Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D33C3FE4D96F11EF8907516C762E951A.roa
File: D33C3FE4D96F11EF8907516C762E951A.roa (raw, json)
Hash identifier: z62VKNaijUhMoDAE9edD6RbSsvKiRV5RQXc6V9c5BT8=
Subject key identifier: C1:9C:72:43:DB:41:1B:BE:F2:49:FA:4D:CD:3B:89:11:DA:A3:20:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EFA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D33C3FE4D96F11EF8907516C762E951A.roa
Signing time: Thu 23 Jan 2025 09:52:58 +0000
ROA not before: Thu 23 Jan 2025 09:52:54 +0000
ROA not after: Sat 15 Mar 2025 09:52:54 +0000
asID: 138915
IP address blocks: 156.244.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69370 (0x10efa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 09:52:54 2025 GMT
Not After : Mar 15 09:52:54 2025 GMT
Subject: CN=6792117a-bcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:07:7c:9f:a5:3e:cd:74:0d:cd:e1:18:bc:
c9:33:27:79:51:a9:ac:ec:c1:4f:d6:ad:23:8b:7c:
f7:eb:02:a6:47:4f:e5:65:da:78:2b:e7:f7:b0:91:
6f:52:1c:17:f0:3b:cc:7e:00:78:33:cf:61:c2:d4:
a5:b7:17:2b:10:34:67:e0:b6:3f:63:b0:e8:af:15:
dd:5e:9d:21:79:20:b5:5d:29:9f:0f:b4:73:53:4e:
2a:98:02:04:39:db:f8:c9:85:ce:6b:07:de:6f:85:
26:fa:1f:60:1a:81:de:c9:e0:41:7b:10:fe:6d:4a:
88:29:2d:ae:3d:97:df:49:2a:f0:24:ba:6a:97:cf:
cb:98:78:65:83:a0:1d:e9:ba:a7:19:80:d6:0e:27:
0e:ce:ed:3a:96:95:ad:9c:a2:68:81:b5:bb:60:63:
62:9d:02:e0:38:8d:b6:2d:f3:cc:83:cd:a3:ba:4f:
c0:61:28:d8:2c:75:6c:24:35:8e:e7:5d:f1:9a:57:
bb:3c:a3:c7:23:89:b7:02:d0:90:c0:96:ab:5c:2c:
57:ca:a7:f4:84:03:43:0b:74:f3:58:d9:4f:c7:d3:
99:43:54:ae:02:a1:37:ca:6f:ae:0a:52:ba:74:49:
cf:66:39:e2:b1:36:f0:3a:dd:c7:50:20:48:93:a1:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9C:72:43:DB:41:1B:BE:F2:49:FA:4D:CD:3B:89:11:DA:A3:20:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D33C3FE4D96F11EF8907516C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.14.0/24
Signature Algorithm: sha256WithRSAEncryption
98:59:37:ce:77:70:e8:f9:2a:e0:d9:2a:e2:e6:b2:32:c7:f3:
d4:90:4e:cf:de:f6:ee:30:d5:b0:b3:d7:26:4b:5f:0b:57:29:
92:f9:00:59:41:39:b2:ee:a7:f1:e2:a2:b0:a4:28:2f:05:72:
4f:b9:4d:4f:54:f7:d8:f2:d8:b2:77:cd:ee:23:29:fd:f9:e1:
22:d1:c8:54:7f:8a:f4:4f:f7:a0:d7:ae:9b:f6:db:4d:2b:4b:
92:75:b9:8f:62:46:f1:fc:f2:f0:86:16:a8:66:1f:75:52:29:
21:34:af:ef:ad:fc:3d:fe:6c:5c:dd:77:86:1e:d3:10:56:26:
b2:8d:a0:c9:58:d8:26:fb:c3:7c:c1:19:1e:cd:da:4a:5e:48:
5a:dc:9f:e5:d1:40:7e:45:fe:3a:4b:58:1b:09:c3:eb:63:c9:
73:bc:ef:79:62:71:71:1f:d8:e8:5c:50:b3:c9:77:fb:9a:0b:
b5:dd:b5:eb:b1:b1:c5:07:20:8d:8c:3b:73:cf:53:f8:18:4a:
45:d1:bc:06:ce:d5:83:a1:9a:6b:3f:c8:4c:4e:01:4b:bc:6b:
65:fd:d5:d2:e5:dd:d0:cb:75:c2:6c:e0:13:7b:b6:7c:4f:91:
94:a0:f6:a3:e1:5d:ce:07:8b:27:5f:40:82:d0:47:39:15:2f:
f4:02:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:12:53 2025 by rpki-client