Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED929326DAEA11EF8CC39E71762E951A.roa
File: ED929326DAEA11EF8CC39E71762E951A.roa (raw, json)
Hash identifier: aF49CzMpsR+LSS0To2clwmg6pOuA+WellLl5AwsKVl0=
Subject key identifier: 19:B3:B3:3C:84:D0:48:8B:12:CD:BC:30:BD:35:A8:D5:6A:07:04:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED929326DAEA11EF8CC39E71762E951A.roa
Signing time: Sat 25 Jan 2025 07:06:41 +0000
ROA not before: Sat 25 Jan 2025 07:06:38 +0000
ROA not after: Thu 06 Feb 2025 07:06:38 +0000
asID: 39600
IP address blocks: 156.238.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69881 (0x110f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:06:38 2025 GMT
Not After : Feb 6 07:06:38 2025 GMT
Subject: CN=67948d81-2145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:2a:d2:63:20:45:d4:5e:43:09:96:9d:ea:
59:cf:ed:a8:77:2d:e2:32:8b:14:3b:d8:aa:f3:3d:
a5:32:d9:fb:c6:e3:30:a2:3a:42:6b:00:48:c3:c4:
2e:ad:44:2a:5f:7b:ae:fd:e6:d6:f6:59:92:00:ea:
31:df:c1:d6:a1:85:e9:f0:42:81:ec:7f:bd:c6:71:
ab:15:cf:df:0c:c0:81:79:15:98:da:9d:7c:83:c0:
17:6a:b5:ba:17:d0:ac:de:33:67:ee:da:38:4d:34:
bc:05:de:90:07:2b:bb:86:dc:c6:de:c4:09:60:aa:
ac:c2:cd:f6:1b:1a:de:95:97:5a:11:4a:b8:e4:22:
0b:d3:68:6b:1b:a4:a6:b6:77:c9:97:5f:c5:a1:21:
92:71:68:db:84:d2:39:26:d4:57:aa:7e:3b:5c:ef:
47:31:c9:b7:c0:e2:ca:88:a8:1b:20:f2:75:65:f3:
40:be:02:06:90:e9:a8:b4:b6:61:fe:98:6d:b2:ae:
84:97:da:29:2d:ea:95:87:0f:db:c7:64:12:c9:0b:
5d:06:d0:84:cf:0f:8a:fa:bd:aa:7d:8f:68:cf:76:
63:e9:52:49:c1:43:05:12:91:7f:85:5f:c3:2e:a7:
59:26:65:4c:d7:11:f3:af:ea:e3:f2:68:7f:3c:91:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B3:B3:3C:84:D0:48:8B:12:CD:BC:30:BD:35:A8:D5:6A:07:04:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED929326DAEA11EF8CC39E71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.160.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ef:45:9b:ff:36:06:ce:70:bd:b9:10:a0:2b:26:88:58:27:
eb:61:74:2e:5b:03:51:fa:b8:bf:89:9a:c6:d0:a5:ac:9d:f5:
6b:b9:8d:dd:39:33:c2:72:da:01:35:87:48:50:b3:2f:24:d1:
09:b0:19:2a:7c:53:34:e8:db:1e:3a:30:9e:c8:43:69:0a:e9:
e1:4b:c0:2b:8a:d9:f8:3e:59:56:ff:4b:06:fd:c3:22:3a:be:
72:3a:83:97:de:1d:6e:c3:32:64:f4:69:73:39:7e:e7:16:e3:
e8:b6:85:6b:1b:84:71:2c:09:39:fd:62:d5:0c:1c:60:31:8e:
67:b3:dd:fb:82:71:34:00:2c:ea:a3:5e:86:ec:84:ed:bb:d0:
ab:c6:95:a6:26:de:03:68:9a:25:de:79:89:34:a0:4f:0b:da:
3d:66:7c:e7:d6:4a:fb:d9:11:50:31:71:e3:e9:f8:3e:51:1a:
ea:57:ec:3f:15:ad:e0:6d:72:29:81:ab:a7:3f:49:6c:8a:0e:
44:ec:21:a1:d5:5d:fb:4a:7a:f2:29:4d:03:d4:9c:e4:a8:dd:
f8:b1:1d:88:67:49:3c:90:26:fb:be:bd:9d:52:db:f6:2d:38:
af:67:71:13:ba:8c:73:c4:00:40:51:3b:02:b3:a3:42:32:ce:
7b:92:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:16:49 2025 by rpki-client