Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91425D22D6FD11EF99E6F7BD762E951A.roa
File: 91425D22D6FD11EF99E6F7BD762E951A.roa (raw, json)
Hash identifier: 8rFrPHg1VQAv09pGxJ6hiq8nzdg+zS9A0Lh4ygmCikI=
Subject key identifier: 70:22:60:2A:5B:26:49:BA:78:60:7B:1D:2D:FF:7C:53:68:33:67:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91425D22D6FD11EF99E6F7BD762E951A.roa
Signing time: Mon 20 Jan 2025 07:10:02 +0000
ROA not before: Mon 20 Jan 2025 07:09:59 +0000
ROA not after: Thu 20 Feb 2025 07:09:59 +0000
asID: 139880
IP address blocks: 156.254.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68551 (0x10bc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 07:09:59 2025 GMT
Not After : Feb 20 07:09:59 2025 GMT
Subject: CN=678df6ca-d295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:13:49:ed:b3:a0:67:47:15:3f:15:f8:c5:
c1:3f:df:34:63:e4:ac:8f:e8:88:9b:e5:7f:56:d6:
dd:56:f8:57:e6:a0:52:7c:80:47:01:0f:f2:4c:ff:
f4:dc:06:1b:39:2e:c7:6d:a4:7a:e5:2f:3f:95:6f:
22:71:c0:7a:9e:99:28:b4:b1:0f:29:bf:98:54:d8:
d2:1a:36:f0:91:37:3a:df:43:1d:12:80:de:f6:49:
4b:47:27:60:21:01:7a:97:85:26:27:8b:01:69:31:
76:4a:8b:2b:4f:40:f8:ba:89:92:7b:4b:b3:2e:ed:
ee:01:52:8c:70:95:65:2c:3a:65:65:35:64:00:a1:
d3:00:36:a8:03:dc:54:f3:f5:1a:93:7c:9c:8d:43:
a8:79:8d:c9:62:69:82:44:c9:e3:b2:4f:c3:d4:55:
c0:55:fe:f1:94:44:d3:99:e7:4e:f4:0e:f2:90:25:
01:fd:1a:6b:79:5a:99:d5:5c:ea:8c:b3:78:a8:eb:
ae:48:ec:c1:59:40:34:9f:23:05:52:50:b9:c6:08:
02:07:bb:0e:da:4e:66:e2:16:05:a0:6e:c3:0d:25:
40:43:c7:c7:e7:a3:5f:a0:77:12:13:f4:93:21:c0:
a5:d5:03:97:cd:d2:65:2c:03:81:66:d1:ac:39:91:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:22:60:2A:5B:26:49:BA:78:60:7B:1D:2D:FF:7C:53:68:33:67:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91425D22D6FD11EF99E6F7BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.0.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:52:8b:69:e9:18:2b:01:82:8d:2b:3c:13:31:e4:f9:75:e9:
1b:83:94:e0:95:50:a4:ff:c1:31:14:d0:a7:94:01:7d:43:d1:
a2:cc:46:32:bb:7f:1a:b4:76:c1:c6:ac:61:a1:ff:fb:12:e0:
c9:e0:7e:e5:db:9c:05:31:fb:f9:20:3e:89:f8:bc:ff:0b:cd:
f0:ce:30:d6:8c:24:f0:a9:d2:bc:1f:7d:5d:67:2f:0c:7b:f3:
1a:3d:51:0e:3b:01:66:41:86:f0:69:70:8f:ce:85:03:30:af:
b4:9b:93:f1:11:bf:dd:04:c2:85:4e:9d:7f:ef:0b:33:a1:64:
88:e4:86:7f:b3:2a:03:e1:90:b9:52:56:71:78:0a:26:86:4f:
94:4c:c9:08:77:51:30:f4:f2:c5:f1:61:ee:9a:1c:3d:1d:2e:
9c:20:8a:e0:e5:fb:aa:ae:9c:cf:a3:6b:9c:79:75:51:d3:69:
3f:2b:ea:09:9d:42:91:fc:7b:ee:23:22:42:b2:4d:5e:a1:a1:
75:ed:2c:33:89:04:5a:e2:26:51:cd:e1:ec:a3:66:9f:6b:2c:
1b:96:8d:b1:1b:d7:e3:ac:a7:b2:ed:34:53:81:76:7f:29:f2:
83:07:8b:f5:50:dc:da:18:0d:f2:f9:6e:5a:80:10:14:4d:70:
e6:a8:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:16:01 2025 by rpki-client