Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1CBDDB6D3D711EFB6AB58A3762E951A.roa
File: C1CBDDB6D3D711EFB6AB58A3762E951A.roa (raw, json)
Hash identifier: LqwZlT6xliP897gZoV8o7zoUq04tA7aUEu75enP5et8=
Subject key identifier: DB:5A:6B:03:39:52:E5:A3:0B:C3:A5:85:C5:00:BE:4C:36:BE:EF:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1CBDDB6D3D711EFB6AB58A3762E951A.roa
Signing time: Thu 16 Jan 2025 07:01:49 +0000
ROA not before: Thu 16 Jan 2025 07:01:46 +0000
ROA not after: Thu 06 Feb 2025 07:01:46 +0000
asID: 206283
IP address blocks: 156.238.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67762 (0x108b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 07:01:46 2025 GMT
Not After : Feb 6 07:01:46 2025 GMT
Subject: CN=6788aedd-abd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:c6:3b:84:8b:46:51:20:29:0f:96:ac:ca:
d0:07:94:16:80:c7:65:6a:f2:92:63:dd:36:bf:b7:
09:34:63:a2:c0:6a:70:5d:da:61:d4:37:48:70:c7:
85:42:e5:2e:70:c0:14:c8:4a:9c:8b:9b:50:43:60:
6b:92:16:81:85:04:ae:99:4b:7c:eb:85:1c:a9:52:
13:d0:a6:ed:bb:5d:4e:54:1c:67:25:4b:c9:7f:cd:
bb:18:f5:86:8a:fb:ca:a0:03:cd:8b:38:f4:b4:30:
7e:af:f6:b3:09:b4:15:e7:33:59:dd:64:97:be:16:
ee:08:ea:12:7e:b1:2e:06:59:ec:4c:60:f0:f9:6d:
e1:59:e4:de:e5:f5:96:fe:22:4e:87:4b:9f:74:97:
2c:ce:af:0e:88:e3:93:d1:61:cd:40:9e:fb:49:84:
10:83:0d:8d:34:a8:37:75:90:e0:76:02:3a:bb:c5:
59:3c:fd:38:df:6f:80:7e:54:5d:e5:e1:bf:51:43:
90:f3:ba:19:17:0a:68:cc:2a:09:6f:8c:65:e2:9b:
53:eb:20:a7:42:33:42:21:0c:05:30:65:f8:8c:16:
a6:fc:77:29:23:60:89:1c:cc:3c:2b:be:f3:66:25:
24:41:f9:20:9c:2a:d4:4a:98:23:f1:66:4b:06:2d:
67:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5A:6B:03:39:52:E5:A3:0B:C3:A5:85:C5:00:BE:4C:36:BE:EF:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1CBDDB6D3D711EFB6AB58A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.85.0/24
Signature Algorithm: sha256WithRSAEncryption
14:bd:2f:d6:1f:e4:80:3e:a0:4c:ba:21:45:47:9d:80:80:d9:
83:cf:4a:e0:b3:ea:2e:39:c0:da:65:30:0d:0f:fd:f3:8f:5f:
07:e9:81:8c:78:46:47:18:75:ee:fd:da:db:08:f0:f7:b4:51:
04:f7:1f:0b:b2:04:b4:f0:a0:04:09:a3:48:0f:d2:16:fc:19:
b2:3f:d0:b9:23:d2:78:08:d7:b7:c1:b7:4a:8d:93:ab:2e:62:
d5:3d:e0:92:36:e9:00:21:21:58:f7:12:2f:f7:ba:b7:11:c7:
82:9e:2a:d8:39:c1:29:45:bc:63:df:ff:b9:50:3e:a2:17:0e:
40:15:d5:02:3c:fd:68:70:1b:e3:68:8d:da:b0:a5:02:48:d5:
5a:6d:91:99:c5:24:f7:82:6d:83:4c:1e:29:93:a0:3f:91:25:
68:5e:ce:d3:72:f9:30:06:3f:c9:d5:5a:5c:50:2c:61:be:ed:
ff:7b:fa:25:4e:68:b2:a7:bd:ae:bd:37:02:17:65:7c:09:5f:
30:19:0f:2b:7c:05:ba:0c:f8:c1:60:0b:a9:15:f5:b1:b7:89:
85:29:7e:a1:f2:8c:eb:eb:d5:88:54:ff:35:d3:8a:51:67:cb:
80:14:d6:3c:47:ee:a6:90:ef:47:af:d6:43:1d:07:a4:5d:9b:
5d:ee:11:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:23 2025 by rpki-client