Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E52C7730D3D611EFBDDFE19E762E951A.roa
File: E52C7730D3D611EFBDDFE19E762E951A.roa (raw, json)
Hash identifier: xVCkQU60s+umEy01SzwWfI5ItJY1KwySZU3rk1k7huI=
Subject key identifier: CC:51:66:AC:FA:7B:B9:94:77:68:04:67:46:8C:35:89:A6:C8:4E:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E52C7730D3D611EFBDDFE19E762E951A.roa
Signing time: Thu 16 Jan 2025 06:55:39 +0000
ROA not before: Thu 16 Jan 2025 06:55:36 +0000
ROA not after: Thu 06 Feb 2025 06:55:36 +0000
asID: 38193
IP address blocks: 156.238.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67756 (0x108ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 06:55:36 2025 GMT
Not After : Feb 6 06:55:36 2025 GMT
Subject: CN=6788ad6b-c667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0c:c5:13:70:e0:d8:e1:e4:fc:11:a0:99:5e:
11:9e:f5:3a:94:b0:96:56:7f:bb:0b:fb:43:94:3e:
a9:69:db:e7:ec:8a:85:7c:3d:d6:6e:90:83:a5:22:
24:46:37:7e:ee:0d:9d:61:05:ac:ad:3f:37:6a:a7:
87:2c:d2:1d:2a:80:4d:1c:45:8e:6f:4f:57:46:87:
53:a5:54:c6:7f:a6:ee:80:e5:7c:b1:f5:5a:59:c1:
1f:6a:dd:ac:ca:21:06:51:6a:1f:54:4a:bf:29:bb:
ed:d0:41:49:97:9d:b9:cc:0c:8e:65:ea:ee:f8:2b:
21:29:8e:b5:f9:ae:5d:8b:45:ae:8d:dc:73:7a:d2:
7c:2c:7b:00:14:94:2a:b6:9d:69:ac:f7:14:3d:03:
51:42:6a:df:97:02:04:39:f9:55:bb:e5:95:b4:65:
40:86:d4:d9:87:b3:60:3e:82:24:36:6f:d8:28:c3:
6a:d0:3b:6d:45:fb:91:10:92:24:03:8e:64:ff:12:
67:ab:b4:a9:ce:8f:75:69:bb:2c:b4:4c:f7:09:2b:
45:3c:28:85:ec:cc:7b:aa:49:42:8e:db:7c:6e:9a:
33:46:5b:b7:7a:a6:fe:2d:e0:dc:7d:a2:67:58:88:
68:1e:61:14:ca:a6:23:b0:27:25:18:a3:2f:12:77:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:51:66:AC:FA:7B:B9:94:77:68:04:67:46:8C:35:89:A6:C8:4E:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E52C7730D3D611EFBDDFE19E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.80.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:eb:75:f0:d0:e2:81:53:e0:b9:4b:1b:4a:e8:80:a6:9a:dc:
ce:0c:c7:aa:50:aa:a9:bf:2f:38:c1:77:66:3a:5e:4a:4d:7d:
97:4b:f4:e4:b5:1d:ef:98:a9:d9:7d:ae:4c:04:3b:8d:22:06:
be:b7:ed:9b:58:36:91:2e:c8:9e:46:d3:b8:4e:d7:bf:58:46:
f9:84:5e:51:c5:fd:bb:32:a1:b6:81:20:fe:1e:92:08:a5:13:
c1:bd:fd:75:95:fa:4a:d7:b5:59:e9:a3:2b:c3:41:75:bb:fc:
56:97:62:22:1d:c1:02:24:9f:f3:0d:7a:bb:01:32:28:af:94:
0a:ad:35:4d:cb:9f:64:bd:2a:c3:8b:e9:0b:13:60:2b:94:54:
28:93:74:90:58:a4:26:b1:48:d3:65:68:38:a3:86:61:d0:97:
24:7c:a7:c9:f7:1d:4a:57:b1:46:62:20:aa:6a:b4:10:38:67:
d0:12:23:d9:69:32:8b:44:2a:5f:20:b2:38:3a:68:0b:9b:97:
a2:a9:38:28:2c:20:3a:48:52:f5:99:97:be:9c:d3:4d:e6:f3:
aa:28:ad:73:f8:f4:f8:05:a0:74:8c:3f:47:78:bd:42:30:3a:
87:34:94:cf:f7:6f:dd:d9:4a:b2:db:6e:ba:69:7f:85:9c:6c:
52:d6:36:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:33 2025 by rpki-client