Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A177F5DCDBFB11EFAC8E429A762E951A.roa
File: A177F5DCDBFB11EFAC8E429A762E951A.roa (raw, json)
Hash identifier: GAaGoaL9EVuZhdwEyVGGmEJBjT4MFumCnhYzBcvBiRM=
Subject key identifier: 7D:8E:B9:78:8F:7B:1A:AE:C4:75:70:8A:11:CC:9F:75:2B:30:85:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A177F5DCDBFB11EFAC8E429A762E951A.roa
Signing time: Sun 26 Jan 2025 15:38:46 +0000
ROA not before: Sun 26 Jan 2025 15:38:43 +0000
ROA not after: Sun 23 Mar 2025 15:38:43 +0000
asID: 63139
IP address blocks: 156.227.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70628 (0x113e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:38:43 2025 GMT
Not After : Mar 23 15:38:43 2025 GMT
Subject: CN=67965706-cd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:80:dc:09:ec:60:a8:10:ba:a6:7d:4f:48:
74:89:b5:c5:80:a1:b2:b9:b3:bf:fd:8e:a5:0a:23:
75:a1:d3:23:1d:ac:3a:0c:23:3f:04:17:f7:24:1a:
ff:1d:a7:26:2e:4d:83:09:8f:0e:ce:17:ea:5f:e1:
af:ce:9b:b0:38:12:b9:e4:e4:8c:28:0d:3f:d2:1c:
aa:08:f8:ee:40:f1:20:62:30:e0:00:a9:6d:ae:3e:
cb:4d:72:c4:3e:78:31:3e:c1:6f:30:7d:86:99:0b:
5b:9f:33:fa:19:13:a8:7a:fd:9f:6f:0c:18:05:17:
3e:d7:c3:d0:6d:03:18:b1:0a:e4:ac:d7:68:07:ba:
55:06:18:e5:b1:d6:b8:d0:23:b5:3f:57:bf:b1:b0:
3b:37:d6:5d:fe:76:fb:34:03:c0:f1:45:1a:8b:08:
6a:cd:7a:a8:59:53:c8:fe:0d:8f:7f:a4:05:4b:6e:
00:07:fc:f6:39:5d:64:fc:17:71:47:18:48:4d:83:
62:8c:9f:3d:64:ff:b9:11:59:69:1f:ad:a8:e2:7d:
d8:02:a3:5c:c8:64:d0:82:9d:53:58:ba:1b:36:03:
88:89:43:33:b8:39:42:bb:f1:f0:c6:fc:c3:cc:be:
88:bf:28:99:fb:4a:85:4d:00:1d:eb:3b:c1:5b:4d:
0e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8E:B9:78:8F:7B:1A:AE:C4:75:70:8A:11:CC:9F:75:2B:30:85:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A177F5DCDBFB11EFAC8E429A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.192.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c0:c7:09:ac:7e:71:10:dc:6b:5e:6c:b8:c5:6b:e1:9f:56:
2a:13:93:33:7d:5f:ab:8c:a7:ca:cc:16:7d:b1:aa:17:3f:06:
08:48:29:b6:72:6f:39:2c:05:a5:34:de:7b:0b:78:bc:86:43:
1a:74:ce:b6:9d:8b:1f:49:cf:83:99:92:53:6b:55:f3:c1:b0:
98:4b:fe:92:9a:b4:55:c4:67:a5:11:48:0d:fe:4a:29:95:c0:
f9:32:82:89:47:05:72:0a:0e:73:7a:2e:3c:80:a7:36:25:ea:
4e:8d:b2:b1:07:54:98:fb:52:7c:8b:44:ac:0f:6e:46:10:fc:
a2:c0:f2:bc:ab:47:24:42:72:8c:8d:c6:cb:6c:f7:ce:70:71:
6c:ee:e7:03:6f:fb:ce:cc:5e:4d:b4:c2:57:1b:f9:42:52:a0:
c7:3c:33:03:2e:c7:42:24:fd:31:bd:ce:9f:53:bc:cc:80:4f:
6f:43:49:84:d5:ca:70:8b:ce:de:d8:98:95:6d:a2:3d:d6:22:
57:a3:00:27:7b:61:09:0e:b4:89:53:ea:d7:da:55:47:35:5d:
80:1b:ed:31:27:84:68:4a:59:24:dc:ae:40:59:a7:30:a2:b3:
16:7f:95:cc:68:01:06:27:68:ac:1d:99:de:4a:f6:6e:f8:70:
5f:62:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:08:54 2025 by rpki-client