Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97F3ADB2DAED11EF941E0882762E951A.roa
File: 97F3ADB2DAED11EF941E0882762E951A.roa (raw, json)
Hash identifier: JSFi+T0hx2Ug+MudtlpcW7LVyqG4kRg3gKfj9ao1xjk=
Subject key identifier: 89:AF:3A:5A:DD:9F:62:99:C1:D5:18:E0:89:51:0E:29:61:07:28:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01111F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97F3ADB2DAED11EF941E0882762E951A.roa
Signing time: Sat 25 Jan 2025 07:25:46 +0000
ROA not before: Sat 25 Jan 2025 07:25:43 +0000
ROA not after: Thu 06 Feb 2025 07:25:43 +0000
asID: 39600
IP address blocks: 156.238.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69919 (0x1111f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:25:43 2025 GMT
Not After : Feb 6 07:25:43 2025 GMT
Subject: CN=679491fa-8804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:31:0d:8f:40:0e:fd:22:e9:65:4d:96:9d:
64:6d:f7:34:c3:bd:20:ed:45:94:cb:56:43:f9:f2:
db:28:85:d5:63:70:1a:2c:bd:df:81:e7:c4:8e:8b:
c7:f5:ab:73:17:b5:1d:8d:8f:1f:d5:7e:e3:59:8b:
8c:68:34:64:2b:3b:ac:5b:d5:23:1e:b2:ed:e3:f8:
22:74:ec:15:b5:74:9e:73:9b:cb:a6:ca:3d:7a:e0:
73:b7:0c:95:68:8c:e0:8c:82:56:f9:2b:1c:61:a5:
3e:0a:93:a4:8c:28:99:70:57:48:22:35:0a:cc:7c:
77:6f:5a:a5:4e:ba:e1:e0:55:81:e3:ab:cd:32:a0:
57:19:b5:6a:a5:b8:4c:f8:63:09:f1:9f:d6:3e:71:
2f:64:dc:9a:59:65:b0:1a:da:0f:e4:0b:29:5d:23:
29:a3:53:8b:64:1f:33:c0:45:77:cd:89:cc:d5:23:
e7:d6:77:0b:8d:1d:45:53:5d:da:5a:a6:b0:4a:d9:
1d:e5:89:31:9f:93:56:f0:43:b4:72:80:4f:70:37:
e4:37:f8:f3:2e:91:66:71:0f:8e:0d:f9:8d:b2:75:
0f:55:79:eb:86:0b:17:7d:37:68:d2:44:74:43:72:
83:5b:a9:6b:eb:79:ed:7d:b0:47:ce:9c:b3:9f:54:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AF:3A:5A:DD:9F:62:99:C1:D5:18:E0:89:51:0E:29:61:07:28:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97F3ADB2DAED11EF941E0882762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.169.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ef:72:4a:82:5f:c9:a8:6f:26:23:0e:27:d5:e5:8f:b9:fe:
ce:0a:76:86:d2:a8:7e:2b:c3:10:e1:c6:a8:c2:54:e0:29:4f:
75:3d:02:68:9b:dd:47:a9:05:7b:7c:de:88:c5:76:2d:44:ec:
18:44:29:a4:46:2b:23:37:94:44:82:75:c7:09:ab:83:f1:cd:
55:3f:c0:87:0c:fb:ab:63:77:3d:9a:81:2f:b9:05:b9:0c:70:
7a:5b:bd:bf:53:b8:b1:f5:06:9c:f9:e7:ee:b0:f1:10:24:11:
4b:42:5b:03:d2:52:60:dd:31:53:0a:e1:45:3a:87:b8:9d:6b:
7f:1c:49:43:29:b6:e2:f6:60:64:df:fa:ec:15:e3:a6:c4:0c:
82:f8:af:1b:2b:d8:66:ce:10:23:88:7e:71:6b:68:8f:6d:d2:
b5:89:ca:8e:c1:28:e2:d3:66:7d:4f:67:fe:8b:9e:d4:d0:02:
ac:a0:20:01:c0:07:48:be:e6:76:6a:4c:91:a5:5d:d1:63:45:
f6:09:de:ba:6d:2d:b0:42:ed:35:23:7e:35:b0:eb:12:18:f5:
e2:50:c6:16:6a:af:03:20:a4:0b:58:24:ea:5d:40:1f:8a:e8:
b3:92:67:41:b1:0c:8b:4d:52:62:90:bb:7f:53:72:b6:76:00:
c1:59:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:11 2025 by rpki-client