Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7DDB2A4DBFA11EF97036695762E951A.roa
File: B7DDB2A4DBFA11EF97036695762E951A.roa (raw, json)
Hash identifier: fHKHYqXD2g8gVZ2FlGdGU0GZgMMmWBQpD8jmkkE20yg=
Subject key identifier: 41:24:9A:92:4E:16:B3:27:E2:C0:BF:63:18:4E:C4:27:EF:C6:B2:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7DDB2A4DBFA11EF97036695762E951A.roa
Signing time: Sun 26 Jan 2025 15:32:15 +0000
ROA not before: Sun 26 Jan 2025 15:32:11 +0000
ROA not after: Sun 23 Mar 2025 15:32:11 +0000
asID: 63139
IP address blocks: 156.227.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70622 (0x113de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:32:11 2025 GMT
Not After : Mar 23 15:32:11 2025 GMT
Subject: CN=6796557e-39cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:5c:f1:42:2f:16:bb:64:f4:b2:02:c8:40:
b2:0e:d9:eb:cb:f3:9e:db:de:32:ba:b9:47:ec:0d:
66:fe:e9:6a:65:c9:ed:6f:45:0c:9c:c6:3b:70:43:
0f:3e:cf:c1:bd:41:8b:d9:fe:79:22:ca:a4:20:8b:
f5:88:17:d6:b5:a8:6b:7a:5f:d3:7c:94:78:1c:54:
23:d7:4d:79:24:75:5b:d9:ab:dd:bf:98:82:ee:c4:
80:89:91:4b:ec:3a:1b:d9:16:07:6e:39:07:63:56:
bd:08:a4:6b:cb:20:19:43:68:38:df:63:18:a8:d4:
98:ee:4d:06:96:d4:10:9e:a8:ba:22:f8:7a:21:6d:
e5:fe:3d:19:7d:31:5d:15:26:28:39:d5:c8:5a:90:
bf:54:53:ef:29:04:0c:88:59:6e:27:67:27:ab:b3:
f2:26:82:ed:5c:75:03:66:ee:f8:8a:1d:78:59:90:
b5:a8:27:aa:0d:12:d2:b9:c4:71:dc:a3:8e:02:d8:
2d:3b:2b:79:72:1f:0c:ac:29:05:87:40:08:1e:e0:
b5:b6:06:24:fd:fb:50:b8:60:9b:f4:4c:d8:0d:b9:
68:d4:ab:7f:57:80:85:25:16:23:07:8e:ed:ca:9a:
08:e3:b3:a4:0d:0d:44:e9:91:e9:23:d4:69:21:f9:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:24:9A:92:4E:16:B3:27:E2:C0:BF:63:18:4E:C4:27:EF:C6:B2:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7DDB2A4DBFA11EF97036695762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.200.0/24
Signature Algorithm: sha256WithRSAEncryption
22:3e:e9:30:3b:6a:7c:6f:3b:6e:74:0b:85:6b:24:1c:31:d4:
34:33:69:81:f8:e3:07:48:8e:cc:8f:d4:7e:6d:a7:dd:6b:c0:
b2:0f:d4:18:fc:46:a7:1a:f1:5b:11:e4:7b:07:56:0a:9a:80:
ab:bf:60:0d:a6:8d:ab:79:19:ec:00:a6:03:23:fd:3a:90:1d:
d0:72:8c:a8:34:a7:a4:e0:56:d5:b2:25:3e:32:36:05:b2:d3:
07:94:96:4d:8d:c8:96:a8:fd:e9:42:12:3a:25:ca:3d:c1:b8:
27:70:84:63:76:9b:e1:10:94:33:cb:34:aa:a1:01:75:53:e2:
9d:4d:15:bb:12:49:9f:aa:80:44:41:0e:e5:f4:45:6a:0d:0b:
37:42:58:33:68:d6:a4:a8:5b:6f:d2:f5:c6:e0:79:c7:bb:0f:
45:c4:2c:6b:ec:19:c0:ad:c2:5d:2f:e9:50:d4:1c:03:5d:0f:
07:f9:e8:10:ab:9f:33:24:78:dd:75:b1:c0:77:e7:e2:39:fe:
d7:08:7f:62:f7:98:af:ef:e6:91:e4:1a:e2:b7:3e:c5:fd:f1:
91:61:87:85:e3:f6:22:b8:0f:9f:f9:cd:8e:9e:34:a8:92:e1:
86:18:7a:76:3f:8c:c2:e5:a8:a2:4e:34:ca:99:5b:3b:b6:74:
c2:7f:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:32:07 2025 by rpki-client