Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6B1E0A6DA6811EFA0CCB97B762E951A.roa
File: A6B1E0A6DA6811EFA0CCB97B762E951A.roa (raw, json)
Hash identifier: rtL5Ra7SHhCK+/IQ6g7cukqc2Kazedd5dZDcTxenGAA=
Subject key identifier: 4F:91:31:52:41:FF:A2:39:24:C2:5A:68:65:83:B7:95:19:90:12:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6B1E0A6DA6811EFA0CCB97B762E951A.roa
Signing time: Fri 24 Jan 2025 15:34:08 +0000
ROA not before: Fri 24 Jan 2025 15:34:04 +0000
ROA not after: Mon 03 Mar 2025 15:34:04 +0000
asID: 203020
IP address blocks: 156.232.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69522 (0x10f92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 15:34:04 2025 GMT
Not After : Mar 3 15:34:04 2025 GMT
Subject: CN=6793b2f0-96ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:79:91:27:97:d4:cf:a3:71:d5:f6:16:11:
8b:91:2f:5b:21:b5:be:10:4f:12:9c:24:75:0e:c5:
6b:eb:ec:91:40:dc:89:64:2f:73:b3:71:52:aa:88:
c9:03:07:54:44:79:66:94:cc:2b:07:e5:32:02:f8:
23:ee:3d:0a:ff:bb:1f:a0:4f:0c:79:ef:d8:49:be:
be:18:76:cb:77:93:c8:67:8e:be:93:89:92:aa:10:
02:2e:16:bf:ce:19:d7:2d:87:21:13:8d:b2:d8:e6:
37:1c:29:f3:26:9f:42:91:72:eb:f3:e2:53:b5:9a:
a2:7c:b8:3a:a2:78:e3:86:50:9c:1f:94:72:30:49:
85:22:85:27:b0:c2:48:8a:43:93:32:a0:aa:64:0e:
55:f9:34:64:ba:bb:81:52:68:59:70:2b:1e:ae:ee:
ef:b2:30:57:a4:81:ca:b2:bf:f3:2a:b7:15:c3:74:
70:e5:96:60:64:63:30:bb:72:90:99:91:e4:72:9f:
7b:06:e5:25:8f:45:f5:b7:11:bd:fc:51:79:da:f0:
de:9a:86:f9:67:dc:31:45:a2:a3:6a:5c:71:65:77:
e8:01:f3:5d:83:8e:06:ef:b0:70:3c:ad:ba:d4:19:
97:b2:6d:1a:c9:d2:22:21:09:f4:ad:87:48:62:f9:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:31:52:41:FF:A2:39:24:C2:5A:68:65:83:B7:95:19:90:12:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6B1E0A6DA6811EFA0CCB97B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:4c:ea:83:e0:44:ea:3e:d2:63:61:2c:5f:22:b7:ba:c8:43:
06:c1:46:85:7a:eb:78:89:ff:60:7b:e6:8e:6e:ac:82:7f:e8:
13:9d:0b:ff:26:1c:90:b0:ad:d9:0d:58:f8:c2:4a:9e:09:00:
af:5b:74:c6:56:09:82:97:c3:8a:a2:9f:21:bd:47:0b:73:40:
e6:5f:11:bf:6a:9c:c6:9a:f8:bb:00:67:f7:25:20:3e:5a:e8:
0a:f9:e8:6a:73:f1:62:96:ae:c6:5c:64:6c:9a:60:f9:e9:79:
1d:67:7a:ed:87:78:e2:85:ed:e1:7d:6c:da:23:d3:5b:bd:23:
fd:11:61:79:3f:53:2f:0c:a3:80:4c:18:28:e4:a9:0b:3a:5e:
4d:67:3d:17:d6:12:0e:57:09:21:cb:b4:33:92:25:f4:61:cc:
83:5f:56:d8:0c:b5:cb:c1:7c:17:b6:72:96:00:35:30:b3:f1:
c9:5c:6d:21:f3:15:c0:95:82:76:34:19:38:e1:75:3c:94:e0:
79:31:69:08:98:14:b0:87:20:db:5f:b2:7d:34:fe:3f:1d:d3:
44:d2:e0:4c:df:76:ba:6a:1b:b6:da:2c:e8:7e:dc:e1:b6:fd:
13:6e:70:2f:74:e6:47:e7:02:d5:85:b6:43:88:d3:ad:35:97:
3d:04:56:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:12:01 2025 by rpki-client