Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9269A6DAD8DB11EFBB2E7281762E951A.roa
File: 9269A6DAD8DB11EFBB2E7281762E951A.roa (raw, json)
Hash identifier: d1cbRHgAmVGRUFrxaUOBsV6159J5JW9DTmmSjrc1/lk=
Subject key identifier: 92:10:3A:8B:25:E6:E6:3C:CC:49:7C:4F:B3:2F:1F:C8:74:5F:DC:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E78
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9269A6DAD8DB11EFBB2E7281762E951A.roa
Signing time: Wed 22 Jan 2025 16:11:44 +0000
ROA not before: Wed 22 Jan 2025 16:11:40 +0000
ROA not after: Sat 15 Mar 2025 16:11:40 +0000
asID: 138915
IP address blocks: 156.244.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69240 (0x10e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 22 16:11:40 2025 GMT
Not After : Mar 15 16:11:40 2025 GMT
Subject: CN=679118c0-d19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:b5:29:64:e3:39:73:cc:f1:d6:02:8b:67:
7f:2b:6c:5a:aa:7a:62:0b:bc:ba:c8:39:09:d9:b7:
d5:e5:9a:3b:b8:e6:6e:35:b4:7a:01:91:5b:08:d5:
61:86:5f:50:17:5e:76:a8:9b:bb:d9:e6:ce:a2:af:
d9:51:46:dc:69:ef:d9:57:bf:dc:a4:b2:a0:60:d5:
d5:b6:3c:5b:d1:ab:cd:8f:9f:d9:00:99:64:ba:84:
02:6e:f5:0c:0d:5b:9c:09:78:f7:29:56:e8:ae:0f:
a0:7d:8e:09:4f:04:9e:6c:3a:cd:ca:69:25:f3:b4:
f6:b8:14:cb:91:de:f8:19:60:05:23:49:b8:54:79:
86:43:19:49:76:57:eb:55:8d:7f:ef:d1:9b:04:2c:
29:6c:3f:91:13:13:10:30:cf:a9:fd:c5:c8:16:a3:
94:99:c0:b8:6a:57:fd:dc:47:7e:ba:32:75:2d:d7:
d2:b8:a6:c9:dd:1d:7d:5a:56:23:78:7e:37:9f:a3:
ba:be:1a:66:3c:a3:b7:03:39:85:c4:58:90:49:c6:
5a:78:c7:2c:95:b7:64:7a:2f:4a:ee:d9:1c:63:ba:
92:6e:f9:39:05:b5:fd:cd:85:ac:3f:a9:29:12:3b:
01:b7:e3:7e:18:03:19:8c:e9:1d:9a:45:a6:b3:1e:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:10:3A:8B:25:E6:E6:3C:CC:49:7C:4F:B3:2F:1F:C8:74:5F:DC:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9269A6DAD8DB11EFBB2E7281762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.50.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ba:b9:ff:64:43:b6:0b:cd:53:81:ce:ef:97:a4:d2:61:73:
c6:9f:02:23:96:13:c0:91:2a:95:26:26:84:a3:93:de:58:2e:
be:20:a6:ed:84:27:e9:04:36:77:fa:cf:9f:ed:03:af:14:89:
93:03:84:39:99:76:9e:4e:33:88:37:a3:e5:fe:7e:12:b6:81:
c6:a9:2a:41:12:4f:6b:23:d9:59:c6:4b:65:e3:ff:03:df:7b:
14:c3:da:c8:c4:d8:76:5b:c7:90:b2:f1:37:b7:64:23:96:38:
57:b2:23:d2:5a:59:5f:b7:3d:67:45:02:c9:22:52:03:af:eb:
9b:50:46:29:00:4d:c4:03:3d:51:fe:51:6e:ef:67:68:45:07:
44:e9:0b:6d:c8:59:7a:b2:31:f3:2c:40:99:04:a9:2c:41:ab:
d7:3f:ef:aa:ef:bd:56:28:ae:09:40:52:15:df:b4:b2:f2:5e:
5d:74:05:83:55:b8:b0:83:ce:33:01:5f:7e:bf:a0:d8:9e:aa:
91:a4:47:bf:c2:76:1d:95:ba:09:de:c2:1d:9e:24:e3:00:91:
0e:b4:81:01:86:9d:b9:64:e5:5d:81:fd:d8:35:a1:5f:83:76:
86:1c:95:32:53:bf:25:69:d3:96:02:24:98:55:d1:70:2f:2f:
5e:d7:e7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:48:26 2025 by rpki-client