:f0:06:db:3e:
5f:f4:88:b4:bf:8c:c2:a0:a6:1d:95:91:97:16:7d:
90:9b:84:b7:f9:ca:99:5e:72:3e:e6:1e:ec:c7:c5:
64:e6:8b:85:33:e5:42:92:31:ea:5f:17:df:14:b1:
b2:a9:3f:13:2d:0b:a1:58:57:7e:d9:95:2f:c2:a7:
7a:e2:cf:c0:63:50:f6:56:9a:02:95:c3:e0:f3:77:
ea:4d:fe:4c:c6:ae:6b:11:27:c7:86:34:ec:ab:4a:
2d:8f:b0:b6:24:c4:d1:1d:a7:de:49:be:3e:df:55:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:02:B2:F7:53:FB:D6:83:B2:84:C1:7A:E4:26:DF:27:99:C6:C6:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BFD193CDBD611EF90C68DA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.204.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:c7:cb:e0:54:df:62:4c:c6:78:8f:a4:6d:56:99:0a:1d:e9:
98:ca:40:c8:86:e7:c4:b1:3e:33:1a:89:e4:4d:4c:7f:09:25:
88:2e:94:64:24:fb:2e:ea:73:e4:f5:0d:5b:d0:d1:d4:fb:ae:
07:cc:c9:a8:c5:b2:cd:42:8c:21:14:b2:dd:dc:bc:26:af:a9:
6d:95:c5:77:3b:33:02:4c:5d:fe:19:29:df:54:04:89:de:13:
1c:fe:94:4b:c2:b6:b3:8d:10:b1:60:4f:cc:25:c3:69:59:96:
21:8a:1e:22:93:1d:42:13:d4:60:e5:40:7c:48:be:29:94:86:
a6:5d:1f:60:a5:4a:a0:b8:3e:5e:04:11:7e:fa:f6:5d:be:82:
e9:36:1e:4b:13:40:ea:bb:fd:b9:b0:d1:7b:e9:fb:83:aa:c2:
c5:eb:19:38:a8:8d:1b:90:65:ee:f1:44:3b:aa:60:6c:1a:18:
99:68:7b:65:e2:8e:50:b5:29:a0:f3:ba:1e:31:b9:84:90:0e:
ea:ba:0a:91:8f:53:b7:1d:7d:c4:47:c4:05:0b:ef:dd:f6:bd:
32:68:fa:b4:37:64:cf:9f:84:ce:91:24:7a:6d:9c:34:92:ef:
39:8f:45:0e:33:9f:a9:a8:fa:13:1c:22:a1:2b:c6:b3:ce:7b:
4c:e9:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:43 2025 by rpki-client