Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0FEBBE6DA6A11EF971E7289762E951A.roa
File: A0FEBBE6DA6A11EF971E7289762E951A.roa (raw, json)
Hash identifier: sIdG1vmNxFfvhmG45fhCrWQkNVPS+eWujzTDUfgM6Wc=
Subject key identifier: 89:11:54:CF:B8:46:5E:08:04:C2:7B:CB:74:44:E6:30:D8:E4:2F:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0FEBBE6DA6A11EF971E7289762E951A.roa
Signing time: Fri 24 Jan 2025 15:48:17 +0000
ROA not before: Fri 24 Jan 2025 15:48:14 +0000
ROA not after: Mon 03 Mar 2025 15:48:14 +0000
asID: 203020
IP address blocks: 156.232.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69526 (0x10f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 15:48:14 2025 GMT
Not After : Mar 3 15:48:14 2025 GMT
Subject: CN=6793b641-4d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d2:d6:34:6b:8f:14:4a:84:94:ca:f6:4f:02:
2e:25:cd:4e:94:33:44:e7:dc:2a:26:6d:cd:e7:5b:
3c:79:12:e3:f2:7e:4f:c4:c7:e2:28:43:dc:59:cf:
b4:d2:73:64:9a:ba:2d:73:df:3c:55:ce:6b:67:9e:
6b:2d:cc:34:93:7f:0f:88:76:62:13:12:8b:d5:1a:
84:2c:53:d5:db:c3:9d:5f:9e:bd:d9:3b:21:6f:90:
ba:bf:a1:ea:3b:11:a0:2a:c2:4d:c9:a4:fa:80:0e:
7d:10:93:38:c1:c0:3a:f5:9c:ab:24:a5:0a:37:f3:
ee:93:8a:20:c0:b9:21:67:38:60:d7:a8:3c:b6:47:
73:4c:a7:ad:b9:c1:6e:e9:0f:01:b0:99:85:e5:63:
be:c4:f9:94:3e:9e:ad:1f:59:a5:20:de:24:3b:cb:
5d:e9:f9:90:43:9c:6e:f5:eb:6d:37:bd:61:af:4a:
ce:26:7d:b0:db:85:73:b5:f5:b3:f3:1d:91:c9:0a:
01:f3:58:fb:8c:ae:49:0a:95:95:55:2f:ec:db:3b:
af:08:fc:80:83:f1:f5:0c:c9:18:7e:c0:a9:a4:8d:
ab:75:3a:15:2e:e6:21:c5:cc:79:12:9f:b2:55:29:
5a:4d:9a:d5:b9:05:eb:36:f4:88:c2:66:5d:94:22:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:11:54:CF:B8:46:5E:08:04:C2:7B:CB:74:44:E6:30:D8:E4:2F:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0FEBBE6DA6A11EF971E7289762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.5.0/24
Signature Algorithm: sha256WithRSAEncryption
36:35:b3:73:30:88:0c:76:43:7d:f7:5f:ef:a0:f9:6f:d5:d0:
8c:7f:96:b4:f2:42:9f:c3:9e:c1:21:f9:70:63:e3:0f:44:30:
52:9d:3a:6c:0f:c8:f5:41:05:65:e6:50:8a:01:e9:fd:ba:cc:
da:1a:12:64:b2:6b:56:30:8f:80:1b:d8:b0:29:46:e9:ce:1c:
8c:8a:5f:35:08:1a:e6:5f:42:7f:42:c0:24:0f:fd:c8:52:3f:
36:63:b7:44:c6:c5:a1:51:c3:04:37:8a:d5:83:62:14:47:f6:
d3:35:76:ed:97:dd:89:a6:91:bb:5e:3b:06:f2:55:c9:07:d7:
57:34:5d:f4:36:98:5a:85:a6:28:e9:af:b8:f7:18:05:6d:12:
c7:f0:b3:81:7c:41:40:94:d4:73:ba:83:76:83:7f:0e:e0:8e:
83:3a:6e:15:d7:c2:ab:84:a2:21:5a:ed:17:58:3d:ef:f0:c9:
7d:56:0a:cc:1b:ca:6b:46:4c:a6:42:26:d2:67:13:f1:ef:2d:
2d:dc:e5:2d:77:19:a2:5b:be:c7:da:c5:7e:c4:e2:c6:bb:b1:
e9:ae:f1:14:ae:a6:c0:7d:47:c9:13:5d:24:e5:f8:70:5f:26:
c2:85:8e:71:53:aa:2f:2a:fb:52:b1:bb:9d:86:77:f5:a3:f5:
b9:2f:e1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:08:54 2025 by rpki-client