Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB26CD94D4A611EF80639C68762E951A.roa
File: AB26CD94D4A611EF80639C68762E951A.roa (raw, json)
Hash identifier: zsNTqHMH4OkVN80uqQ27jRgkKdyGtuXC3sBnVzyTDyQ=
Subject key identifier: 24:64:E7:6D:38:BD:3E:0D:8E:FE:6C:2D:6A:8C:5D:96:27:D9:32:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010921
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB26CD94D4A611EF80639C68762E951A.roa
Signing time: Fri 17 Jan 2025 07:42:57 +0000
ROA not before: Fri 17 Jan 2025 07:42:54 +0000
ROA not after: Wed 19 Feb 2025 07:42:54 +0000
asID: 7018
IP address blocks: 156.252.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67873 (0x10921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 07:42:54 2025 GMT
Not After : Feb 19 07:42:54 2025 GMT
Subject: CN=678a0a01-3e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:a8:7d:28:2c:24:28:36:84:17:df:6f:99:
d7:f8:73:f0:e0:31:61:a0:86:95:d2:a3:64:95:bf:
1d:87:b8:60:f9:76:2f:0b:fe:94:19:00:65:b8:40:
08:be:44:71:58:29:fb:75:f9:fb:6c:75:b3:6e:7d:
96:4a:98:ff:4c:4b:be:92:e0:bc:75:51:8c:37:3e:
ec:35:d4:b2:14:58:19:79:fa:12:37:b0:c6:f1:7c:
f1:63:55:67:14:09:bd:79:34:ca:69:f5:98:bb:a2:
2b:42:7a:a8:ab:57:f2:0e:82:8e:1f:1c:4d:66:26:
98:47:93:72:c5:f7:ba:df:6b:7c:1e:c6:4f:3c:c4:
94:66:82:2b:21:91:3b:fd:9a:28:d8:a4:a7:6c:19:
63:d0:c2:1b:bb:04:40:fa:d9:8a:fb:9a:6d:a5:44:
5e:b4:31:87:f5:af:87:f3:64:6a:11:3e:fe:67:d8:
34:c0:f2:78:bf:02:a5:34:d3:fc:2e:56:4a:36:a8:
b9:bb:f4:36:ea:dc:7f:56:74:16:fb:2e:aa:e7:41:
a3:4a:8f:0e:4e:00:10:c3:17:8d:9b:6a:a0:ab:98:
24:6c:95:7a:8e:79:00:d3:00:f4:53:9e:e2:09:16:
ef:a4:04:94:25:fa:69:2b:b0:2f:3e:00:38:a8:94:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:64:E7:6D:38:BD:3E:0D:8E:FE:6C:2D:6A:8C:5D:96:27:D9:32:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB26CD94D4A611EF80639C68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.5.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:56:55:be:56:9f:d8:43:f7:10:e2:c0:a0:94:47:44:c0:d9:
57:57:29:05:18:68:c8:2d:d1:4c:02:8c:28:61:10:4f:d0:e8:
06:2b:77:80:dc:eb:1e:6c:6c:b8:1b:10:fc:da:c9:d5:3f:e4:
8f:39:58:81:9f:c9:25:55:3a:6f:6b:bb:30:88:2a:dd:44:e7:
55:1c:93:ee:cf:2f:24:de:b2:38:70:25:41:94:4a:12:87:5b:
58:d7:5d:14:ed:a9:46:22:dc:90:f9:5b:42:79:97:ca:c0:ce:
e8:ed:45:7b:f1:e1:0f:7d:c7:a6:e7:b4:9b:42:97:d7:78:af:
fb:e7:3a:3a:f2:9e:93:35:08:a2:fa:f6:28:09:16:93:37:76:
90:74:13:bd:1b:d0:6f:4b:27:d7:85:e3:b6:bf:6d:9c:3c:fb:
5e:a5:e5:de:63:45:62:02:3a:14:f6:dc:eb:11:c0:21:64:b1:
0b:8e:a6:d3:1a:bf:70:6b:c6:6e:38:d7:9d:24:e7:48:78:8a:
6e:04:ca:9f:c9:63:dd:55:7d:4f:b1:4a:00:90:00:6e:d7:40:
c4:4d:8a:81:e8:0a:f9:46:7e:53:1b:c8:75:9c:6b:8b:10:f0:
65:7a:a8:91:ad:78:f5:e6:aa:4c:d2:2c:19:30:38:c1:0c:0e:
e5:cf:3b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:14:41 2025 by rpki-client