Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CC739E0DCAF11EFAF8D8858762E951A.roa
File: 8CC739E0DCAF11EFAF8D8858762E951A.roa (raw, json)
Hash identifier: XBrwYljglrxHK8uaRaSkIstA9QeTA4jPghUI5zpgpxY=
Subject key identifier: D0:0A:F2:BA:18:73:94:66:F2:6D:AA:E7:28:22:C0:9E:98:DA:3E:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CC739E0DCAF11EFAF8D8858762E951A.roa
Signing time: Mon 27 Jan 2025 13:06:41 +0000
ROA not before: Mon 27 Jan 2025 13:06:37 +0000
ROA not after: Sat 08 Feb 2025 13:06:37 +0000
asID: 5065
IP address blocks: 156.235.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70907 (0x114fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 13:06:37 2025 GMT
Not After : Feb 8 13:06:37 2025 GMT
Subject: CN=679784e1-c8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:c4:86:6f:45:1e:d6:3d:18:85:a9:48:65:
69:1d:75:b3:2f:49:6f:df:5b:0b:28:34:d6:d6:1c:
df:f6:50:dc:de:dc:88:12:a8:ce:35:fa:3b:df:57:
ba:3e:34:41:66:a8:33:4a:18:05:b6:aa:7c:f6:5b:
f2:04:46:a1:fb:3c:dd:a6:f7:1d:9e:57:a9:7b:44:
1e:96:0f:4d:f9:ad:39:9f:04:27:70:3c:04:fd:bf:
50:3c:2a:02:a6:10:6b:eb:f2:ae:81:70:a9:55:9d:
9d:0e:df:3a:06:25:00:ea:a1:d5:e5:75:db:4e:2a:
cb:10:5d:ab:9d:d8:96:2b:d9:6c:10:b2:2d:d1:4c:
2d:9c:17:fc:91:b8:4b:c8:c2:44:8d:13:39:b2:d3:
c2:62:9b:9d:e8:24:b3:66:eb:47:60:b0:cc:a1:8e:
2a:23:c4:81:33:8e:e1:1d:16:81:e1:3c:f4:de:bb:
aa:60:57:22:2b:f3:b9:0e:68:94:db:a3:09:ab:db:
79:5e:61:82:a5:08:d0:73:e5:ef:4d:e0:66:d8:5d:
eb:61:75:6b:ba:95:d4:c2:3d:f4:af:e3:93:b3:34:
52:ec:2b:ab:eb:8f:a4:d4:a2:a9:e0:91:80:fb:41:
7b:90:8a:67:c0:23:b9:6c:6f:dd:b0:ab:e7:b8:78:
2e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0A:F2:BA:18:73:94:66:F2:6D:AA:E7:28:22:C0:9E:98:DA:3E:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CC739E0DCAF11EFAF8D8858762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.51.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c2:57:cd:01:ed:03:8f:c7:34:3c:87:97:6d:15:2f:70:fa:
ae:e2:26:7f:51:f9:79:55:29:b4:7c:aa:e6:c1:3b:e4:0a:3b:
c1:b2:56:ac:62:50:89:b3:b7:00:6b:aa:6c:fc:cf:ed:f2:ab:
3e:7c:e2:02:f0:8e:5c:2e:2b:ca:0b:b9:76:3d:78:26:35:0f:
e3:7b:2b:14:b5:87:77:26:40:72:2b:ac:89:6f:72:80:df:5d:
f6:7a:c9:43:08:44:0e:37:a9:ed:5a:40:46:c7:b5:c1:1e:76:
f6:9c:66:ea:09:07:4b:ac:24:91:3d:64:d5:b0:0b:62:26:60:
83:d5:2a:f6:2a:67:61:f1:0c:57:4c:87:ff:3b:35:d8:10:dc:
92:d7:11:45:65:32:8b:ee:3e:9f:81:8e:48:1e:23:2f:49:97:
0f:db:72:32:70:09:c7:ab:f3:22:f7:0c:92:99:46:80:0a:3b:
7e:61:d0:bf:b2:da:5a:ab:46:48:75:6d:ae:60:47:d3:fb:12:
d7:87:89:8d:ca:cc:f8:6b:a6:53:86:53:c6:78:03:c2:62:b2:
44:fe:29:6c:fe:f7:10:80:89:a0:88:71:d9:45:ed:3c:31:13:
73:0c:d6:4d:41:62:dc:43:14:f8:46:f2:8f:1f:60:fd:6b:32:
73:0a:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:03:16 2025 by rpki-client