Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB945FE4DCAE11EFAF93E355762E951A.roa
File: EB945FE4DCAE11EFAF93E355762E951A.roa (raw, json)
Hash identifier: tQXSNaDDEk7rgiclZG1lZsxfOOGic9vbqwalKoY3U84=
Subject key identifier: 9D:9D:94:87:34:C8:B9:02:A0:8A:0C:AF:BC:87:73:0B:6C:E9:63:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB945FE4DCAE11EFAF93E355762E951A.roa
Signing time: Mon 27 Jan 2025 13:02:11 +0000
ROA not before: Mon 27 Jan 2025 13:02:07 +0000
ROA not after: Sat 08 Feb 2025 13:02:07 +0000
asID: 22773
IP address blocks: 156.235.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70903 (0x114f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 13:02:07 2025 GMT
Not After : Feb 8 13:02:07 2025 GMT
Subject: CN=679783d3-e4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:f2:cb:80:65:1b:16:59:37:fa:f6:86:42:
49:fc:e5:09:a1:55:f2:60:46:40:89:a3:5a:08:1e:
ed:6a:b6:7c:fd:22:b4:f8:ba:4f:fd:fa:2c:f5:fd:
a2:3a:22:a1:45:1e:84:3b:ae:07:be:b4:67:11:6c:
20:b1:ca:7e:c5:c8:30:85:0f:fb:2a:64:3f:ce:fe:
39:d7:9b:71:fc:cd:b9:af:73:5e:8c:71:43:c7:a8:
09:9c:31:b9:32:c3:bd:38:8f:fa:aa:90:06:10:27:
ed:b1:dd:4c:5c:34:86:1a:4d:40:f2:7c:b4:d5:12:
ec:6c:e4:58:13:26:70:c4:76:6c:d5:55:8e:3f:bc:
d2:3f:5c:cf:a5:63:0c:ec:4b:e5:df:b4:40:0f:ed:
b8:26:51:3b:f0:dc:b5:4a:f9:e7:da:3d:1d:7d:87:
4a:93:28:17:bc:27:dc:20:e5:14:0c:b8:6a:63:bb:
44:e3:f8:48:a4:ef:61:b2:e9:a7:a3:36:34:4b:80:
f8:2b:db:61:fd:a8:5e:19:40:51:d4:46:b9:24:14:
c6:84:33:68:c8:c4:2f:c7:e9:89:75:e4:32:c9:8c:
5c:64:90:2a:7b:4e:76:8a:a8:b2:2b:b5:aa:a2:de:
be:29:d8:0f:ce:30:fd:b8:ad:b7:fe:14:e5:4a:b0:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9D:94:87:34:C8:B9:02:A0:8A:0C:AF:BC:87:73:0B:6C:E9:63:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB945FE4DCAE11EFAF93E355762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.48.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b0:79:d7:2b:ce:a9:1f:b0:5f:f8:e4:62:b8:79:72:bc:4d:
20:42:d7:df:bf:9c:00:3e:59:47:b9:50:89:9a:26:bf:6b:f0:
69:be:45:51:29:8f:21:f6:25:51:70:4a:74:01:14:8a:f6:9f:
c0:52:1f:e2:44:52:a3:d6:7d:5d:10:2c:eb:b0:14:3d:21:ea:
fa:32:12:58:0b:e7:3e:aa:4a:07:8f:65:71:51:d3:3a:9a:e1:
de:bc:e7:7c:1e:55:a9:29:51:6a:53:6f:c4:98:f1:dc:46:07:
89:5c:e0:08:2a:dc:0c:d4:91:91:c1:74:82:2a:b5:3b:ad:22:
a8:44:d2:3f:8a:7f:85:db:a0:9e:b1:eb:44:4d:d2:13:43:32:
0e:47:91:92:a1:98:bd:bd:bc:09:d3:4c:86:9f:0c:80:cb:f6:
41:45:1b:de:c8:54:6a:7e:d3:96:98:b5:8c:d9:58:75:73:6f:
42:27:b7:5d:9b:a9:f4:55:dd:27:62:d7:7f:5b:f4:ef:84:55:
5c:e9:1c:7e:b4:02:6e:79:ff:1e:67:3a:b8:5e:2c:ee:9f:29:
dc:3b:14:d4:cc:7c:c2:39:92:a3:a5:94:24:ff:69:df:67:4f:
c2:1e:a2:37:7d:cc:4b:76:55:c7:e0:86:3f:d9:c9:12:a7:98:
7d:49:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:24 2025 by rpki-client