Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B90F8F7ECD5B11EFBD3F986A762E951A.roa
File: B90F8F7ECD5B11EFBD3F986A762E951A.roa (raw, json)
Hash identifier: ftSJbE5Y6oOvfkW6gm1QTR9Rql11Whlt0KMTyOz0DB4=
Subject key identifier: A5:42:9D:FB:B6:29:9A:60:07:85:41:4E:EA:9A:C6:A2:64:35:A5:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B90F8F7ECD5B11EFBD3F986A762E951A.roa
Signing time: Wed 08 Jan 2025 00:58:50 +0000
ROA not before: Wed 08 Jan 2025 00:00:47 +0000
ROA not after: Sat 13 Dec 2025 00:00:47 +0000
asID: 984
IP address blocks: 156.247.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65295 (0xff0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 8 00:00:47 2025 GMT
Not After : Dec 13 00:00:47 2025 GMT
Subject: CN=677dcdca-a3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:7c:5f:3e:ef:cd:1f:85:bb:3b:b7:05:35:
9e:12:72:1e:a5:1e:91:06:91:c8:54:d9:e6:ae:a1:
ea:a6:1f:25:d7:69:71:bb:9d:25:b7:3c:45:20:37:
ce:39:77:5d:78:29:f7:14:72:34:96:0f:eb:01:5a:
93:69:db:4b:cc:d5:61:81:31:7e:fb:fe:ab:0b:9b:
e7:42:50:ec:b8:cb:46:3d:dc:bc:d9:85:93:ba:4c:
bf:8a:fa:cb:4c:db:87:60:38:55:80:01:e5:ce:4c:
43:06:27:1c:23:c6:c1:4c:2e:9f:2d:df:fe:c8:95:
02:02:ff:1a:9b:3e:e8:66:7c:47:78:57:89:5e:af:
65:ac:2d:ed:94:ee:83:56:5c:95:36:20:f0:3c:04:
1c:64:70:6f:24:b3:5b:a3:78:d4:35:d0:f0:43:8a:
2c:ca:99:9b:28:49:65:ab:c0:2e:a2:01:6e:ba:ab:
51:50:f8:f6:4a:af:3b:f7:80:9b:dc:a3:17:b1:ec:
e3:9d:cf:bb:1c:1d:c4:bf:cf:64:96:de:57:3c:fc:
e8:07:37:72:39:2c:af:5e:fa:cd:52:4c:4d:34:0d:
6b:95:ac:fb:c5:81:13:b0:40:58:1b:ce:76:61:38:
fc:89:ef:43:99:a4:aa:d7:b5:a3:23:62:87:90:47:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:42:9D:FB:B6:29:9A:60:07:85:41:4E:EA:9A:C6:A2:64:35:A5:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B90F8F7ECD5B11EFBD3F986A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.80.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f4:2a:9c:48:9c:bc:6b:c9:45:3e:36:db:22:34:37:16:27:
13:64:09:01:3c:51:48:c5:07:d1:1a:54:32:ee:da:24:89:0e:
5b:9e:55:6e:18:92:96:1a:d6:d9:78:74:fb:78:a6:56:c3:29:
68:e4:c0:54:84:18:5d:01:a7:4e:92:cc:3d:f1:df:c5:a7:99:
30:1a:63:4c:04:36:26:f2:72:04:2b:93:92:7d:b6:eb:a2:19:
fb:3f:ab:49:2a:56:86:00:50:5e:1d:fd:67:9b:fc:60:da:71:
db:17:26:e5:f6:e2:e4:8e:2d:84:30:d9:df:ba:5f:53:c7:dd:
5b:06:89:30:8b:4e:34:89:54:09:9c:24:26:e4:37:14:e5:5e:
89:00:51:29:d3:59:9e:54:d8:96:02:4d:9e:49:a7:de:40:bd:
78:d7:1b:b9:c3:73:30:10:38:f2:60:22:c5:8b:f0:5f:74:b4:
08:7b:ae:92:31:1c:be:86:b4:21:b9:63:dd:9f:e1:10:ba:b5:
d2:eb:26:9c:bf:68:c8:6d:ca:83:6d:ac:b6:8e:94:fd:d3:11:
67:b7:df:3b:ad:64:37:06:31:c6:d9:5b:38:fc:68:5c:c1:97:
86:1a:60:36:8c:0e:0c:66:b6:fd:a8:3b:b0:79:61:52:4b:83:
9d:92:a3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:20 2025 by rpki-client