Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B97FCCD8D95611EFA80E9443762E951A.roa
File: B97FCCD8D95611EFA80E9443762E951A.roa (raw, json)
Hash identifier: GHL1f+aUO7QFke0bgODKDc1ZS7+BRX2HSE2oAp6FSk0=
Subject key identifier: A4:C1:4F:6B:63:B8:88:CB:6C:9D:7A:9A:54:2D:E5:71:E8:5A:6C:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B97FCCD8D95611EFA80E9443762E951A.roa
Signing time: Thu 23 Jan 2025 06:53:17 +0000
ROA not before: Thu 23 Jan 2025 06:53:14 +0000
ROA not after: Sat 15 Mar 2025 06:53:14 +0000
asID: 138915
IP address blocks: 156.244.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69285 (0x10ea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 06:53:14 2025 GMT
Not After : Mar 15 06:53:14 2025 GMT
Subject: CN=6791e75d-4620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:98:4b:1e:91:42:27:2e:fb:d6:f8:9f:49:
47:81:5b:de:55:90:b6:80:28:8e:da:d8:5a:dd:27:
7b:6d:aa:f3:36:04:6e:5e:54:70:5f:61:cd:25:df:
17:51:1e:80:e9:6c:8f:80:dc:f0:3e:e9:b2:2c:c0:
7f:5d:8a:56:4b:47:89:00:ef:a1:43:56:41:39:47:
f6:da:b8:d4:fd:07:78:6b:3d:03:c9:8b:e9:2c:3c:
6c:d3:f0:9f:2d:e4:26:b1:a5:bd:8d:8f:2b:22:58:
ef:99:b8:eb:b5:11:63:92:56:1c:ea:ed:d5:1a:50:
d8:2a:e7:37:a9:14:4f:0f:7d:f0:cd:47:a8:d8:97:
43:0a:8a:44:5e:a6:20:14:ca:e2:11:92:7e:1f:5f:
20:2e:83:01:9c:e9:77:eb:a0:01:b7:08:bb:48:cc:
2c:52:e0:7e:22:58:e3:45:b9:b1:16:27:47:ed:30:
14:b4:4d:1f:a2:76:8e:aa:a1:f8:37:7e:6c:13:3c:
50:b2:af:a0:50:22:67:6e:36:81:ee:84:99:06:dd:
e7:70:00:82:00:66:10:d7:7a:cb:d1:ca:49:87:09:
54:e2:d8:77:37:94:99:a7:f4:8b:07:3f:5e:d1:e7:
18:7a:6a:ac:90:cd:20:99:53:29:04:f2:63:ab:06:
0b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:4F:6B:63:B8:88:CB:6C:9D:7A:9A:54:2D:E5:71:E8:5A:6C:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B97FCCD8D95611EFA80E9443762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.34.0/24
Signature Algorithm: sha256WithRSAEncryption
78:80:62:c9:b0:99:b8:ec:93:a0:99:5b:a1:66:df:4f:8b:f8:
1d:90:13:c1:60:db:fa:60:d3:32:7f:16:b4:c0:87:ba:09:fc:
6b:63:e8:53:6b:47:09:17:2f:15:4a:aa:af:b7:b4:dc:fb:02:
0a:a5:2a:bc:3a:7b:c7:d1:d5:cc:a1:2b:c0:c4:b5:21:99:1e:
25:f2:37:ab:9c:18:e6:29:03:3d:67:f5:81:2a:60:a7:85:3f:
a3:73:b0:48:90:58:04:15:55:10:c9:22:bc:89:6b:d4:7d:2a:
ef:db:38:94:3a:8a:e6:e5:57:da:ff:98:6c:6f:7c:9d:e6:74:
72:55:23:de:b3:97:d0:dc:1d:d2:d2:09:5c:8b:1f:d6:6a:22:
a1:75:67:42:64:ff:c8:23:7d:ee:6f:35:4a:34:31:00:1c:c9:
6a:56:d8:eb:1e:8e:93:de:5b:de:f4:26:fb:8b:fe:83:7c:7a:
97:64:dc:44:53:47:3b:ed:fd:dd:91:2b:e0:b9:10:1b:ca:8c:
7e:c2:61:65:3b:e3:2b:c0:0a:28:70:29:8d:5d:ba:c8:63:a8:
b5:96:07:37:c6:72:6e:d9:68:a0:1f:d7:65:e1:44:9a:ce:64:
51:ff:71:49:7c:f5:54:69:66:c2:11:eb:80:56:d8:d7:28:38:
7a:e2:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:53:58 2025 by rpki-client