Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDAD1E8ACD9311EF95383A63762E951A.roa
File: EDAD1E8ACD9311EF95383A63762E951A.roa (raw, json)
Hash identifier: i9dw/whAWdpP8oDzlhEoHBFeKkRey6yMftfMEdm7lfQ=
Subject key identifier: 87:C3:79:AF:17:38:3B:16:41:7B:6D:4C:C3:B5:A1:69:31:AF:FD:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01006D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDAD1E8ACD9311EF95383A63762E951A.roa
Signing time: Wed 08 Jan 2025 07:41:10 +0000
ROA not before: Wed 08 Jan 2025 07:41:07 +0000
ROA not after: Mon 10 Mar 2025 07:41:07 +0000
asID: 21859
IP address blocks: 156.238.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65645 (0x1006d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 8 07:41:07 2025 GMT
Not After : Mar 10 07:41:07 2025 GMT
Subject: CN=677e2c16-9718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:d1:2c:89:86:eb:96:67:89:24:e1:7d:df:
f1:56:7f:cf:e6:0d:4a:65:15:51:8e:80:f0:32:cd:
41:94:36:61:f5:65:68:07:52:a1:a8:d0:af:4c:39:
ae:13:73:73:2d:bb:89:f9:90:e8:7b:dd:90:ae:14:
2e:d8:2c:d5:cb:97:56:31:f0:d5:5e:af:f3:de:38:
9b:c5:20:d9:3c:ba:0b:b6:15:13:25:dc:e5:69:21:
79:62:ba:09:0b:c1:b1:9f:da:d7:24:1c:d9:c7:6e:
1d:54:32:0a:24:5d:d7:fd:80:71:43:db:90:0e:f2:
6e:52:35:fe:c5:4f:07:f8:ad:d2:87:3c:27:58:19:
64:5d:99:8a:18:1e:88:e1:86:f8:cc:68:3e:42:65:
51:d8:7b:b9:87:14:78:10:8b:13:af:52:bd:0c:5b:
36:9d:61:9d:08:78:30:07:92:c9:56:5d:21:81:37:
a1:5c:b5:e8:d8:a7:3f:1b:e4:89:8a:51:08:76:4f:
a5:d7:66:78:70:09:7e:f6:73:44:70:d8:19:81:e0:
59:95:9a:61:9f:42:b9:f3:f2:29:25:c9:dd:db:f4:
c4:12:55:2d:ce:38:97:5a:04:7e:d8:a8:0b:56:ea:
f4:7a:80:7a:9e:0f:7a:b4:fd:73:71:f8:4e:b8:82:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C3:79:AF:17:38:3B:16:41:7B:6D:4C:C3:B5:A1:69:31:AF:FD:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDAD1E8ACD9311EF95383A63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:77:8d:b1:07:dd:d3:1a:ec:e0:cd:dd:4c:dd:ac:2a:81:5a:
e2:6e:7c:65:6c:04:42:8f:e4:2b:93:d9:cd:67:28:da:e0:ae:
7a:ff:e1:9b:0e:b9:c6:50:5c:e0:f8:0d:5e:93:62:b3:81:ab:
68:65:2e:60:8b:47:48:b7:a3:14:3a:7b:e1:9e:04:d4:d9:8e:
6f:66:cd:42:e7:46:cb:6a:41:b5:05:0f:32:3a:d3:1f:50:11:
e9:fc:1c:5d:55:71:2b:f9:23:2d:a4:85:93:e6:92:5f:19:10:
c7:7f:bb:fa:c7:80:d2:0d:c6:8b:df:6b:58:8b:ed:e3:a4:bf:
82:99:40:58:77:de:dd:ff:55:a6:9d:45:83:0a:ea:61:f9:d6:
3b:da:53:e6:60:ff:be:3c:ab:be:dd:a3:d5:d3:35:8f:c1:f4:
78:23:48:1e:6d:b3:e5:ab:a7:f0:97:4f:96:9e:92:b7:8a:e9:
88:47:8e:ae:cd:00:4c:47:50:55:a8:67:6f:c5:f8:67:58:a3:
f8:11:eb:09:cd:c7:8c:8d:e5:3c:e2:f9:5d:df:eb:4b:7b:d0:
63:22:5a:6e:8d:ae:35:e2:95:1e:4e:40:e6:58:c0:74:57:7e:
3d:49:99:a6:59:8d:96:06:19:1e:4b:08:73:d0:82:38:9f:6d:
b2:c7:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:01 2025 by rpki-client