Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C866D4C4DBE211EFB0FC9373762E951A.roa
File: C866D4C4DBE211EFB0FC9373762E951A.roa (raw, json)
Hash identifier: FDE8k8VqFi/5N6nvl20cROcC8XjjHWUbhqLGNFpzznc=
Subject key identifier: 70:60:8E:CB:06:34:80:0A:03:96:8E:D6:BF:0A:B0:60:58:72:5A:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011396
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C866D4C4DBE211EFB0FC9373762E951A.roa
Signing time: Sun 26 Jan 2025 12:40:54 +0000
ROA not before: Sun 26 Jan 2025 12:40:50 +0000
ROA not after: Tue 04 Mar 2025 12:40:50 +0000
asID: 203020
IP address blocks: 156.253.180.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70550 (0x11396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:40:50 2025 GMT
Not After : Mar 4 12:40:50 2025 GMT
Subject: CN=67962d56-6539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:83:aa:7b:e2:b2:ad:02:dd:38:f5:77:04:
4e:82:5e:6b:2b:5d:ca:87:81:66:73:69:36:f8:f4:
4c:2e:5a:e2:f9:00:40:6d:8d:45:4f:84:02:1b:c4:
32:79:57:34:88:80:cd:42:86:6a:7e:3c:3e:e2:16:
d3:ef:cc:d5:0f:ca:fe:66:58:fa:53:76:9b:17:2e:
fc:a3:89:9e:d6:86:19:49:65:32:c4:b4:c9:98:2f:
2d:a5:d3:47:ed:b4:5f:76:7f:0e:90:28:15:94:67:
5c:e2:8d:b5:c1:e8:be:83:b8:8f:97:33:e9:5d:24:
8d:74:ce:2b:68:54:b7:c0:2f:40:60:be:cf:43:25:
5b:79:78:50:c6:c3:20:1f:d8:c3:47:75:97:93:9b:
5b:51:c8:1b:1f:13:5d:fd:21:0c:15:8d:76:f2:db:
41:98:03:41:70:4b:64:dd:16:c6:88:3f:ef:83:f7:
29:de:57:59:91:f9:ad:9a:ea:53:b6:bd:b8:32:eb:
d9:26:0e:14:37:f3:fb:d0:ea:51:c4:94:03:c2:82:
bd:51:e3:3e:e1:3a:89:5d:0f:8f:d8:4d:93:c2:dc:
74:1a:d1:db:d1:29:d2:99:cd:38:c8:c2:47:18:65:
64:fc:05:ad:98:3d:33:66:02:89:e8:39:47:34:36:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:60:8E:CB:06:34:80:0A:03:96:8E:D6:BF:0A:B0:60:58:72:5A:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C866D4C4DBE211EFB0FC9373762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.180.0/23
Signature Algorithm: sha256WithRSAEncryption
18:cc:37:1d:07:fd:11:1e:44:80:2c:48:e0:b3:23:44:f1:e4:
f7:5e:06:37:44:d7:ea:35:be:89:54:86:14:80:b0:95:e8:fb:
0b:14:a1:6a:54:6e:9d:b4:1e:9e:8e:6f:74:c4:b0:a5:9a:71:
87:9e:73:17:79:00:8f:59:9c:5a:d0:c0:72:3c:12:77:ec:e2:
33:7b:7f:d5:03:e5:53:91:a5:0d:4b:8f:cd:e7:59:db:ab:67:
01:6f:98:34:e0:c8:31:fd:cf:1c:92:0d:35:e7:05:16:6b:af:
56:2c:cd:dd:08:a3:d2:2c:94:a5:f1:73:ff:ba:88:0a:30:24:
41:df:13:1b:04:27:5b:d3:89:9f:18:a9:19:fd:6d:fd:5a:fa:
22:f6:9d:33:ac:74:79:f4:22:bc:7d:22:79:13:3f:ef:b9:19:
11:c2:f7:5c:02:2a:58:3f:43:bf:09:c0:da:27:43:ba:5d:f3:
09:0f:6b:c7:0e:ad:81:b7:c4:e7:72:67:c8:d1:2d:60:b7:f2:
58:55:4c:7f:74:12:d0:45:c4:1c:e7:49:3f:99:04:47:19:14:
42:eb:b2:8e:7a:29:13:24:05:c1:75:3a:30:bb:64:aa:8e:f3:
ea:7c:2d:36:4e:64:b1:6f:cf:e4:5c:22:d7:38:85:70:53:a6:
83:54:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:24 2025 by rpki-client