Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4AB6608DCD611EFA919FB5C762E951A.roa
File: B4AB6608DCD611EFA919FB5C762E951A.roa (raw, json)
Hash identifier: Yc8zY89NroZEuQIdlWJYYkuUg0srm6G5l5BOg94L8Ho=
Subject key identifier: 99:20:45:CF:60:6D:94:21:AB:87:BF:E0:0C:7E:3F:92:44:D3:3E:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011569
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4AB6608DCD611EFA919FB5C762E951A.roa
Signing time: Mon 27 Jan 2025 17:46:58 +0000
ROA not before: Mon 27 Jan 2025 17:46:55 +0000
ROA not after: Sat 15 Feb 2025 17:46:55 +0000
asID: 39600
IP address blocks: 156.237.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71017 (0x11569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:46:55 2025 GMT
Not After : Feb 15 17:46:55 2025 GMT
Subject: CN=6797c692-c467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:61:45:1c:5d:fc:24:15:e3:9b:81:66:62:
88:f9:a2:2c:91:7d:0e:2e:3d:81:f3:7d:81:8f:b6:
bb:e2:3b:85:ea:6a:f1:c1:a9:5f:da:8a:15:df:98:
7f:72:56:26:fa:1c:aa:e8:5b:c4:a2:ea:21:f8:5b:
77:cc:28:f1:06:86:e0:8d:47:d3:fe:ab:71:ca:89:
b8:d5:8f:2b:86:bb:02:21:37:f1:18:a1:c7:0c:cd:
12:05:13:2f:06:a9:eb:41:76:9c:b6:1d:e5:6e:69:
6d:33:42:1e:da:4c:d2:5b:f1:55:5a:a2:70:b5:3c:
aa:be:c7:3d:8b:05:08:ec:7d:82:ec:2c:75:37:d6:
3a:58:e8:9f:6b:bf:6d:2d:21:db:6c:da:2b:d8:d5:
c3:74:99:32:5d:10:07:9b:a1:8c:84:6e:ae:13:8c:
e5:fc:fd:de:50:bf:79:d5:0f:ed:b1:5b:48:6c:26:
15:36:26:9f:49:e5:b0:d3:4b:86:5c:21:c6:58:cb:
15:16:1e:9a:33:0e:8f:ef:9f:b7:1b:7e:d3:e7:c5:
4e:bf:86:58:e5:8a:26:2c:71:39:81:f7:37:2b:57:
86:54:94:3d:e9:7c:54:b3:2b:a8:da:ce:37:f2:f5:
2d:7d:0f:5e:e1:8d:15:38:fc:ca:e0:3a:c7:b9:23:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:20:45:CF:60:6D:94:21:AB:87:BF:E0:0C:7E:3F:92:44:D3:3E:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4AB6608DCD611EFA919FB5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.123.0/24
Signature Algorithm: sha256WithRSAEncryption
74:76:58:45:1b:8f:4d:d3:c5:2d:4e:2c:b7:c8:af:f2:83:94:
48:0f:ec:73:ef:35:1c:ff:bd:54:3f:31:cc:a5:cc:8a:d1:8a:
e0:e7:33:06:8f:7e:07:94:08:2c:b1:c3:3a:88:1a:10:9a:00:
85:5f:3f:e0:de:4b:c8:9e:45:40:49:14:24:e7:71:6f:04:03:
46:87:e5:16:b8:f4:cd:ac:c8:46:4a:d0:67:b2:b9:94:4c:fe:
f4:52:0b:90:49:61:fb:44:89:fa:2b:b9:f7:51:88:c8:12:5c:
e8:54:c4:25:40:60:84:f9:c9:fb:f2:bc:6f:e3:61:22:d1:cb:
a5:63:99:90:67:37:ab:48:c8:e0:a8:da:b4:c1:51:28:62:29:
09:30:40:ec:88:6e:66:69:10:a4:41:78:bc:23:03:e4:58:9c:
9d:13:10:ca:74:f3:9b:97:a6:7f:d5:e3:d6:51:c7:9c:0f:c6:
2c:eb:bc:db:be:41:22:0d:22:75:03:b2:43:32:c7:43:bb:d1:
0d:86:4c:85:8a:8a:06:65:ae:0c:c9:c8:8b:ed:32:0c:f1:cc:
1c:d9:f1:8f:ad:1a:09:27:20:3c:a2:fe:d9:ff:29:1f:33:3e:
01:8c:c6:ff:a1:1d:01:ff:95:cc:56:22:aa:33:6f:74:45:76:
45:10:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:23:46 2025 by rpki-client