Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0BF06DEDB1B11EFB92E0DB5762E951A.roa
File: A0BF06DEDB1B11EFB92E0DB5762E951A.roa (raw, json)
Hash identifier: eB71ydJikDafN/K3dNHEiYiFp03qhdpOfBYcDaXHSYE=
Subject key identifier: A5:A2:97:9E:04:DC:FF:80:B9:5A:45:19:0B:1C:03:8C:65:20:73:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01125B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0BF06DEDB1B11EFB92E0DB5762E951A.roa
Signing time: Sat 25 Jan 2025 12:55:18 +0000
ROA not before: Sat 25 Jan 2025 12:55:14 +0000
ROA not after: Sat 01 Feb 2025 12:55:14 +0000
asID: 62468
IP address blocks: 156.245.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70235 (0x1125b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 12:55:14 2025 GMT
Not After : Feb 1 12:55:14 2025 GMT
Subject: CN=6794df36-b195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:38:24:03:0f:cb:5b:8d:26:7b:37:e5:be:
b5:36:b0:aa:fc:de:22:f3:dd:a4:8a:00:a6:4f:b7:
ac:dc:d6:1f:80:87:58:31:1c:ca:d8:a7:ad:fd:3d:
91:3a:0f:80:eb:e7:fd:7d:4f:e9:35:42:96:cb:30:
23:1a:30:25:cc:ef:4e:e3:dc:72:90:f5:e3:23:1b:
f7:d7:f8:9c:21:7c:6b:5a:6c:42:6d:01:15:69:c8:
85:07:e3:6a:45:6d:5e:c3:d4:a5:fc:69:2a:76:84:
de:90:a1:87:4b:e4:ec:cc:6c:38:16:18:7b:9c:cf:
a3:b8:5f:a8:68:5a:b0:90:de:09:d1:70:dd:34:4c:
f4:80:ee:77:44:37:ad:27:57:06:d4:35:9b:a0:dc:
86:d3:f7:d1:1c:9f:90:c0:b0:5b:ea:9a:3c:c0:01:
36:30:9c:bb:6f:d7:29:09:c3:1d:70:3b:99:bf:9a:
f4:71:c8:ab:87:11:f8:ad:d5:78:d9:7e:af:33:63:
ec:1e:c8:0d:52:9c:9d:4b:e7:97:6a:57:0f:89:cd:
56:22:29:a5:2e:f9:25:94:1a:65:3b:12:4e:46:a4:
4c:d0:fa:c6:80:c2:0b:f8:d4:a0:44:52:9d:2d:5d:
13:6b:8d:15:6f:df:64:b2:ea:0b:67:8e:80:58:1b:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A2:97:9E:04:DC:FF:80:B9:5A:45:19:0B:1C:03:8C:65:20:73:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0BF06DEDB1B11EFB92E0DB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
67:b1:b6:78:b0:ad:9e:7f:7f:3f:60:2b:74:f2:85:0e:24:5c:
78:8b:45:d6:53:35:11:ff:77:a2:c6:f5:29:68:36:af:99:66:
52:9a:ab:ab:9b:a3:04:67:34:d9:c3:9f:3c:8b:70:cd:41:50:
46:81:80:38:1f:34:46:da:d4:1b:05:29:92:cd:1c:13:cb:f7:
90:4d:ca:2e:41:c7:ca:22:fc:d8:2c:09:4d:a0:a1:1d:fe:b4:
b7:3f:55:55:5c:c0:a5:69:58:30:48:4c:ab:b6:46:09:07:10:
a5:50:52:d4:86:40:0f:97:7d:c8:60:e4:24:f7:f3:e6:54:a7:
a2:83:29:f0:6d:a6:07:2f:f1:ff:ac:9b:6a:fc:e2:90:0c:5c:
c5:f0:42:fb:81:e2:9d:91:a9:2d:b8:f4:bb:c3:78:48:e6:2e:
18:ec:f5:fb:08:c4:f5:55:23:10:c5:ff:60:95:51:33:6e:1e:
8a:59:57:89:8b:7c:77:40:2a:04:d6:9b:a2:5c:f5:a5:05:73:
aa:bb:cd:79:97:48:b3:2b:e2:66:b5:87:90:e6:a2:f0:f2:fb:
aa:88:02:a6:f6:20:58:b7:6d:6f:0b:46:29:eb:55:8d:8d:9a:
02:bf:4b:7a:65:58:ed:8f:d6:33:a9:4b:3a:0f:5f:03:72:bd:
94:60:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:40:37 2025 by rpki-client