Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B136F2BAD97211EF98B7FC7E762E951A.roa
File: B136F2BAD97211EF98B7FC7E762E951A.roa (raw, json)
Hash identifier: Dx4v8+913jQk5kZQwpYUeX5plH3CaxoD47kuvgLuqsM=
Subject key identifier: 1C:57:69:6E:31:7A:1E:0D:30:7F:2C:C6:E5:BB:4B:A5:83:58:BA:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B136F2BAD97211EF98B7FC7E762E951A.roa
Signing time: Thu 23 Jan 2025 10:13:29 +0000
ROA not before: Thu 23 Jan 2025 10:13:26 +0000
ROA not after: Sat 15 Mar 2025 10:13:26 +0000
asID: 138915
IP address blocks: 156.244.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69386 (0x10f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 10:13:26 2025 GMT
Not After : Mar 15 10:13:26 2025 GMT
Subject: CN=67921649-4e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:e5:1d:07:ef:c7:7d:c2:d8:e6:76:06:67:
f9:52:b7:ca:9e:c1:98:d7:9b:5a:3e:91:b2:12:e9:
83:ce:d3:02:e7:68:ef:03:43:50:c8:ec:e1:4c:1d:
c2:7e:cd:9a:ca:85:d0:77:13:71:eb:26:f8:a1:f6:
80:f7:88:f1:d4:7d:84:1d:a0:45:f8:6c:14:5c:b5:
35:e2:5e:25:03:b3:da:f2:d1:7a:08:f5:0a:30:ca:
95:00:f7:e3:16:eb:fe:c2:f5:c9:19:5b:dd:f6:6a:
81:8d:56:21:5f:85:a4:6f:e8:5f:2c:6c:86:f8:ad:
38:97:48:61:58:64:19:24:58:09:52:7a:31:35:95:
da:27:b2:42:1c:54:da:36:d1:a9:f4:5f:24:1d:e9:
8c:73:3e:ff:90:7c:33:84:f4:19:78:35:88:82:58:
cd:86:2f:99:27:db:4a:72:e6:60:6f:fa:99:c7:65:
cd:ef:04:7e:b7:98:4b:fc:ff:56:1a:8e:52:88:36:
44:0b:71:14:35:f5:19:29:5f:f8:21:1f:83:e5:e0:
37:be:61:39:fb:06:32:eb:a9:86:a4:be:f8:3b:db:
d0:7e:b9:16:dc:52:05:40:63:d3:d1:ff:06:34:aa:
06:20:76:c4:33:33:22:8e:22:6e:1e:99:f9:fb:50:
4c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:57:69:6E:31:7A:1E:0D:30:7F:2C:C6:E5:BB:4B:A5:83:58:BA:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B136F2BAD97211EF98B7FC7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.6.0/24
Signature Algorithm: sha256WithRSAEncryption
40:9e:62:73:b2:d3:33:49:ba:77:0e:c3:bb:8e:7f:82:2b:ef:
cf:4e:44:06:05:86:ce:d0:33:0e:60:65:af:0a:65:4f:e1:ab:
3c:35:dc:b4:a7:0b:69:72:67:e7:46:20:85:8a:23:dd:b4:06:
99:7c:18:dd:67:f0:66:e6:52:62:d5:ef:83:b6:e0:58:2d:ad:
d3:12:43:1f:98:28:25:15:97:f4:93:d2:63:74:e5:e0:15:27:
88:6a:7d:36:d0:12:9f:35:0e:26:22:75:07:0e:87:dc:80:65:
af:a7:9c:ae:a5:18:4e:68:df:7f:62:3a:4f:14:36:d4:91:0d:
a1:81:f1:65:bd:27:71:3a:1f:d5:90:6f:4f:ed:4c:e2:a3:b3:
05:93:0a:04:b8:5d:c8:22:99:4a:8e:63:59:70:1a:20:54:56:
7a:8d:ea:d7:54:98:41:a9:e5:85:f3:82:78:90:40:bb:84:02:
7f:b8:05:89:04:43:f5:d4:33:a5:f9:c8:fb:24:d9:5f:e6:19:
08:78:06:ea:d3:72:e0:92:67:5b:87:51:75:f3:e3:5b:87:5c:
63:83:3b:cf:9a:60:42:d6:1c:91:5d:7a:4c:69:05:37:52:8c:
08:0d:75:2f:df:10:62:28:b7:f6:d7:f9:01:e9:f4:77:07:19:
bd:b0:c1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:47 2025 by rpki-client