Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90D0BA16DC8C11EF8B1E216E762E951A.roa
File: 90D0BA16DC8C11EF8B1E216E762E951A.roa (raw, json)
Hash identifier: mMW6mj55EvUccYcZzFIYFrMDcYCkt2jjfxQqEpiDPvQ=
Subject key identifier: 01:25:3E:25:75:81:DA:FB:15:B3:8D:E3:6D:9F:B3:BA:78:86:B4:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90D0BA16DC8C11EF8B1E216E762E951A.roa
Signing time: Mon 27 Jan 2025 08:56:15 +0000
ROA not before: Mon 27 Jan 2025 08:56:12 +0000
ROA not after: Sat 08 Feb 2025 08:56:12 +0000
asID: 5065
IP address blocks: 156.239.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70849 (0x114c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 08:56:12 2025 GMT
Not After : Feb 8 08:56:12 2025 GMT
Subject: CN=67974a2f-e6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:b1:39:66:73:1b:67:4e:69:e7:dc:87:16:
0b:a5:71:8f:99:84:1c:73:cb:de:27:00:63:ac:98:
8d:f8:15:b3:22:a9:e5:85:82:e8:1e:96:2a:09:76:
7e:8c:13:98:44:61:c3:a0:87:ce:37:df:65:38:6e:
1b:ce:5d:70:5f:d3:7b:e4:44:7a:41:be:c2:c1:f5:
52:5e:f4:7b:76:8d:16:b3:e1:ef:75:e1:09:bf:fe:
e7:bb:49:4d:99:ae:30:5a:22:ae:75:ee:15:c7:5b:
34:bd:a7:ca:72:42:02:d7:91:87:a4:c6:4c:8e:a9:
96:3e:76:e4:52:84:3a:52:7d:b5:66:d8:47:01:c6:
03:5f:51:65:3a:69:f6:20:02:69:3f:ff:9d:23:2e:
01:48:06:ab:08:0f:78:0f:67:df:78:26:44:70:34:
8b:33:6f:c3:f5:43:72:5f:77:ff:f6:b9:91:dc:fb:
55:b8:fa:34:fc:07:51:0f:94:8e:14:03:76:50:b0:
e3:3e:0d:6e:05:24:8b:d8:ed:4f:62:fd:6b:60:19:
0c:3f:5a:fe:6c:62:43:60:6f:f9:5e:1f:ef:41:69:
22:00:fc:42:02:f2:13:80:cf:2d:36:f3:7a:45:36:
10:2e:01:b8:8f:95:59:67:70:41:f6:c8:29:11:ce:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:3E:25:75:81:DA:FB:15:B3:8D:E3:6D:9F:B3:BA:78:86:B4:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90D0BA16DC8C11EF8B1E216E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.138.0/24
Signature Algorithm: sha256WithRSAEncryption
70:83:e0:cc:fc:6e:48:11:22:c7:f1:26:4e:7b:9f:7c:f8:c8:
4d:3b:3f:76:44:52:4d:e5:b4:a1:fb:28:f1:29:e8:14:6d:19:
29:ab:98:f4:0c:c5:1e:92:8e:49:12:a8:c2:b2:67:6d:1e:d5:
c7:92:a4:fc:53:fd:a2:3c:b4:62:9d:b9:8c:26:7b:54:02:7b:
67:3e:04:71:b7:af:59:93:aa:27:9b:9b:be:46:3a:07:ff:68:
5c:1b:1c:37:d8:a7:d9:15:89:dd:8a:50:5b:67:85:d7:53:13:
83:a3:a4:2d:52:ad:f2:d0:75:e0:32:93:13:f3:00:4e:cf:de:
bc:3c:f8:51:03:5a:2e:4a:06:47:50:7a:60:b7:c5:f0:67:25:
4b:d2:3b:b8:9c:69:1a:54:8b:a9:8a:98:09:66:fa:ef:a4:e1:
3e:0f:a5:48:22:84:79:2b:47:00:25:20:ab:b0:e7:d8:a0:fd:
53:41:b3:51:25:42:9b:92:26:ec:fc:6b:63:6a:d5:08:68:4e:
29:52:e3:c8:2a:a7:24:a2:ee:66:e7:81:b0:77:4d:06:e1:6b:
f0:bb:81:88:60:48:74:7d:2b:9a:c1:16:94:0b:4a:57:dd:20:
df:e1:2c:68:99:30:f4:ec:27:ec:9a:eb:8c:74:28:76:94:08:
e6:be:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:52 2025 by rpki-client