Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8567FB2D95111EF909884A2762E951A.roa
File: D8567FB2D95111EF909884A2762E951A.roa (raw, json)
Hash identifier: 7ElaG6O4dH4M/LkWx0qmRPi6p3f1J7fgXNv6CGKQrGA=
Subject key identifier: 0A:E7:76:2C:5E:76:6D:42:D0:87:DC:CC:34:5D:C1:5E:87:D1:4E:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8567FB2D95111EF909884A2762E951A.roa
Signing time: Thu 23 Jan 2025 06:18:22 +0000
ROA not before: Thu 23 Jan 2025 06:18:17 +0000
ROA not after: Sat 15 Mar 2025 06:18:17 +0000
asID: 138915
IP address blocks: 156.244.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69263 (0x10e8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 06:18:17 2025 GMT
Not After : Mar 15 06:18:17 2025 GMT
Subject: CN=6791df2e-7f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:5f:7e:70:e4:e8:25:46:db:b9:6b:b1:8e:
8a:69:0e:18:78:b2:47:bc:ca:b1:46:f6:8f:ee:1f:
e0:68:81:82:bc:2c:30:6b:89:7a:98:8c:c9:c9:63:
71:1c:90:ae:bf:68:da:09:64:5b:4b:3d:c1:fe:45:
77:05:06:19:fc:a4:7c:1c:9e:77:41:83:3f:a1:4f:
ff:97:65:b5:e6:1a:74:6e:e3:d5:1f:91:d2:1a:07:
2d:76:50:f0:3a:04:5c:cc:42:2e:02:24:67:8a:05:
0e:67:40:c4:3d:bf:a1:88:53:d7:6d:9d:1d:b4:57:
74:58:e2:75:09:84:42:94:87:37:e0:74:0a:f4:42:
f8:60:60:f5:a0:c0:3a:25:29:17:be:a9:d9:1c:0e:
80:fa:6e:b2:c3:2a:6f:a0:1c:b8:ab:fe:43:ed:16:
25:d7:ec:4a:b4:89:62:b5:11:e2:33:ba:c5:bb:22:
e2:86:61:77:48:19:5f:76:8f:c3:af:79:15:66:e0:
12:c3:44:f2:5d:ed:a0:a7:32:18:ab:71:9b:ef:00:
43:18:94:5b:bd:54:01:c1:62:99:11:64:fa:74:90:
ce:ab:46:0b:2a:b3:54:88:79:03:92:29:36:fc:47:
a1:a8:93:d4:e8:29:d9:12:40:92:53:f9:b1:df:45:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E7:76:2C:5E:76:6D:42:D0:87:DC:CC:34:5D:C1:5E:87:D1:4E:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8567FB2D95111EF909884A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1d:42:b9:f5:08:5a:31:4c:19:54:33:73:f9:3f:53:9b:22:
d3:57:b9:c8:7c:56:87:e8:1e:a7:11:44:68:aa:b9:76:68:71:
f7:c5:0d:cc:85:fa:ed:56:a3:37:4d:67:9d:cf:92:cf:d0:ca:
9b:b1:a8:b9:7a:c5:ac:8e:7b:16:3a:94:23:af:34:ed:af:25:
3f:cb:08:a4:2d:5a:5d:b7:51:8e:ed:c5:83:c8:8b:9b:2c:5c:
98:1e:71:89:ce:16:be:5a:e5:19:11:ed:74:70:cd:91:57:41:
d1:8e:14:13:22:60:fe:9a:9c:c7:82:b0:da:79:cc:48:24:96:
70:94:e1:ce:5c:f1:d0:a4:2c:2c:1e:a7:91:11:9e:e5:f2:d9:
05:20:90:6d:81:b9:c6:c0:94:1c:e8:ba:44:ae:f2:6e:88:fb:
b5:f4:07:6c:44:41:26:dc:23:45:84:da:e1:34:65:1a:64:1e:
43:80:de:a6:71:6b:07:df:fd:3a:ff:f2:dc:04:08:fb:40:fc:
9d:8f:dc:9f:39:b8:0e:66:1d:2e:75:c0:b2:01:96:16:eb:3b:
56:c0:1b:d1:d4:7e:6a:ab:b0:99:c0:88:55:bc:71:b8:f6:36:
75:ba:a7:66:cd:30:b4:57:20:d0:f7:72:d4:48:61:eb:e6:a0:
da:01:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:32:28 2025 by rpki-client