Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9294A304DA7411EFA643F34A762E951A.roa
File: 9294A304DA7411EFA643F34A762E951A.roa (raw, json)
Hash identifier: 6198xF9gKnWgIWU0jzHpGOu8eJz626U0TzJC3EGDEKA=
Subject key identifier: EB:DC:A2:58:40:E0:10:2A:B8:4D:83:10:23:A5:B4:E0:C2:3D:FD:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9294A304DA7411EFA643F34A762E951A.roa
Signing time: Fri 24 Jan 2025 16:59:28 +0000
ROA not before: Fri 24 Jan 2025 16:59:24 +0000
ROA not after: Tue 04 Mar 2025 16:59:24 +0000
asID: 137899
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69566 (0x10fbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 16:59:24 2025 GMT
Not After : Mar 4 16:59:24 2025 GMT
Subject: CN=6793c6f0-82ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:78:12:95:5d:00:51:38:fa:4e:8c:e2:55:
61:aa:9d:26:ae:27:8a:a9:75:8f:5f:5e:f7:b3:f0:
c3:f3:b6:97:6f:c5:08:c4:28:15:9e:66:68:a0:5a:
d7:3f:c7:dc:54:c7:0c:72:10:a7:4d:06:32:15:a9:
5c:4d:39:02:a2:55:14:dd:7b:28:fb:0c:f2:09:9d:
7d:39:31:f3:9a:b8:12:1f:9e:dd:7a:52:28:49:36:
64:ff:d4:67:75:8f:c7:e2:2a:9a:46:24:40:45:1e:
3d:89:e8:bc:4b:c0:1b:c2:c6:35:92:84:20:e9:7f:
f6:a2:da:b6:1a:53:a3:35:d7:48:b4:e2:57:39:2a:
e4:3f:a2:0f:d4:b8:e4:f5:73:34:1e:17:e2:5e:d8:
c2:b7:55:85:b4:79:e9:f6:9b:7b:04:60:e9:76:09:
73:cc:15:21:c2:ff:a8:6e:2e:b7:e4:c1:a0:bc:30:
0f:89:fe:e2:bb:8d:fa:78:21:ce:17:bc:a6:aa:31:
28:b5:7d:9e:91:1c:6c:0c:29:72:a3:d2:b7:00:97:
b1:c3:5d:72:c9:b1:85:e3:c1:b4:34:74:a9:d4:6a:
31:41:2e:11:df:7f:1e:88:e0:54:a7:5a:f7:fb:db:
bf:ce:7b:31:35:c5:26:bb:dc:3c:21:f2:98:e4:c5:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DC:A2:58:40:E0:10:2A:B8:4D:83:10:23:A5:B4:E0:C2:3D:FD:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9294A304DA7411EFA643F34A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:ac:b6:86:8c:e2:b4:e9:92:56:8a:04:df:42:28:9d:0b:a9:
eb:b7:6d:4f:06:18:dc:c6:a1:43:bf:24:13:4f:bc:a2:e6:56:
0d:73:7e:0b:72:54:11:ef:35:75:06:86:ef:74:71:e5:1e:9a:
15:6e:e3:70:62:ad:56:6d:70:80:e2:78:45:6b:bb:db:97:d2:
fc:bd:fc:66:d7:35:0f:4a:2f:52:87:c6:e2:91:1f:8d:42:fd:
96:5d:43:e3:da:ce:af:64:05:f9:43:53:1c:58:76:31:6e:47:
6d:af:89:2d:9a:dc:23:7f:5f:e4:2b:e1:24:6d:b5:c7:f5:33:
8d:e5:2c:59:c1:f9:63:5c:d3:e1:60:46:62:8d:9c:d6:1f:d7:
1e:1f:ec:b0:88:9d:3c:fe:57:d2:1b:1e:2a:ab:a7:f3:a3:f3:
ec:60:08:a6:5c:24:5a:1a:29:ba:48:24:ea:d8:5c:a9:30:a7:
11:99:67:0a:eb:cd:ad:3f:7c:6d:2b:e7:98:99:1d:ee:42:ff:
91:d0:98:94:ac:c5:81:f4:ee:cc:79:16:f4:8f:5b:c7:14:40:
79:6e:ba:51:56:ae:2c:c5:39:f7:3c:03:23:24:cb:00:47:d8:
b1:7f:e0:35:1d:10:62:f6:69:7b:4d:12:39:d1:3b:2b:92:a2:
97:99:5c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:14:59 2025 by rpki-client