Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D201A2D2DCD411EFB0207F51762E951A.roa
File: D201A2D2DCD411EFB0207F51762E951A.roa (raw, json)
Hash identifier: 9lqVnhgZI0f3Vl5cUKmQxiroX3ricS1rhYq2iT7xwW0=
Subject key identifier: 8A:D1:4E:0B:2B:6F:25:34:EE:65:24:09:A8:81:81:D7:C4:C2:3C:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01155D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D201A2D2DCD411EFB0207F51762E951A.roa
Signing time: Mon 27 Jan 2025 17:33:29 +0000
ROA not before: Mon 27 Jan 2025 17:33:25 +0000
ROA not after: Sat 15 Feb 2025 17:33:25 +0000
asID: 39600
IP address blocks: 156.237.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71005 (0x1155d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:33:25 2025 GMT
Not After : Feb 15 17:33:25 2025 GMT
Subject: CN=6797c368-0c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:b8:13:02:b5:6b:67:df:ee:90:34:e4:ec:
20:da:25:a8:a2:f8:65:54:ff:96:96:9c:7b:f8:a3:
bc:26:2d:cd:dd:bd:dd:5d:72:a7:10:e9:32:bd:6f:
10:67:05:38:b6:cd:50:55:4b:bb:d9:e0:14:ed:14:
35:75:64:b6:24:29:df:bb:c1:e2:c7:b1:04:76:9a:
e7:23:a4:aa:1d:46:ec:88:c0:ee:09:b0:a7:58:d1:
fb:93:e7:df:1a:dc:1c:ba:2a:43:04:eb:99:3c:3a:
d1:fa:65:ae:f2:3a:c9:1e:7a:d4:53:17:7e:52:9e:
f4:01:fc:88:69:6d:7f:7c:7d:59:98:bc:54:7a:61:
01:45:2d:7c:32:9b:87:3b:c2:32:8e:db:bd:4c:bc:
e9:72:6d:5e:17:96:b6:a5:b1:91:d5:d6:bc:7d:31:
67:03:11:16:89:8c:80:3e:7d:d0:67:1d:61:5d:98:
aa:2a:94:0f:cd:f0:35:b0:d3:4a:7c:52:99:ce:d0:
c1:4c:0e:8c:9b:64:52:bc:b8:c1:c1:11:0f:67:8f:
ca:05:b0:71:6d:f4:af:a6:75:4f:d0:b3:52:2f:33:
4f:c2:4e:28:3f:02:70:5d:92:7f:71:85:ae:94:24:
39:d0:ae:e5:73:34:0c:fd:f9:06:fd:a0:1c:1b:62:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D1:4E:0B:2B:6F:25:34:EE:65:24:09:A8:81:81:D7:C4:C2:3C:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D201A2D2DCD411EFB0207F51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.111.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ec:1e:9f:c8:d6:7d:ad:55:1d:e7:79:81:ba:7e:43:ee:0b:
0f:ef:cc:09:f2:16:9d:3b:6c:9e:13:07:dd:ca:e1:dc:be:bd:
be:72:07:df:60:c2:69:95:44:06:eb:1d:6e:47:c4:32:b7:a8:
1a:76:81:e6:ab:92:65:7b:1e:c0:72:12:4f:8f:06:a6:ed:ad:
93:fd:7d:96:62:97:51:2b:0b:87:d7:d2:24:2e:03:d9:4a:1d:
fa:ce:a4:f3:5c:82:48:99:ea:7c:e9:a2:2b:d4:75:5a:a5:b5:
c1:82:de:76:20:9a:4c:fb:8b:3d:2b:96:0e:3c:09:37:b2:35:
98:d3:fe:45:03:f4:79:19:67:52:ef:64:e2:20:07:77:bf:d2:
78:e5:95:9e:13:b4:11:18:5f:61:20:f5:bc:b4:c4:56:00:fb:
f6:c5:f7:0c:1c:cf:3f:73:d6:69:e6:49:8e:63:a3:d8:e6:ca:
e0:f3:aa:79:39:97:50:1c:a4:ad:eb:a8:a6:a9:c1:7f:2c:d4:
5b:5b:d8:1a:c2:0a:31:d4:13:00:fa:1d:4a:c0:2f:0c:f6:6f:
8f:d7:20:9a:e2:fe:e5:bb:2a:cd:a5:75:96:c5:39:0e:5d:d5:
cc:72:b9:a2:29:be:c7:93:f7:3e:dd:52:e7:93:c3:52:a1:ed:
90:3f:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:44:54 2025 by rpki-client