Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A13834A6D3D111EF8555B67E762E951A.roa
File: A13834A6D3D111EF8555B67E762E951A.roa (raw, json)
Hash identifier: AKfPFJJh+djf2+wyifMwOJWOtqbr6tffN7MLkWhBYxA=
Subject key identifier: E0:23:A2:B4:19:AA:DE:A6:4C:44:05:02:14:EE:82:27:BE:6D:BD:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01089A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A13834A6D3D111EF8555B67E762E951A.roa
Signing time: Thu 16 Jan 2025 06:17:58 +0000
ROA not before: Thu 16 Jan 2025 06:17:54 +0000
ROA not after: Wed 19 Feb 2025 06:17:54 +0000
asID: 7018
IP address blocks: 156.255.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67738 (0x1089a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 06:17:54 2025 GMT
Not After : Feb 19 06:17:54 2025 GMT
Subject: CN=6788a496-fd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:62:44:9b:2a:41:30:0b:f3:d2:16:b5:d7:
17:0b:f0:ab:58:b7:9b:3b:6e:1d:24:41:7c:dd:de:
d1:f9:d1:20:d6:b3:6e:3a:b8:aa:55:6b:22:ac:94:
40:96:69:d8:86:d8:2b:08:84:b9:8d:02:e7:6d:80:
0b:d1:2e:ba:9d:64:08:de:d2:6f:74:35:0b:ed:8a:
a9:b9:e6:5d:56:4f:1c:59:7f:6d:24:81:c9:57:06:
4a:c9:58:f9:25:50:51:a6:8d:eb:76:e7:21:9b:b0:
c9:31:3f:dc:e4:25:cc:27:e7:cb:8e:88:c9:e0:d9:
e9:3a:a4:be:54:12:d5:8b:6d:6f:17:84:bc:90:20:
31:e0:50:64:01:a1:ca:6f:a1:1d:8c:94:10:e2:dc:
72:3c:e5:a0:6c:ef:48:29:4d:cb:4a:49:3d:9b:31:
91:5c:4d:46:85:ca:b9:ed:20:4f:b1:db:df:bb:a8:
f3:d1:f7:44:41:09:92:13:27:ca:4f:38:5e:90:93:
d5:9d:0c:e6:c3:69:27:97:a6:cc:b3:b3:62:58:79:
17:ea:1e:71:c6:a2:e6:cc:53:9e:87:7d:38:44:29:
6c:bf:3e:cb:55:1f:58:7d:47:ea:09:db:7b:a3:6c:
a2:84:8d:13:ae:01:9b:08:fe:27:97:43:d2:32:4e:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:A2:B4:19:AA:DE:A6:4C:44:05:02:14:EE:82:27:BE:6D:BD:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A13834A6D3D111EF8555B67E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.12.0/22
Signature Algorithm: sha256WithRSAEncryption
77:80:b9:1c:3a:b5:bb:eb:ec:dc:23:a8:8c:c6:52:8f:10:5c:
87:e6:c3:42:6b:e8:1c:35:df:79:ed:21:d1:44:64:2e:90:e9:
74:75:1c:03:44:15:bf:7b:ca:3e:70:20:16:91:df:a8:01:5c:
92:9a:d7:75:50:73:1b:6b:b7:5d:7e:ff:c8:61:a4:1f:74:95:
bf:f9:b9:73:10:b2:f4:de:a2:7b:f1:19:c3:20:4c:1b:65:85:
ae:1f:d6:0d:73:be:12:46:20:fa:3b:1e:7b:36:19:50:4e:65:
76:00:40:3f:d6:1b:3b:79:c6:e2:7f:c2:01:68:28:76:f1:56:
12:cf:2b:91:06:37:e6:66:bb:c8:72:d3:0d:86:93:01:52:30:
16:e6:37:1f:56:f0:3f:42:40:36:30:4f:95:e3:ed:c6:34:25:
03:59:86:83:19:73:d8:dd:3b:5b:30:e4:af:59:e9:13:1b:bf:
fd:d0:02:7d:c4:57:55:88:e1:f7:45:64:d3:e9:65:ff:ff:d7:
83:0a:7b:20:bb:d7:44:b3:87:a5:c7:f8:6d:0c:22:9c:10:e0:
32:96:f0:a3:06:8d:7b:0e:1b:32:bd:e7:3b:e4:db:b4:6a:aa:
db:1f:97:0c:52:e1:0d:52:13:c7:0a:1a:da:4f:aa:68:48:d5:
3b:99:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:10 2025 by rpki-client