Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF4A625ADCB711EF856FF48D762E951A.roa
File: AF4A625ADCB711EF856FF48D762E951A.roa (raw, json)
Hash identifier: Vrn13jqNKyJ0RLHtlUVroIZ/wqSamOFltf4RY8Gk+J0=
Subject key identifier: 81:BE:6A:4B:E6:0A:9E:D6:F0:B4:23:86:00:70:14:32:BB:5A:6A:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011531
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF4A625ADCB711EF856FF48D762E951A.roa
Signing time: Mon 27 Jan 2025 14:04:55 +0000
ROA not before: Mon 27 Jan 2025 14:04:51 +0000
ROA not after: Sat 08 Feb 2025 14:04:51 +0000
asID: 7018
IP address blocks: 156.248.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70961 (0x11531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 14:04:51 2025 GMT
Not After : Feb 8 14:04:51 2025 GMT
Subject: CN=67979287-cecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:54:d4:8f:e0:41:8e:9d:47:b9:64:82:88:
69:65:77:92:1e:49:a4:c9:e3:31:55:46:28:78:17:
0b:64:27:25:dc:98:32:b4:ae:c9:33:61:c8:c9:6c:
44:63:f4:9e:89:ff:87:ea:fb:d4:3b:47:94:80:0b:
3b:3a:e1:60:47:51:52:de:e3:d8:62:f0:00:ce:12:
bd:1c:ce:b4:5f:41:8a:99:03:f8:c7:44:c7:79:c9:
60:c1:bc:e2:ea:de:ca:1b:bd:98:27:2f:d3:8f:1d:
6e:b9:81:ed:50:3c:52:e4:c2:6b:8b:e4:fe:00:60:
1a:c0:00:e1:8e:08:1f:ab:8c:5e:c5:64:00:28:0d:
1e:8e:f5:55:e5:49:2c:04:07:a0:a2:10:bb:d9:e3:
ec:81:18:86:19:97:8d:77:89:bf:ed:4d:2f:d9:40:
61:8f:f1:ba:fc:d7:89:86:b5:24:d1:53:e0:aa:6c:
41:5d:7b:c7:25:9f:36:8c:86:1f:8f:60:d5:00:45:
ad:db:66:d1:9c:21:88:3c:fd:8b:0e:a5:bc:0f:e9:
11:9f:70:69:74:40:ee:e3:ae:ef:20:55:5b:fb:67:
60:9d:3e:1a:f7:e4:44:a3:22:27:42:d5:e1:af:63:
a9:aa:76:d1:44:7d:5e:04:e7:17:b5:5b:fe:e7:8e:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BE:6A:4B:E6:0A:9E:D6:F0:B4:23:86:00:70:14:32:BB:5A:6A:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF4A625ADCB711EF856FF48D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:e4:26:f6:d3:c3:c3:3b:b6:2b:2e:d7:9d:47:9f:c8:51:62:
4a:34:11:38:28:d6:1e:5b:e4:51:aa:94:c3:0b:0b:e4:32:df:
50:02:b6:b3:0c:02:d0:2e:cc:99:57:55:1e:45:bb:f1:9d:65:
b4:17:ef:66:d1:72:99:5d:1d:ec:1b:e9:b6:b0:c5:66:7f:c3:
35:3a:24:eb:c1:4f:ba:84:67:f2:31:b5:1a:02:a3:b7:f7:1a:
bf:a3:82:04:63:26:6b:63:56:c8:b2:cc:a7:f3:21:53:55:91:
3a:3f:bf:3e:ff:1b:91:7d:3d:67:a0:99:01:54:58:95:bc:8b:
1d:c3:a5:90:75:57:75:26:22:a2:54:1c:72:3a:27:01:e7:90:
73:08:ff:db:94:35:e3:38:4a:53:88:cd:e9:fd:2f:19:0d:55:
0f:ee:90:54:ff:af:a2:aa:3e:83:f3:2c:31:88:75:8b:83:13:
c0:5a:27:66:f1:ab:db:e5:44:01:bd:d9:d3:ac:eb:cc:fe:db:
b2:14:76:1f:1f:34:6a:dc:37:f1:39:bd:63:aa:04:40:a9:cf:
97:85:bc:3b:44:c4:cf:b4:50:c6:49:1f:f5:6f:a0:a0:b6:53:
c0:1e:d9:f8:75:61:d2:e4:0f:6b:48:c4:3b:af:8e:1f:bd:e8:
c6:dc:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:38:25 2025 by rpki-client