Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A68C4E1ADCD211EFAE002D43762E951A.roa
File: A68C4E1ADCD211EFAE002D43762E951A.roa (raw, json)
Hash identifier: een4zt0yYmvnB3noHZvQ62zffZeIP216YESuQaYJWD4=
Subject key identifier: 64:70:B8:F1:F3:AE:21:82:6F:EC:9B:D7:20:02:B4:51:5D:29:04:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01154F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A68C4E1ADCD211EFAE002D43762E951A.roa
Signing time: Mon 27 Jan 2025 17:17:57 +0000
ROA not before: Mon 27 Jan 2025 17:17:53 +0000
ROA not after: Sat 15 Feb 2025 17:17:53 +0000
asID: 39600
IP address blocks: 156.237.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70991 (0x1154f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:17:53 2025 GMT
Not After : Feb 15 17:17:53 2025 GMT
Subject: CN=6797bfc5-7e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:71:5d:e6:8c:a4:62:0d:e9:56:c3:d3:b0:
37:52:33:1a:b1:96:05:1b:51:dd:89:71:24:fe:34:
d7:87:42:87:e3:f4:e9:83:77:d5:5c:9b:40:49:00:
f3:6e:11:1b:56:ae:94:f4:8b:d4:5e:e0:36:a9:5d:
b9:71:db:a2:17:da:d9:9c:3d:56:e9:d8:74:11:12:
ea:97:5b:86:8b:b0:87:31:b7:7c:16:4f:dc:c2:ce:
35:22:14:b1:3e:b0:ba:a7:df:bb:f3:8a:87:ab:c8:
9f:94:27:de:2f:6b:e5:e3:4a:95:80:70:bd:eb:cb:
a5:db:cc:83:78:6a:6e:c6:9b:cb:70:d9:35:a5:30:
c1:af:43:ff:ad:3b:f0:34:13:47:c8:7f:4d:e6:34:
0e:51:1a:de:c9:4b:bc:48:9c:0a:aa:d1:12:c5:37:
12:0b:d4:f0:09:82:d3:36:75:f5:07:f5:f3:8b:ee:
34:6f:9e:0a:08:eb:45:d4:18:f1:12:df:37:64:a8:
42:19:c2:ba:b4:e8:71:b1:13:04:65:3c:c4:26:42:
15:f2:77:d9:73:e7:12:98:6f:a9:36:ac:14:22:db:
31:61:b1:a1:9c:1f:be:24:e5:15:2d:2a:c9:2e:ee:
b4:bf:d0:01:e1:7a:d4:23:06:d4:f8:1a:89:25:bb:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:70:B8:F1:F3:AE:21:82:6F:EC:9B:D7:20:02:B4:51:5D:29:04:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A68C4E1ADCD211EFAE002D43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.116.0/24
Signature Algorithm: sha256WithRSAEncryption
33:de:c0:9c:5e:5c:1d:8b:10:31:85:83:46:ab:e9:9e:dc:ac:
36:3b:b9:40:61:7d:c7:68:53:cc:8f:d5:f3:76:d0:9e:86:47:
59:53:e2:53:60:20:96:51:ca:69:9d:f7:4a:5f:04:82:01:60:
18:83:99:39:16:ea:90:4d:57:3b:8b:a2:67:39:75:21:56:88:
f8:56:f4:ef:98:bf:9c:51:8f:e2:32:e2:78:4d:69:d1:a4:d9:
e9:b0:48:70:7a:aa:70:56:cd:ad:16:f9:b9:e7:1b:45:c7:43:
b6:02:1d:92:62:3e:73:9f:0f:7f:a6:75:e6:c7:cf:90:69:4b:
0b:99:f8:ab:64:77:65:96:ae:20:ac:bc:da:56:10:45:3e:39:
66:1d:a3:22:f1:61:e8:e4:6e:bb:b3:16:ab:4a:8a:8c:0b:e9:
af:38:3f:57:12:25:b2:d7:77:11:53:d2:54:9d:6f:6b:08:dc:
64:b6:ff:b1:9f:f6:24:72:57:89:9e:ad:b4:0c:e5:cd:63:ef:
f6:c9:e3:2e:07:87:68:92:f2:81:12:dc:66:a7:cc:6f:bd:c3:
76:77:2e:4f:b2:28:2d:13:8f:2c:f5:91:c0:01:b6:55:e4:d5:
6d:5c:92:c8:0a:b2:9d:bd:1e:ce:95:36:39:b5:65:e5:39:b6:
32:92:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:20:26 2025 by rpki-client