Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A6A62B2DCAE11EFB4BFC151762E951A.roa
File: 9A6A62B2DCAE11EFB4BFC151762E951A.roa (raw, json)
Hash identifier: J2vY26wmi2HhNavCyN6IXx76KdLLNaWnGnJq1GsJqBE=
Subject key identifier: 24:8F:F9:28:48:4E:D5:A3:BD:7C:8B:7F:36:80:4D:CA:F7:51:3E:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A6A62B2DCAE11EFB4BFC151762E951A.roa
Signing time: Mon 27 Jan 2025 12:59:54 +0000
ROA not before: Mon 27 Jan 2025 12:59:51 +0000
ROA not after: Sat 08 Feb 2025 12:59:51 +0000
asID: 5065
IP address blocks: 156.235.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70901 (0x114f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 12:59:51 2025 GMT
Not After : Feb 8 12:59:51 2025 GMT
Subject: CN=6797834a-c4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:72:ea:95:ec:df:14:29:98:aa:49:1c:c1:
7a:8b:29:9d:fa:db:18:dd:e7:0d:77:86:62:c2:f1:
ea:9d:90:8f:3f:41:fe:13:8a:4a:c2:34:f6:5e:4b:
44:97:f1:d7:bf:7e:38:c2:35:bc:45:96:29:e2:c8:
1b:55:a4:59:01:c3:d6:ef:cf:b3:e5:75:57:80:4d:
6b:e9:64:08:2e:c2:af:ff:9c:e1:9f:f9:80:e1:15:
58:8a:39:5e:c9:ec:6a:9b:b0:48:94:06:c0:83:3f:
21:4f:cf:e9:c7:85:ea:3e:b4:0b:37:f4:d6:5f:e3:
5c:32:a5:f5:3b:79:ea:ba:5c:aa:45:b4:52:a3:dc:
30:d5:f2:01:8b:7f:1e:94:5a:5e:b7:b1:45:16:34:
96:d5:9b:a4:61:f4:e0:fa:50:b7:90:0d:2d:9a:59:
46:17:de:e2:40:9a:23:55:d0:e9:7d:13:ad:79:aa:
fc:6d:d6:e8:ca:83:b3:2c:5d:28:e1:77:29:b4:74:
97:a9:42:88:22:b1:aa:7f:a5:0d:26:2c:49:7b:e6:
e7:19:13:cc:8e:a4:b1:7f:ae:99:dd:38:91:d4:e1:
35:89:2c:1b:da:ef:ba:52:89:05:3c:54:40:8b:7a:
dc:92:f2:1e:ca:93:18:46:17:40:58:47:2d:ce:32:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:F9:28:48:4E:D5:A3:BD:7C:8B:7F:36:80:4D:CA:F7:51:3E:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A6A62B2DCAE11EFB4BFC151762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.23.0/24
Signature Algorithm: sha256WithRSAEncryption
28:5e:7b:ce:34:4b:55:ee:ab:63:22:b3:ac:c7:84:f8:6a:ed:
b2:72:9f:87:22:d3:7f:2b:45:46:fb:fb:a7:4a:a2:02:93:4b:
43:8c:71:85:a0:74:23:0d:50:08:ce:b0:c0:7c:1b:d6:73:cf:
2e:ee:c4:16:1d:01:05:83:dd:3b:2b:16:cc:ab:ce:b8:d0:0c:
90:23:78:61:af:30:92:9a:5f:b0:4f:49:bf:bc:3d:ea:65:d0:
4f:54:38:07:bd:d2:e2:27:03:96:20:b1:2e:98:0b:2b:13:ad:
b3:f5:56:19:4f:f2:3d:2b:53:90:3d:87:ca:3c:9c:21:a2:09:
27:84:79:f2:75:9e:f7:f8:48:b3:4a:e3:e5:94:43:d6:5b:56:
5c:0e:f4:98:42:1e:58:65:16:f0:4e:88:2a:ce:0d:7d:a6:54:
3b:62:49:ad:b0:24:0a:db:c1:a0:5d:69:38:59:4a:32:fc:a5:
5e:9c:d4:be:23:57:60:b8:b4:19:c2:bd:e5:12:94:e6:3e:a1:
5b:3f:70:2b:98:fd:d6:72:f3:fd:ec:9c:a3:c0:fa:d3:6a:44:
02:a8:df:9e:fc:69:62:db:5b:ee:60:0b:1e:dd:ef:ad:5c:2c:
11:0c:9b:ea:53:af:52:7c:dd:af:b7:b7:e1:2d:b5:04:90:e0:
c1:ca:8b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:49:55 2025 by rpki-client