Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E931B998CD4211EFB4CBC24E762E951A.roa
File: E931B998CD4211EFB4CBC24E762E951A.roa (raw, json)
Hash identifier: L6gqXJCUrOhgEL/bZuob+KJ0iABMqgy+AFJ8eovXkZ8=
Subject key identifier: 78:FA:FE:49:98:A9:02:72:76:24:19:32:A8:28:61:5D:13:65:1D:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E931B998CD4211EFB4CBC24E762E951A.roa
Signing time: Tue 07 Jan 2025 22:01:14 +0000
ROA not before: Tue 07 Jan 2025 22:01:10 +0000
ROA not after: Sat 13 Dec 2025 22:01:10 +0000
asID: 984
IP address blocks: 156.243.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65151 (0xfe7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 22:01:10 2025 GMT
Not After : Dec 13 22:01:10 2025 GMT
Subject: CN=677da429-f792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:2f:32:e9:c9:5a:4a:ff:8b:a4:81:e0:64:
1f:b9:21:fc:fe:f2:3a:0b:68:c8:30:6d:a5:1d:f7:
80:f9:a0:c2:b1:a3:06:a6:8e:00:21:a0:07:f1:7d:
50:88:92:8f:fa:30:6f:d5:73:9f:c9:1c:16:97:78:
16:ee:08:a7:58:8c:c6:4c:31:5f:93:65:f7:41:9a:
ec:71:47:80:72:a5:ad:e0:17:27:70:1f:10:1e:3f:
8a:b4:ad:54:e8:65:6c:6b:be:e1:51:4f:df:69:9c:
89:54:3a:bc:7f:29:10:ce:47:eb:a7:67:df:35:ce:
0e:6a:86:d1:29:f2:ad:b1:12:75:d2:a7:e0:6f:31:
97:94:11:f9:a3:3f:87:a4:19:66:e7:af:43:a7:72:
23:e3:b7:77:a5:ee:cf:cc:de:cc:94:fb:59:80:ae:
bd:f1:61:e3:25:db:e0:9c:6d:f8:87:f3:d9:2e:ba:
08:d3:8e:95:fe:2a:c7:f9:3d:bb:da:9c:28:2e:a1:
6d:70:0b:c7:bb:52:f0:d1:2c:29:57:ea:13:dc:06:
44:78:e4:7c:f9:11:0c:57:37:41:3b:df:15:44:8d:
65:64:23:68:bc:ff:26:59:4b:cd:2d:03:3f:82:2c:
0f:57:ae:d2:de:91:98:7d:e1:dd:ea:dc:d6:49:d8:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FA:FE:49:98:A9:02:72:76:24:19:32:A8:28:61:5D:13:65:1D:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E931B998CD4211EFB4CBC24E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.106.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b3:67:90:a8:72:29:36:99:e0:19:68:a5:c0:85:8e:0e:91:
35:6b:75:6c:2c:6c:4c:74:09:c2:c1:74:21:14:a4:48:ec:f8:
c0:89:f6:41:dd:53:35:b8:aa:0d:87:d6:ee:8f:fa:37:8f:a6:
2a:78:1f:bd:a0:f2:51:eb:42:3f:92:30:e7:84:e0:35:c6:b0:
8e:3d:45:b0:7d:18:25:5b:23:72:31:53:39:20:29:56:7e:3f:
3c:07:17:cf:b3:bc:10:2a:bb:d4:43:d4:6e:17:d1:3c:bb:18:
ca:4a:5d:59:75:ce:0d:2e:3c:63:25:72:8f:cb:74:2e:a2:e4:
a8:7b:8b:78:70:b1:6f:bd:4a:9d:55:f3:ea:a4:29:9c:07:86:
02:13:b2:19:a3:a2:c0:ee:50:28:ba:81:dd:af:77:05:a7:ef:
a7:5b:32:39:2c:b9:a5:cb:b5:a5:b3:0b:7b:29:ca:7e:ca:d4:
94:dd:f5:28:f3:26:e9:80:6f:07:b7:30:7f:4b:10:47:c2:ca:
c7:98:de:c1:f2:cd:1c:d3:42:3e:e6:97:e7:9e:f3:47:a4:3a:
54:a6:1a:0b:78:28:8a:17:6b:99:59:93:8f:8a:04:d6:06:dd:
10:ba:a6:cb:0c:fa:68:0b:60:d4:e9:b7:76:fb:04:83:bb:c0:
f3:01:45:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:32 2025 by rpki-client