Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9B9716EDCB111EF80E9EA67762E951A.roa
File: B9B9716EDCB111EF80E9EA67762E951A.roa (raw, json)
Hash identifier: xo4lDKehr4el31C0VJgM5m2jJ/0J0gT8N0PwCvAFl8c=
Subject key identifier: 82:0D:37:DA:89:26:6C:0D:44:BE:CB:EC:1A:22:D5:36:FE:41:43:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011509
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9B9716EDCB111EF80E9EA67762E951A.roa
Signing time: Mon 27 Jan 2025 13:22:15 +0000
ROA not before: Mon 27 Jan 2025 13:22:12 +0000
ROA not after: Sat 08 Feb 2025 13:22:12 +0000
asID: 7018
IP address blocks: 156.238.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70921 (0x11509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 13:22:12 2025 GMT
Not After : Feb 8 13:22:12 2025 GMT
Subject: CN=67978887-476c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:16:07:23:a0:49:5f:5d:5d:76:80:65:4d:
7a:93:f8:91:d3:8a:79:d9:b5:af:10:67:83:35:37:
5b:94:9f:9b:79:16:a4:57:7a:94:72:ae:51:3d:e4:
ea:9a:2f:8d:35:60:84:ae:c0:d1:1c:79:17:42:75:
b3:0a:23:b2:d5:af:d2:59:aa:22:38:e2:5d:25:cd:
70:1d:cc:c2:c7:b1:d0:e3:f4:9a:88:ef:b8:61:d3:
3c:bb:18:14:fa:2c:a5:fb:99:48:1f:5c:8c:74:8d:
17:09:af:01:a7:9a:0d:0b:1b:82:8f:1f:3b:0b:df:
44:2b:74:db:cd:00:23:33:a4:14:94:fa:9e:1e:b6:
40:61:9b:4e:c6:47:0f:64:db:56:96:e4:9e:96:b3:
29:c3:32:79:73:5f:22:5d:2d:65:ec:04:98:0b:3e:
77:66:6b:e7:4c:d5:ee:76:7e:b2:52:8d:c3:24:c8:
c9:b5:69:d7:08:1c:c4:42:a9:13:8b:15:06:b9:3c:
f5:ca:95:f3:3f:d9:4e:ef:28:83:3a:7c:eb:90:ad:
0c:78:6e:d1:89:5d:ca:db:12:61:d7:b9:54:55:5c:
9d:4b:4d:9b:ba:f8:a0:3d:9b:56:de:6b:c2:6b:dc:
3a:25:44:b9:dd:bf:27:9c:b3:e5:91:c8:6c:2d:93:
aa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:37:DA:89:26:6C:0D:44:BE:CB:EC:1A:22:D5:36:FE:41:43:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9B9716EDCB111EF80E9EA67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.0.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:a1:4d:da:80:8e:7a:a7:f6:6b:dc:b2:d2:58:5a:28:50:f2:
4f:35:b5:41:41:dd:c0:c0:8b:64:d2:96:82:fb:8a:f6:e4:02:
f4:bb:59:6d:b0:ca:89:ca:bf:1c:1d:17:0f:7b:d8:95:80:62:
8d:25:7a:a1:89:59:38:41:9e:21:5d:7f:8b:43:e4:ea:51:c5:
8f:c1:61:0a:6c:49:31:f1:79:54:08:18:fe:7e:52:a9:90:9c:
89:68:09:37:04:a4:00:2a:c9:01:5b:b2:e4:f1:8b:d9:bb:df:
2d:7d:a9:68:64:f7:f5:18:ba:af:15:20:6f:92:4e:79:52:07:
da:4d:67:00:70:44:f5:27:26:77:2c:0e:6f:78:6c:e4:1d:a9:
c3:89:ea:7d:f8:1a:e0:29:7d:4a:be:e7:c6:a3:8e:2d:52:99:
e7:8d:46:7c:c1:7e:9b:4d:c9:a9:fb:7e:c9:85:52:33:50:1d:
83:30:51:e1:bf:dc:8d:68:d9:bc:43:71:58:ac:f7:ca:32:04:
93:f2:55:c5:43:6c:2b:8f:4a:ca:d9:47:1c:c2:cf:fb:6f:fd:
af:38:5d:14:11:3d:f4:6b:2a:ef:41:43:8d:84:63:51:e9:e8:
c0:6b:ca:74:f4:ce:df:0e:9c:56:e8:96:05:fc:c3:15:50:8c:
fb:38:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:53:20 2025 by rpki-client