Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9344F4DEDBE111EFAE550B6E762E951A.roa
File: 9344F4DEDBE111EFAE550B6E762E951A.roa (raw, json)
Hash identifier: s993rlHxpk1Pd/67a+Zs+oVvUkrX+xts98ecDxNVwQk=
Subject key identifier: BE:85:71:56:03:0E:33:9F:CA:32:E9:64:F1:E6:B9:5E:63:E1:CF:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01138E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9344F4DEDBE111EFAE550B6E762E951A.roa
Signing time: Sun 26 Jan 2025 12:32:16 +0000
ROA not before: Sun 26 Jan 2025 12:32:11 +0000
ROA not after: Tue 04 Mar 2025 12:32:11 +0000
asID: 203020
IP address blocks: 156.253.198.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70542 (0x1138e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:32:11 2025 GMT
Not After : Mar 4 12:32:11 2025 GMT
Subject: CN=67962b50-1507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:da:9e:a2:5b:2c:a4:b0:69:f5:c7:09:fd:
1f:db:5e:c5:81:08:92:22:d7:cd:db:f1:84:23:fd:
f8:c1:f5:67:fc:11:00:57:26:02:8d:c8:56:c5:a9:
7d:fc:b4:2e:20:aa:a0:53:4d:c5:11:dd:20:f6:1b:
e1:4f:62:f9:47:d6:4d:5e:21:22:2a:d4:ac:1e:a4:
04:4a:e2:6e:dd:69:56:ac:e9:18:60:6f:a8:28:09:
a5:b8:d8:4b:6d:c3:54:58:63:9d:09:d3:96:6e:39:
27:22:17:f6:12:44:fa:d9:1c:9c:f6:7f:96:30:3d:
51:5c:87:e4:65:dd:d5:70:47:79:23:d9:3c:12:95:
51:c7:f7:66:0d:bf:c4:bd:bb:ab:d8:eb:db:b8:0e:
54:ba:2a:04:4e:ed:b7:7a:3b:26:2c:05:10:70:82:
a7:8d:0f:11:17:e0:46:ec:20:54:b2:c6:d2:09:b3:
49:fd:6b:b4:a5:91:db:9c:79:3d:e1:1f:f9:6e:1a:
c9:f8:33:34:24:79:1a:75:06:10:eb:e1:ab:6a:b8:
32:4c:8c:4d:81:ea:27:8b:82:ce:38:65:44:f7:50:
dc:e9:95:6e:d8:ad:bf:a8:59:c2:bb:3c:90:e0:23:
6e:ce:48:7f:b4:6e:18:b2:9a:73:62:ce:38:de:36:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:85:71:56:03:0E:33:9F:CA:32:E9:64:F1:E6:B9:5E:63:E1:CF:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9344F4DEDBE111EFAE550B6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.198.0/23
Signature Algorithm: sha256WithRSAEncryption
65:e0:aa:93:41:ad:f3:d1:ad:fd:21:03:89:03:62:b1:88:00:
da:68:43:b3:f5:5e:4e:f5:3a:bb:86:b2:4f:a9:f4:ce:20:9d:
cc:46:0b:7e:ae:58:17:0b:00:a3:02:22:7f:3c:7d:df:91:6e:
15:07:36:c7:8c:b7:0d:73:fa:17:86:63:ea:ec:86:20:ea:29:
ec:0e:0c:7c:17:9b:77:7d:ab:73:94:55:ba:f7:12:bb:b4:c2:
27:0d:ca:da:c1:08:3f:30:d0:a4:af:42:52:5f:60:37:5b:70:
38:c1:92:13:7b:37:75:f0:6e:88:a7:7f:45:f0:14:87:7a:e5:
25:02:8b:49:34:c2:a2:9f:63:e2:5c:fd:db:6e:6c:e2:b8:c2:
c7:e4:c7:58:32:1a:9b:b9:3d:df:4c:41:13:ef:b9:75:3e:61:
4c:d1:81:34:4f:be:b4:bc:d6:20:02:03:f3:2f:7b:3b:19:d8:
01:45:fe:d1:57:b6:f1:2f:56:dd:c0:34:4b:3e:2b:90:6c:61:
09:3f:a9:97:5a:e8:11:e8:c1:cb:6d:5e:e0:27:84:83:b3:c0:
49:02:1e:49:c8:03:5d:d6:7d:28:a6:e7:ef:22:1b:38:c9:81:
6b:4a:a7:14:a9:56:65:d1:00:db:ea:33:f0:5e:92:31:0a:e4:
1e:89:ad:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:53 2025 by rpki-client