Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9768DB2DCB411EFB639DA7A762E951A.roa
File: E9768DB2DCB411EFB639DA7A762E951A.roa (raw, json)
Hash identifier: ULGX9L4qNTzrZz3ewO7lK88le8WnM2ar1kUHS5Q8NC8=
Subject key identifier: B1:30:38:C7:2F:C4:20:5B:C6:38:70:99:92:ED:50:35:0B:85:4D:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01151F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9768DB2DCB411EFB639DA7A762E951A.roa
Signing time: Mon 27 Jan 2025 13:45:04 +0000
ROA not before: Mon 27 Jan 2025 13:45:00 +0000
ROA not after: Sat 08 Feb 2025 13:45:00 +0000
asID: 5065
IP address blocks: 156.239.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70943 (0x1151f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 13:45:00 2025 GMT
Not After : Feb 8 13:45:00 2025 GMT
Subject: CN=67978de0-453a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:fe:a5:dc:dc:89:92:73:79:d5:85:7d:5a:
06:91:66:00:6a:9e:cc:66:a9:f9:f6:4b:72:ce:5f:
d3:51:25:f1:13:b8:da:fe:cb:26:5c:16:1d:46:6d:
7f:4c:d2:a2:af:f6:7c:2e:7f:3f:8c:8a:47:b6:3b:
62:f6:0c:4b:11:10:46:1a:10:a5:42:42:74:d9:ba:
0b:8c:29:12:57:4d:e3:51:13:2a:a0:41:47:6e:e5:
2e:dd:4e:35:42:b7:03:94:88:1e:43:31:04:33:cc:
3f:2a:c1:2a:33:8d:45:fd:aa:9b:23:82:41:58:a6:
1b:33:b9:22:ad:c1:7b:01:e0:29:30:81:23:f5:d9:
6d:b4:b4:d6:26:96:85:c1:52:3f:29:59:b1:e8:54:
5e:fc:c7:cd:0b:51:09:c9:6e:f8:9e:e5:d8:6e:57:
d1:03:ad:d3:07:1e:1b:a2:5d:ca:46:77:cf:dc:0f:
f1:ac:9d:27:88:67:37:f3:b1:fa:bc:25:df:bf:69:
1a:b9:ee:3b:f6:c2:0b:7a:43:4d:2c:87:4d:7c:af:
68:1b:7d:c8:2f:cd:52:f3:06:74:68:9c:4d:dc:38:
3b:2b:db:1b:0c:2f:78:32:36:e4:c4:f0:1a:a2:e5:
ec:ac:20:c9:11:65:36:2a:92:65:fb:e7:1e:29:66:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:30:38:C7:2F:C4:20:5B:C6:38:70:99:92:ED:50:35:0B:85:4D:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9768DB2DCB411EFB639DA7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:48:54:88:e3:42:08:42:e8:60:24:71:9c:92:fd:ba:d8:1f:
69:1c:7c:74:ff:a2:37:f0:23:fe:ae:26:a9:4c:b3:42:de:64:
c1:f8:8f:2d:95:98:da:62:53:04:da:32:24:94:9c:cf:01:f4:
f5:f3:e8:30:a7:4b:62:53:3c:87:23:48:65:59:52:cf:0d:7a:
85:fb:75:65:a6:60:70:a2:a0:81:db:fb:a3:4d:32:24:2c:27:
21:f5:2e:13:cf:93:a4:bd:6f:15:f5:50:34:c4:0c:21:52:6f:
b4:c0:d6:01:b5:a5:e6:3c:f8:a8:93:5b:67:ec:50:f2:f8:0d:
15:5d:69:90:7e:f0:7a:08:2d:00:e6:8f:4b:72:90:77:50:ce:
f8:45:07:ea:d5:e3:1b:be:1c:d9:ea:6c:2f:91:22:4a:c6:26:
ec:f3:19:0f:f5:69:1f:d3:f5:be:93:9a:22:08:9c:de:42:01:
f5:d9:32:e7:71:cc:19:db:26:f9:e4:55:65:20:a4:ba:0a:d4:
11:d9:d5:5d:c3:75:eb:ed:38:46:9b:0d:24:e1:ef:da:71:29:
6f:1b:31:20:77:30:e6:f2:7d:7a:1a:e3:4a:c6:7f:62:49:10:
0a:09:de:6c:73:c3:08:19:74:30:b1:0d:77:19:36:dd:9d:5d:
d1:9d:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:08 2025 by rpki-client