Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E559810EDFF111EFA427D552762E951A.roa
File: E559810EDFF111EFA427D552762E951A.roa (raw, json)
Hash identifier: Ayd5HgiyST2pbeMadNkLsbWNLv/k0y0MiDMT+1pn2vE=
Subject key identifier: 0D:B1:E8:F5:23:A1:77:8C:E6:7C:8F:1C:0E:8A:D7:A9:1E:13:FE:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011671
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E559810EDFF111EFA427D552762E951A.roa
Signing time: Fri 31 Jan 2025 16:39:10 +0000
ROA not before: Fri 31 Jan 2025 16:39:06 +0000
ROA not after: Tue 11 Feb 2025 16:39:06 +0000
asID: 38193
IP address blocks: 156.238.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71281 (0x11671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:39:06 2025 GMT
Not After : Feb 11 16:39:06 2025 GMT
Subject: CN=679cfcae-4ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:f6:c4:cc:dc:c0:e7:32:e5:78:85:95:dd:
2f:94:ed:10:35:95:29:c9:50:49:89:9e:58:14:aa:
2a:1e:b1:b4:f8:44:99:63:ec:6c:e9:9a:6f:43:7d:
0a:c1:83:a8:c1:99:b3:ce:97:2c:21:8f:00:20:5c:
77:05:16:d4:38:d3:ea:57:c1:78:05:97:17:2c:02:
37:f2:87:fd:76:d6:45:1d:54:ed:67:8a:ff:68:49:
4c:c2:93:f1:ff:ce:56:e2:73:a3:68:20:89:d6:9c:
1f:be:cd:cf:ed:77:1a:94:93:5b:ac:04:00:be:d2:
9a:f8:8f:72:65:49:8f:85:cb:70:2a:fe:ce:0c:c8:
bf:5e:5e:ae:fc:98:4a:a8:e7:99:07:65:8b:69:5f:
c6:1a:33:43:91:7e:17:da:8b:c0:dd:74:9a:b6:3e:
49:34:d3:d8:38:9f:db:99:7e:c7:dd:82:f3:63:a5:
5b:68:8d:ab:f2:04:12:69:0d:82:d1:3f:37:53:e2:
b3:18:2c:a2:09:4c:a3:68:d7:42:dd:a7:d5:b5:de:
67:dc:3b:40:c4:e6:d3:3f:a3:5e:3c:80:ef:9e:1f:
2b:5f:43:d4:42:22:17:cb:af:04:de:fa:1c:d7:af:
ca:72:1f:e4:72:ce:e2:57:44:7f:a1:2b:cf:bf:b4:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B1:E8:F5:23:A1:77:8C:E6:7C:8F:1C:0E:8A:D7:A9:1E:13:FE:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E559810EDFF111EFA427D552762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.80.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b3:c2:e3:2c:d3:2b:81:5b:ba:75:ef:6b:be:f7:10:c4:6b:
3e:12:19:59:1d:1c:26:f8:cb:4b:36:f0:d1:47:47:8d:51:03:
3e:88:71:ad:cb:4c:c1:e9:af:bc:ed:06:96:bb:5c:4a:86:8b:
e7:c7:2e:7f:d4:f5:44:23:d8:3f:ba:86:d4:df:01:b5:d8:b9:
ab:3e:52:ce:67:cf:75:77:96:c9:61:12:83:91:04:66:4e:c9:
d8:19:4f:d9:77:fd:ea:dc:96:9b:22:21:8f:e6:a2:06:3c:c6:
09:ef:3f:af:53:41:d9:37:9b:b1:40:f4:f7:74:34:5f:52:30:
5d:5a:da:ad:8b:c7:f5:e4:aa:1d:a8:59:f2:93:61:7e:e1:b0:
b4:1a:1f:1c:36:5b:cb:d0:46:56:51:36:45:cf:46:2f:cf:c1:
16:b0:bb:e0:cb:4c:67:b0:c0:86:c7:db:2f:f0:ea:9e:6b:a0:
6d:7e:19:f2:a4:25:94:da:45:e2:6b:30:84:a8:ac:6c:91:6d:
0e:8b:21:0b:5a:e0:89:6a:be:c7:ae:f9:7c:57:86:39:c7:99:
e4:6d:8a:be:e9:ca:0e:ae:a4:e4:39:58:2f:ef:da:6f:cd:2a:
af:4e:36:71:ad:09:67:6c:e0:3c:e8:db:f2:c0:b0:cd:67:72:
c4:69:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:30 2025 by rpki-client