Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C962ED8D97411EFAAFD708A762E951A.roa
File: 8C962ED8D97411EFAAFD708A762E951A.roa (raw, json)
Hash identifier: r7eYkB44VM2ggizJWAsRnTps4L3hz11MTDWkmVApz/c=
Subject key identifier: C8:9B:6F:42:A6:D9:39:CE:2C:D7:30:5C:12:2E:C0:6D:1C:AC:ED:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C962ED8D97411EFAAFD708A762E951A.roa
Signing time: Thu 23 Jan 2025 10:26:47 +0000
ROA not before: Thu 23 Jan 2025 10:26:43 +0000
ROA not after: Sat 15 Mar 2025 10:26:43 +0000
asID: 138915
IP address blocks: 156.224.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69396 (0x10f14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 10:26:43 2025 GMT
Not After : Mar 15 10:26:43 2025 GMT
Subject: CN=67921967-f6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:c2:b5:7a:70:20:fb:ba:50:c3:32:fa:42:
1d:bc:d4:ff:57:a0:5e:ca:d8:d9:d2:88:8c:e9:c0:
36:69:9e:92:f9:61:f7:80:99:c5:f3:9a:f4:50:cd:
27:ac:fd:fc:85:ac:0b:cf:4d:f7:a4:74:59:ab:45:
68:6f:90:be:da:dd:1b:c6:fd:a1:fe:a6:e3:17:d7:
24:c4:cc:bf:c8:be:25:e5:4e:7d:c4:c1:87:5b:d7:
d0:c4:e5:90:f7:89:05:fe:20:0a:61:5c:88:e7:27:
5a:c0:31:46:74:07:6d:0d:16:ee:b8:de:e7:38:9b:
27:fd:c0:96:58:bd:cd:1b:47:1d:98:ac:94:da:1a:
1d:98:1f:aa:06:51:e1:cf:67:20:2d:fc:1e:65:42:
4e:53:f4:06:fe:a8:3a:b0:db:ad:09:48:87:9f:31:
6a:ee:69:7f:98:f3:2d:cb:5e:36:71:1d:a6:cb:54:
10:00:8d:9e:fb:05:8f:82:18:21:db:05:14:78:96:
9a:46:18:07:81:b4:ea:7e:83:64:78:79:18:a6:6b:
55:cd:ef:ed:e2:cc:5f:8f:1d:45:82:da:99:29:b7:
eb:80:ac:87:c8:af:77:8f:8c:ee:f9:a3:90:c6:9a:
48:4a:df:c4:4e:37:6d:72:53:89:39:78:1e:bf:db:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:6F:42:A6:D9:39:CE:2C:D7:30:5C:12:2E:C0:6D:1C:AC:ED:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C962ED8D97411EFAAFD708A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.1.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b5:5a:8e:a6:75:8c:e8:e0:67:64:1e:f5:de:d9:d8:1d:6f:
b7:1b:6f:79:8d:14:2b:4d:9d:d2:8d:72:68:90:63:27:68:97:
f3:c9:83:56:f7:86:fa:28:02:ad:26:68:72:58:e7:71:27:cf:
8e:91:84:cf:f0:27:fa:8a:e0:de:02:b5:5b:91:b4:1f:15:48:
fe:79:4d:aa:67:a3:20:cd:dc:aa:25:d0:e3:43:32:0e:91:7e:
9e:1d:6e:63:46:00:0d:0f:83:29:97:40:75:3c:b2:ff:be:ac:
b2:f6:4f:bf:74:82:1c:75:56:e6:04:97:6c:08:40:52:dd:7e:
c6:d7:f1:d5:cf:ee:9e:23:dc:14:66:a4:2e:30:55:c1:95:1a:
d6:33:8b:f2:66:11:9b:66:ad:62:9c:be:7b:75:f9:92:c8:88:
21:11:85:54:e7:4f:8b:39:b3:87:10:eb:e9:ee:a8:d3:38:4f:
70:f6:ee:f6:c9:b0:e3:f3:d1:00:84:28:3b:d9:a8:92:67:a7:
e0:aa:24:42:1d:4e:22:a6:87:89:06:04:52:ef:a8:a9:9e:69:
11:b6:17:d2:ed:11:4b:56:43:15:d5:22:d2:a5:77:21:2d:4f:
23:46:35:c6:f8:b8:bd:ea:fb:b8:bf:3c:7c:09:29:b3:8d:0b:
e7:58:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:02 2025 by rpki-client