Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7F5F8B0DCB811EF95C3CC94762E951A.roa
File: A7F5F8B0DCB811EF95C3CC94762E951A.roa (raw, json)
Hash identifier: 8GQ5FWeo4brejVK40Z6bTJlk+fCxOoylCSBdQc1BP+4=
Subject key identifier: 10:06:D1:A9:17:AF:87:75:7C:57:E0:00:C3:6C:E9:5E:D6:81:4E:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011537
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7F5F8B0DCB811EF95C3CC94762E951A.roa
Signing time: Mon 27 Jan 2025 14:11:52 +0000
ROA not before: Mon 27 Jan 2025 14:11:48 +0000
ROA not after: Sat 08 Feb 2025 14:11:48 +0000
asID: 22773
IP address blocks: 156.249.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70967 (0x11537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 14:11:48 2025 GMT
Not After : Feb 8 14:11:48 2025 GMT
Subject: CN=67979428-7f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:a3:6c:e8:19:78:67:30:ce:34:9d:4d:d7:
09:58:1f:30:75:e8:a4:02:e9:15:79:c9:c0:45:91:
96:61:71:7f:3e:c1:27:8e:c3:6c:83:53:97:95:d8:
18:ab:90:ea:bd:e2:9a:ea:1e:7b:00:66:4c:53:20:
b2:e2:05:66:11:a1:df:38:95:e3:00:4f:93:79:7e:
42:2e:c8:3f:f6:4e:02:07:7f:71:37:2d:54:8c:39:
48:74:bd:e8:12:4f:a8:b3:f3:8a:dd:e9:12:e6:88:
d4:66:c6:59:ec:45:e4:10:a7:78:e8:3e:34:53:a4:
05:ab:da:3f:2e:e1:78:6a:48:d4:e4:d2:ea:48:2b:
85:86:e9:a4:75:fe:a5:86:6f:02:bd:36:6a:b8:c1:
3f:a0:1f:35:e7:8d:6d:01:21:ee:dc:cb:c9:9d:3c:
a2:29:35:4d:cc:d0:c3:da:9c:22:3c:40:03:3e:43:
6e:e9:20:77:e0:0c:cd:41:19:82:a8:b0:c1:6d:b9:
db:c3:ca:62:af:f6:d0:8a:63:54:1b:f9:d9:8a:01:
ac:27:ea:74:ad:8c:2d:dd:a6:2d:2d:ab:1d:fe:aa:
81:0f:61:6e:b2:ee:c6:4e:ed:3f:de:de:18:d3:79:
df:3e:d7:ff:c0:0d:5c:96:51:ed:30:4d:50:76:bf:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:06:D1:A9:17:AF:87:75:7C:57:E0:00:C3:6C:E9:5E:D6:81:4E:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7F5F8B0DCB811EF95C3CC94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.4.0/22
Signature Algorithm: sha256WithRSAEncryption
15:00:47:bc:0f:73:3f:b6:a3:9f:62:8d:bb:4b:bb:19:41:34:
01:83:d0:31:5b:db:eb:e5:78:c5:3d:16:a2:aa:56:7d:40:64:
6f:4d:d3:04:58:e0:c2:70:6d:9a:ff:bd:25:36:18:2c:21:04:
d0:9a:2e:5f:ac:53:97:f8:9c:29:7a:48:ce:1f:ec:0b:6f:2e:
37:b5:51:1d:b3:7e:13:66:97:23:b3:24:2a:09:a0:56:cf:85:
86:a7:b8:cc:0d:af:a2:a8:4f:1e:90:a7:37:a6:11:48:bb:29:
a3:b5:dc:d0:50:d7:2e:4c:bb:88:bc:70:37:56:0b:01:79:3f:
65:f7:a1:ae:99:69:5e:18:4b:d6:78:70:ec:b8:62:c3:d7:5b:
f3:99:c3:aa:d8:de:1f:7b:1a:60:66:a5:07:03:57:6b:5a:86:
a3:33:01:a5:3b:b9:6a:36:e3:5b:2f:d4:4c:9e:06:87:1b:19:
9d:df:e3:e7:4a:b3:74:60:02:98:45:85:c0:1a:b6:0c:1d:1b:
7b:53:97:01:71:d6:c8:94:ef:f1:a4:1e:75:31:ec:f6:7b:62:
68:1c:55:02:98:86:48:cf:42:a6:e4:28:c5:1e:ff:15:e3:11:
55:85:5d:cf:26:e0:d1:32:90:11:a0:17:37:48:52:2e:a2:94:
15:83:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:41:08 2025 by rpki-client