Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C8DE3CEDC0511EFB943415C762E951A.roa
File: 9C8DE3CEDC0511EFB943415C762E951A.roa (raw, json)
Hash identifier: 0gQZutzfy9TTFUxxnKOJOUlkRioUaMKRileTsXWH1kE=
Subject key identifier: F2:E0:CC:3C:03:39:1B:AF:D8:73:BE:CE:80:C1:EF:5B:5D:86:7A:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011412
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C8DE3CEDC0511EFB943415C762E951A.roa
Signing time: Sun 26 Jan 2025 16:50:13 +0000
ROA not before: Sun 26 Jan 2025 16:50:10 +0000
ROA not after: Sun 23 Mar 2025 16:50:10 +0000
asID: 63139
IP address blocks: 156.225.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70674 (0x11412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 16:50:10 2025 GMT
Not After : Mar 23 16:50:10 2025 GMT
Subject: CN=679667c5-82d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:9e:47:39:65:39:fa:49:86:f7:e4:5b:cd:
3d:f6:e2:03:64:05:9f:03:02:5e:81:c0:8d:42:9c:
e4:9b:fd:1c:a2:79:e7:fc:0a:62:ca:c4:b2:eb:f8:
78:5e:57:7a:5b:ee:46:61:d9:9a:c7:e3:83:f0:78:
58:64:05:ea:1c:11:d6:2d:29:7f:8a:3e:98:f0:3d:
a6:66:0d:5a:a8:02:a1:0a:82:c0:31:47:6d:be:06:
e5:e1:ad:5e:52:7e:be:40:32:d3:d5:32:ff:d1:cb:
02:59:7b:14:5f:2d:60:f6:b7:85:61:f2:c9:bc:d4:
f8:6d:89:d3:51:e8:ba:1d:fd:6d:0d:55:89:ca:cf:
08:91:94:4a:79:fc:9f:7b:a4:c3:0a:b4:ae:a8:65:
5a:cb:f5:e7:d3:71:48:9b:a4:6c:ba:32:56:1f:e0:
fa:2b:d9:9b:0a:cf:c8:80:97:ed:ab:f1:03:41:0e:
b3:9b:91:97:54:20:fd:44:41:21:f0:7e:4a:5d:77:
dc:a4:a4:85:2b:5e:4e:38:4c:9e:f3:51:62:61:12:
51:42:9c:1f:1d:3d:ca:8a:16:f1:fb:32:93:5f:e4:
ff:57:36:5b:57:f3:eb:2b:ee:86:ef:ea:df:15:01:
e6:60:70:2f:b3:6e:af:d8:c8:52:81:87:35:92:a2:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:CC:3C:03:39:1B:AF:D8:73:BE:CE:80:C1:EF:5B:5D:86:7A:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C8DE3CEDC0511EFB943415C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.126.0/24
Signature Algorithm: sha256WithRSAEncryption
86:08:71:15:38:b9:03:80:4a:0c:50:25:ae:47:46:66:b9:e4:
53:e3:04:6f:d1:9c:67:1d:e5:bf:28:2c:6e:34:62:14:6b:c6:
9b:1a:dd:f9:7b:33:ef:aa:5d:87:b2:90:b4:15:9a:0f:fd:83:
ed:15:ca:80:10:14:85:9b:ed:cc:d7:70:20:1e:62:db:5f:76:
a1:49:ff:a9:18:4f:4a:6c:98:65:10:64:10:c9:cc:d3:1e:04:
38:60:7a:2a:6f:37:fa:e6:fd:12:7d:06:b5:77:94:bb:41:a3:
99:be:16:31:9f:d7:46:8a:23:c7:bc:49:b3:e1:ef:e6:2b:c3:
db:3e:8b:a0:4e:7a:6e:44:4c:52:b7:cf:d0:90:cd:89:54:0a:
e0:a3:88:1d:59:34:b5:e6:30:62:fb:7d:1b:88:0f:46:89:5a:
b7:59:ec:39:57:d2:30:8b:7e:1c:58:ff:4b:72:07:c1:33:ce:
5c:5b:e7:b8:c3:4d:47:25:3e:4d:fa:8d:a5:b0:3d:1f:ec:f4:
db:77:fb:68:f6:08:5a:6d:08:a4:79:cb:68:a9:fe:78:19:c5:
02:f8:91:dd:74:fe:84:89:02:de:91:17:d5:af:37:5c:e1:0b:
b8:ee:d5:ec:37:9a:f5:ff:40:f9:03:f1:e3:a9:bb:cc:c0:e8:
ec:ba:0f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:57 2025 by rpki-client