Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6317CBCCCA711EFA21CE47D762E951A.roa
File: C6317CBCCCA711EFA21CE47D762E951A.roa (raw, json)
Hash identifier: nB1Adn01miPHn7SMcRtlx1m5d8s+lzr3Eb8oAuHJdzQ=
Subject key identifier: B2:7D:EF:FB:E1:F8:38:83:BC:ED:D5:8D:D8:3A:00:AA:D2:ED:5E:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F9CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6317CBCCCA711EFA21CE47D762E951A.roa
Signing time: Tue 07 Jan 2025 03:30:43 +0000
ROA not before: Tue 07 Jan 2025 03:30:39 +0000
ROA not after: Sat 13 Dec 2025 03:30:39 +0000
asID: 984
IP address blocks: 156.230.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63950 (0xf9ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 03:30:39 2025 GMT
Not After : Dec 13 03:30:39 2025 GMT
Subject: CN=677c9fe3-6354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:57:88:2d:31:eb:11:af:35:f4:c6:e9:6d:
bd:a7:34:88:25:a8:6a:d9:75:ec:da:1c:0a:dd:fc:
b9:3c:24:62:da:49:13:cc:bd:c2:ac:c0:d4:b3:08:
00:4d:4c:fb:0d:82:d9:5d:02:36:1a:fc:15:14:8a:
10:11:b6:d8:cc:68:ca:c3:c8:9f:b1:a8:bb:f4:6e:
90:f9:c0:ed:fb:d1:dd:82:5a:c9:c9:16:2d:5f:ea:
bd:4e:ee:6c:74:49:54:68:8b:a8:32:50:06:53:89:
5a:da:b3:4b:48:60:84:ca:8f:5e:db:1c:cb:43:dc:
b9:2e:96:a4:04:fc:be:7a:aa:0c:5c:da:d3:13:f4:
8c:5a:94:55:eb:8a:92:3b:d4:f3:c2:43:c0:ab:86:
19:62:d0:17:f1:f4:2e:e7:02:f8:a9:05:5c:f2:69:
3d:07:cb:ad:f1:4d:ed:38:13:41:3f:54:c5:d0:c9:
11:9b:db:18:fb:1c:c3:ef:19:36:ca:81:2d:6d:b2:
84:40:f2:d0:35:1b:bd:2a:d4:4e:8b:1c:54:61:6d:
ad:15:ad:c6:e5:d0:9d:4e:77:fc:04:04:dc:ab:c0:
40:fd:fc:79:de:0b:48:c1:69:f2:d2:54:7a:e1:43:
2d:a0:d2:86:54:d1:81:9e:89:36:c0:53:56:22:66:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7D:EF:FB:E1:F8:38:83:BC:ED:D5:8D:D8:3A:00:AA:D2:ED:5E:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6317CBCCCA711EFA21CE47D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.16.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b2:97:78:e1:34:5a:80:2d:ad:4a:9b:a7:ac:17:e0:9d:e3:
e1:ae:1a:65:16:4b:e4:dd:22:25:3f:36:fc:f5:c8:cc:8f:be:
0b:d3:19:4b:b9:6d:7e:42:9f:e5:45:45:db:a3:f6:1e:c1:99:
8e:08:dd:d3:0f:af:e6:f3:c5:36:93:de:70:ec:0d:d9:58:42:
8c:01:51:0e:6e:eb:c8:e8:64:96:e8:96:22:04:ee:7c:19:3e:
90:10:54:18:6c:b3:73:3d:5e:2c:e1:fb:f7:da:a9:68:03:0f:
6e:22:dc:73:ee:63:fd:e5:93:8b:11:58:87:c1:7f:00:c7:68:
2b:52:e4:7d:7f:b7:4c:ee:e7:d8:a3:b4:fb:53:12:dd:9a:7d:
18:95:7c:2d:dd:4d:0a:2f:87:41:68:54:49:76:46:b5:ae:b7:
a9:13:a7:fb:dd:c9:c4:ab:ee:98:06:ab:fe:a5:b3:67:06:9a:
34:95:93:53:1d:ac:af:df:69:67:8b:31:57:8e:e3:38:f6:8c:
8a:68:ed:a8:e2:f7:a2:f8:31:92:11:17:b2:2e:29:27:74:f1:
13:07:33:fc:58:af:c3:1a:4c:6d:fb:2c:18:16:c8:ac:46:9c:
11:6c:d4:61:4b:63:b0:73:71:18:a9:1d:92:33:b6:21:d2:03:
68:27:0b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:21:16 2025 by rpki-client