Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF65BAE0DCB311EF857D0472762E951A.roa
File: AF65BAE0DCB311EF857D0472762E951A.roa (raw, json)
Hash identifier: JqmJ3f1szEA7FM20XuWQbTDl3FfFqaAoGnP8vqcWWgw=
Subject key identifier: 98:38:75:9C:1B:43:71:CE:37:31:51:94:1A:C4:72:7F:27:EE:4C:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011517
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF65BAE0DCB311EF857D0472762E951A.roa
Signing time: Mon 27 Jan 2025 13:36:17 +0000
ROA not before: Mon 27 Jan 2025 13:36:14 +0000
ROA not after: Sat 08 Feb 2025 13:36:14 +0000
asID: 5065
IP address blocks: 156.239.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70935 (0x11517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 13:36:14 2025 GMT
Not After : Feb 8 13:36:14 2025 GMT
Subject: CN=67978bd1-0c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:23:4f:1e:82:0a:aa:3e:9e:00:c5:40:fb:
b4:8e:b2:26:c3:3c:ee:7a:ee:90:3d:d0:40:fd:8b:
f8:5f:34:2f:b5:2e:cb:9c:9a:fd:f1:a5:22:9d:02:
97:54:7f:5e:52:ce:ab:87:6c:12:99:e8:cd:32:0e:
37:48:ff:dd:ba:37:0f:d0:d4:2d:82:e3:32:f5:dc:
db:f6:00:fd:43:6a:4a:a2:86:3d:08:12:a2:12:c0:
f6:6b:1c:19:5c:de:e2:75:d9:f4:eb:79:14:e3:a1:
95:f4:16:2b:3c:83:36:df:a9:5d:dc:8e:25:2b:24:
c8:04:b1:be:f0:21:81:8e:56:d8:4c:d8:07:98:a2:
2f:90:ed:b2:bb:86:b2:f9:53:8b:3f:b5:d9:b4:6c:
c5:2f:28:a1:e4:58:ba:bc:37:0a:10:b1:56:e2:22:
08:1d:9d:4f:71:d4:9f:e6:14:11:2e:e2:ed:18:94:
91:d0:52:1a:ba:ac:77:9e:85:40:7e:d7:21:d0:c8:
ac:b6:f7:08:0e:85:4f:aa:83:1a:a7:66:11:25:55:
66:2e:11:1d:37:24:e5:ab:a8:fd:7b:d7:10:8b:fc:
c8:fc:38:29:5f:32:67:14:e2:40:37:3f:02:b7:d2:
fd:7b:c0:41:d0:0c:6e:08:91:be:b9:bd:e7:ce:09:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:38:75:9C:1B:43:71:CE:37:31:51:94:1A:C4:72:7F:27:EE:4C:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF65BAE0DCB311EF857D0472762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f1:d1:da:ca:cf:6c:86:10:0f:65:3d:a5:f7:a4:d5:3f:f1:
d0:61:43:c1:45:c1:0b:a2:5b:ed:0f:e1:e9:35:09:45:1c:74:
01:75:52:14:cc:bb:af:a0:b3:73:0e:91:71:0d:1f:d0:a1:ac:
50:d9:5b:30:8f:41:42:0f:00:9a:42:ef:3c:fb:e3:eb:2f:77:
52:b5:f1:15:b2:3a:85:18:8a:d1:ec:76:bd:ef:06:b0:67:5c:
33:4f:d9:8e:02:56:30:85:24:32:ac:55:b9:ff:1d:eb:f3:77:
35:2f:80:d2:99:b1:6f:28:df:6f:12:7d:ce:bf:85:e7:61:ce:
bd:38:04:7e:e3:38:fa:8d:61:29:b2:07:4e:88:5c:90:26:fc:
18:5d:59:9b:70:b7:8b:95:03:fa:4f:34:6a:b1:1d:dc:11:7c:
15:13:e4:c8:cb:41:4c:74:63:f7:9a:d1:b4:d5:37:2a:79:dc:
21:8e:07:b9:40:89:9d:4c:33:c3:62:45:3c:0e:db:2b:be:30:
f1:a2:5b:6d:18:79:d5:10:66:10:5f:02:09:bc:5c:ee:d2:c3:
8b:4c:70:75:65:34:e1:88:d8:63:b8:ec:21:89:65:4b:f6:f2:
f3:48:55:41:f0:79:73:75:60:a7:ec:89:df:9b:25:46:5e:60:
95:7d:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:55:33 2025 by rpki-client