Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D836ABD4DC9311EFA1F994A0762E951A.roa
File: D836ABD4DC9311EFA1F994A0762E951A.roa (raw, json)
Hash identifier: oLTrRtpWEWKs5nIdTNGuG0nRp59LRdkxZkgv1L1/UkA=
Subject key identifier: 3D:31:04:E4:7C:F7:0F:59:92:79:3A:49:28:27:31:6A:EA:DA:16:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D836ABD4DC9311EFA1F994A0762E951A.roa
Signing time: Mon 27 Jan 2025 09:48:22 +0000
ROA not before: Mon 27 Jan 2025 09:48:18 +0000
ROA not after: Sat 08 Feb 2025 09:48:18 +0000
asID: 5065
IP address blocks: 156.243.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70855 (0x114c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 09:48:18 2025 GMT
Not After : Feb 8 09:48:18 2025 GMT
Subject: CN=67975666-4f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:d5:09:ec:82:d6:de:1b:a5:8c:1c:61:8d:
2f:56:f3:bd:54:25:9e:a0:d9:0b:8b:8a:69:d0:82:
de:b3:1f:74:0d:cf:72:54:92:f1:a2:84:69:b9:07:
36:5f:a7:dd:08:88:73:58:be:c0:74:56:f9:d4:ea:
4a:1f:3d:69:fe:98:ff:e5:98:b9:53:03:c9:b3:2b:
7b:1a:20:6a:6b:0d:6b:b8:56:34:cd:94:3f:db:78:
c2:8c:05:3e:d4:65:fa:6f:49:19:c3:c9:92:01:57:
8b:ea:51:c2:a7:55:4f:7f:ec:3f:76:60:0c:c4:78:
75:53:8e:c9:1a:ef:66:1c:f1:65:7c:21:f8:de:d6:
bb:f3:29:68:76:a8:62:0d:8f:e3:73:2f:b8:67:9c:
e7:40:71:5d:5b:23:5c:78:d8:f9:38:95:f5:7d:ba:
dc:3b:86:46:39:af:bf:c7:0e:7e:24:ef:a2:1f:94:
57:37:9d:c2:d8:cd:1c:4d:f4:01:3c:5b:6a:ef:f8:
1c:5e:33:d4:51:8a:b8:2c:93:39:1e:80:8c:bc:01:
91:c2:63:3c:de:6c:32:27:17:04:1f:5c:9e:53:44:
1c:7b:ef:7a:d9:cf:50:c3:84:65:a7:b5:58:d6:a0:
c3:05:95:18:fb:88:61:be:41:2b:a4:49:6e:b0:90:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:31:04:E4:7C:F7:0F:59:92:79:3A:49:28:27:31:6A:EA:DA:16:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D836ABD4DC9311EFA1F994A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.0.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bd:7d:9c:58:9f:0e:ae:d4:cd:61:2e:8f:68:6d:33:a2:33:
40:4e:e2:68:d5:c5:f9:dc:ae:6d:29:0f:97:29:52:19:3c:77:
63:8a:6c:6f:7c:e0:b5:7e:58:b7:7b:d7:45:9a:fd:c0:d4:d5:
15:43:b1:9e:39:a2:99:36:14:6e:b3:0b:9f:fd:d9:52:6a:ce:
ab:1c:06:02:92:a2:24:28:09:1c:be:ae:eb:40:ab:22:c1:16:
29:4a:2f:6e:a4:6c:27:5a:f6:d0:3a:7d:38:8f:c6:e3:87:71:
fa:4b:20:c5:21:ce:2b:64:85:45:31:b0:57:61:5d:c1:d0:55:
b5:04:7e:23:3b:2e:4e:da:d1:ad:d4:ec:35:41:e1:52:16:6c:
6b:c5:89:9f:35:b1:fc:56:f7:84:12:01:2f:f8:21:ba:d6:54:
87:8d:f0:2d:da:5e:44:78:60:1d:47:8a:e9:76:c8:a9:4f:df:
c5:dc:66:c5:19:c4:2c:44:f7:0a:46:89:13:c5:e4:df:a0:0a:
5a:2a:5b:d8:cb:42:db:86:ec:21:90:a1:35:46:b5:70:c1:78:
92:27:bd:34:43:3a:51:a0:bc:b2:48:cd:a5:16:da:7e:b4:58:
a4:d1:4d:b5:4d:04:5d:34:a6:d7:fe:5f:27:d9:dc:71:c1:7f:
ed:7b:5a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:44 2025 by rpki-client