Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A66A0136DCAD11EF8FB9D54C762E951A.roa
File: A66A0136DCAD11EF8FB9D54C762E951A.roa (raw, json)
Hash identifier: 3dPxLDtdx89Zya5uemLnvQjyM6sMWJC8ZlHvVJ1zy4I=
Subject key identifier: E2:9B:74:FD:E3:07:7C:D6:AA:19:E2:18:39:CF:22:3C:2B:BB:0B:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A66A0136DCAD11EF8FB9D54C762E951A.roa
Signing time: Mon 27 Jan 2025 12:53:05 +0000
ROA not before: Mon 27 Jan 2025 12:53:00 +0000
ROA not after: Sat 08 Feb 2025 12:53:00 +0000
asID: 5065
IP address blocks: 156.235.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70895 (0x114ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 12:53:00 2025 GMT
Not After : Feb 8 12:53:00 2025 GMT
Subject: CN=679781b1-05d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:e5:df:9e:35:c5:32:cb:05:2f:af:99:8b:
d2:9a:cd:fe:b7:62:7e:6b:e9:9f:d2:66:82:ad:f9:
40:17:f1:fa:51:11:2b:42:b2:c7:00:3e:9d:fa:21:
1e:e4:b6:36:ac:2f:6b:2c:66:9d:33:e6:ea:7a:b9:
3c:c6:b9:79:a7:1d:48:ad:f9:cb:8c:9e:77:ab:cb:
91:62:7d:e4:10:66:8a:80:3b:53:fd:f2:ec:f6:ab:
8a:b7:bb:ad:f6:c7:8b:a1:13:41:45:da:82:51:51:
fe:ce:6e:df:58:e9:c2:41:d3:75:e9:ef:4b:0a:5b:
b2:b4:2e:44:87:80:ee:2b:34:48:33:b0:ff:c2:3f:
36:86:12:c0:9e:78:39:e4:17:a2:04:c1:3d:75:95:
12:35:fe:06:f0:9b:6c:b9:62:2f:67:b7:a4:3c:03:
d2:22:92:73:83:84:80:d5:7f:47:5d:34:f6:dd:6f:
f7:7d:25:c4:7c:d5:66:45:7f:42:e5:66:55:b9:89:
00:43:ec:1c:d6:b9:4b:22:fd:63:41:90:ee:9a:43:
3d:9f:39:bc:96:e7:a9:19:3e:34:f0:ad:74:9d:5c:
21:a1:e3:94:8b:88:89:56:8d:ee:d0:48:61:40:0f:
ba:45:b7:0e:2a:aa:ce:8e:e8:13:6e:b4:0c:92:da:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9B:74:FD:E3:07:7C:D6:AA:19:E2:18:39:CF:22:3C:2B:BB:0B:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A66A0136DCAD11EF8FB9D54C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:cb:c1:5d:3e:04:12:71:c8:27:bb:d7:f6:cf:8d:00:d7:e8:
f1:69:4d:65:17:f6:fd:25:53:f1:3d:07:bd:e4:62:40:22:2d:
fa:ce:be:27:73:6a:98:e0:ec:87:de:0a:cd:01:2d:09:ec:1a:
41:3b:7e:24:b2:14:48:25:3f:1b:3e:cb:3c:39:3c:63:38:f6:
7a:e3:68:c4:a0:62:cf:02:a6:a6:cf:53:fb:b9:3c:82:e9:d1:
27:75:b5:2c:29:2e:34:78:03:66:96:b9:ba:ac:3d:bd:5f:90:
0e:14:cf:2f:ac:dc:94:b6:96:2a:b5:3a:53:e0:89:16:3c:e4:
e3:30:13:18:50:2f:28:e0:f1:8e:64:26:da:b3:dc:2c:1d:dd:
fe:4e:2b:08:c5:33:79:a2:1f:0b:6d:d7:a5:c5:37:c2:b2:52:
61:db:6a:e1:b3:84:ec:60:f6:4d:75:63:a3:47:eb:9f:f7:c6:
b3:58:75:3c:8e:75:62:c9:12:9b:c1:3d:1b:e5:8d:89:c6:80:
e4:53:47:4e:a5:46:8f:4f:10:67:e1:54:b7:cf:d8:ec:19:31:
52:1f:d6:ae:84:9f:83:71:ba:c2:92:34:a7:a2:a5:cd:91:a8:
40:43:5f:08:93:b7:25:02:75:c4:d6:28:b7:6e:0d:0a:6f:83:
99:e8:61:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:02:49 2025 by rpki-client