Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/978D1A56DA7111EF8195C8B6762E951A.roa
File: 978D1A56DA7111EF8195C8B6762E951A.roa (raw, json)
Hash identifier: aKj5guqqzDtCcDjjZHvCZLc8wtHWabT21jVzbG40t5w=
Subject key identifier: C2:1B:64:AE:22:8C:6D:EE:1D:0D:BD:48:F0:E9:06:24:3A:DA:30:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/978D1A56DA7111EF8195C8B6762E951A.roa
Signing time: Fri 24 Jan 2025 16:38:08 +0000
ROA not before: Fri 24 Jan 2025 16:38:04 +0000
ROA not after: Mon 03 Mar 2025 16:38:04 +0000
asID: 203020
IP address blocks: 156.232.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69556 (0x10fb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 16:38:04 2025 GMT
Not After : Mar 3 16:38:04 2025 GMT
Subject: CN=6793c1f0-f85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:3d:65:0d:1d:0e:e9:95:db:34:9e:01:e3:
02:00:b6:b1:61:60:b2:2b:2a:fe:21:c4:6a:5b:b1:
c6:af:e3:c4:0e:34:7b:a0:27:91:58:e5:aa:b1:a6:
53:e8:f9:9c:e7:b4:d7:d1:ef:63:a0:3d:87:c0:87:
bf:75:c8:a2:e6:aa:f6:a4:11:f5:06:7b:73:03:63:
7d:0a:ca:d9:be:5a:e3:66:af:de:36:22:2f:0e:25:
1c:6d:22:f4:66:35:f5:3f:28:ad:0f:3b:b9:be:66:
61:0f:cd:bf:85:81:0c:cf:a5:b4:ed:e9:4b:04:c8:
7b:d3:1a:eb:93:21:cb:0b:17:98:80:eb:e4:45:4d:
f4:ba:f7:c4:c9:98:ca:eb:3b:28:3b:f0:90:64:10:
73:df:82:b4:28:b4:2d:a7:ad:8a:09:89:5a:e8:e1:
78:93:90:b6:ee:10:9f:18:d6:03:e4:8c:bc:8d:bd:
d8:c4:e1:98:41:19:b4:41:45:ae:7a:9d:67:e7:ab:
41:be:a4:4b:78:c9:f4:0a:87:af:73:5b:14:5f:f1:
71:81:83:f3:e1:94:f0:5f:1f:d6:b6:1c:91:f1:01:
de:a1:31:4b:40:0e:0e:9f:47:1b:28:3f:87:93:61:
8e:01:0c:5d:d9:7e:0e:12:00:20:cb:8a:c7:6a:c1:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:64:AE:22:8C:6D:EE:1D:0D:BD:48:F0:E9:06:24:3A:DA:30:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/978D1A56DA7111EF8195C8B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.112.0/20
Signature Algorithm: sha256WithRSAEncryption
12:83:35:5c:8a:c1:69:b0:ef:cb:4d:82:c3:6a:63:30:ed:74:
0d:b2:b0:e3:de:33:5a:94:b9:dd:e4:79:2e:aa:bd:b5:2d:a3:
0d:a1:f2:74:2d:29:7f:a3:4e:c2:fc:7b:1a:a0:9f:a7:75:d2:
35:e3:cd:b0:7c:49:17:66:1c:7d:43:fe:9f:87:4f:e9:d0:07:
14:e9:ec:61:4a:44:ca:1d:70:ca:5b:9e:4b:6d:ab:e1:f5:20:
34:be:f3:b3:c7:f3:b7:f8:28:ad:81:57:aa:5d:3a:1a:f1:eb:
6d:b6:3a:cb:ff:d5:bb:f8:28:7c:6d:b1:ca:16:d4:c4:9d:c0:
6f:1f:3e:50:75:3a:cb:85:41:0b:96:9d:8a:92:34:72:eb:64:
9e:4d:78:5c:59:57:0e:91:ab:f1:97:10:64:00:27:73:82:52:
d7:b9:d2:87:4d:5b:b3:37:4a:74:53:9e:58:dd:93:e9:7a:76:
5a:64:6e:5b:01:a1:03:b1:18:3d:e9:dd:a6:a5:83:cc:b5:05:
92:9e:f0:6a:8a:51:9e:f8:1a:31:8b:c5:bb:ab:a3:69:a7:24:
0d:10:05:c9:e7:09:c9:e7:62:f3:b9:9e:a5:fa:e3:f6:93:14:
24:0d:37:fc:25:12:a3:5a:81:06:c2:68:49:f7:1b:e8:07:0a:
56:39:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:27 2025 by rpki-client