Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1011C7ADFF211EF8DB2E257762E951A.roa
File: D1011C7ADFF211EF8DB2E257762E951A.roa (raw, json)
Hash identifier: DcFDbawSDVt6zt05+ScOUpALl7biNwEkPHneTZ4AA/E=
Subject key identifier: F5:F6:83:D6:27:74:57:B7:D6:94:C9:58:39:CD:6F:20:08:3F:C0:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01167D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1011C7ADFF211EF8DB2E257762E951A.roa
Signing time: Fri 31 Jan 2025 16:45:46 +0000
ROA not before: Fri 31 Jan 2025 16:45:42 +0000
ROA not after: Tue 11 Feb 2025 16:45:42 +0000
asID: 55714
IP address blocks: 156.238.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71293 (0x1167d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:45:42 2025 GMT
Not After : Feb 11 16:45:42 2025 GMT
Subject: CN=679cfe39-a45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:e5:ca:b0:a7:a1:c2:d7:69:fb:e2:88:e9:
41:73:0d:a2:bd:3f:bd:8c:85:0c:46:01:7f:eb:a6:
cf:3d:05:5c:a3:21:39:3d:ca:24:87:a5:50:b5:41:
40:e6:de:aa:8c:83:5a:60:3e:fa:59:1d:94:bc:61:
d9:20:fd:1a:58:88:ee:46:d0:9c:2a:1d:78:d2:0d:
61:10:61:ed:32:53:8c:3a:e8:4d:9d:60:a5:1d:76:
4a:28:2c:ce:89:ea:19:ce:a8:ec:f3:11:ef:a8:e6:
fb:26:97:bc:17:2d:11:ae:b4:47:87:22:f2:fa:ca:
be:37:d5:cd:29:a9:5a:c4:73:25:15:b3:50:98:d8:
b9:47:40:c3:7c:81:03:f2:0a:ab:8b:09:b2:7e:7c:
57:82:8b:1b:c2:79:82:de:95:d4:42:11:40:ea:55:
08:ef:bb:45:70:dd:da:e9:38:d7:3c:f9:61:bb:d4:
68:20:04:f2:1a:33:93:74:dd:55:bf:a5:f3:10:58:
90:15:9f:e2:8f:c9:88:d3:35:06:fb:45:14:71:68:
2b:db:9c:31:76:bd:8c:d5:7f:53:09:ff:06:32:3a:
2a:11:b7:0b:96:6d:67:49:53:ab:f7:ef:9b:0e:6c:
c1:07:a2:93:50:3d:9d:7b:cf:5f:71:40:4f:2f:6d:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F6:83:D6:27:74:57:B7:D6:94:C9:58:39:CD:6F:20:08:3F:C0:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1011C7ADFF211EF8DB2E257762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.74.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c3:bf:84:58:97:7b:f3:05:cc:ff:03:33:fc:04:08:f7:28:
b5:c3:fd:f6:c0:cc:0d:52:02:ab:e4:92:45:c2:96:58:e9:17:
6c:23:cc:8c:a0:e2:77:c1:14:40:f3:61:0f:35:e3:f0:12:85:
a5:81:35:5a:08:26:04:0b:da:68:e7:17:14:30:82:c2:79:9d:
44:71:36:f7:f4:45:81:26:56:62:7f:4a:dc:16:a0:a6:c4:41:
b9:37:1c:85:ad:c8:a3:a5:4d:04:f8:3f:d9:df:df:f6:40:28:
5d:54:7f:f1:bb:90:72:af:39:77:00:3a:10:0c:75:d3:c7:e0:
b8:7a:e1:37:d9:60:e8:77:67:3c:42:a1:25:61:b3:94:4f:bd:
c0:61:89:9d:85:f4:95:c1:c9:dd:b7:1b:68:69:5e:f8:50:00:
e4:72:c9:d0:48:ba:06:7d:1e:a7:55:43:79:d4:96:50:17:19:
86:dd:b4:e3:31:ee:61:98:73:cd:6d:f9:6b:a2:c1:8c:20:9d:
7e:63:af:bd:50:1b:33:6c:0c:22:2b:c3:3f:04:68:48:25:c7:
2b:c5:3c:9b:5e:f7:d9:90:98:2c:fd:43:3d:ef:65:83:2d:f5:
7b:bf:9b:d8:d6:2b:38:cc:ce:4b:c5:0e:be:8e:cb:30:da:30:
ed:c0:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:11:52 2025 by rpki-client