Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F50F928CDC0911EFA6259678762E951A.roa
File: F50F928CDC0911EFA6259678762E951A.roa (raw, json)
Hash identifier: X7QCsjvrLIWUcNdXaPgl0KI3h+1P/ugRYt/7ykZokCU=
Subject key identifier: B9:A9:26:E4:09:27:B6:38:12:E1:23:0A:35:1F:03:FC:91:98:EF:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01142E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F50F928CDC0911EFA6259678762E951A.roa
Signing time: Sun 26 Jan 2025 17:21:20 +0000
ROA not before: Sun 26 Jan 2025 17:21:16 +0000
ROA not after: Thu 20 Feb 2025 17:21:16 +0000
asID: 151796
IP address blocks: 156.248.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70702 (0x1142e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 17:21:16 2025 GMT
Not After : Feb 20 17:21:16 2025 GMT
Subject: CN=67966f0f-9742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:34:79:d7:ea:ad:31:67:9c:9d:d6:81:8c:
6c:64:ca:e4:ac:58:27:b1:c2:6a:fe:29:8a:a2:1b:
ee:7f:d6:ac:0e:b2:c4:7f:83:2f:07:e4:01:67:63:
3a:67:a2:dd:f9:b4:c8:1a:00:ee:08:51:66:0b:01:
26:f3:ca:e1:e2:22:1e:32:30:aa:98:8b:15:67:34:
33:0b:cb:46:26:15:1a:52:3e:d4:ae:e1:36:6e:53:
3b:e3:26:2b:c2:c8:da:02:f5:8d:30:5d:63:70:52:
9b:21:72:e0:9a:b0:a2:60:fd:de:65:9b:82:5d:2b:
fa:be:cf:df:26:3d:04:72:2d:27:f3:ac:55:1c:3c:
c2:ae:71:55:83:8d:64:80:56:39:91:62:66:de:a6:
06:2b:4b:df:f9:bc:9f:90:d1:9c:38:7c:a4:62:d1:
d6:b2:dc:61:48:c4:53:b9:26:65:97:67:01:50:01:
7f:f6:8b:1b:7a:47:59:68:10:34:34:88:18:89:1c:
3e:2b:99:82:b5:cd:a5:eb:49:77:4a:b9:be:9e:6b:
10:e4:86:af:c7:5c:c4:ab:ae:9e:e8:e3:5d:20:9d:
5c:1a:8d:ef:b3:e0:63:8e:9f:13:bc:d3:f3:f4:d1:
6b:7d:a3:46:5a:ae:45:c1:0a:41:52:4b:e0:c0:12:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A9:26:E4:09:27:B6:38:12:E1:23:0A:35:1F:03:FC:91:98:EF:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F50F928CDC0911EFA6259678762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.53.0/24
Signature Algorithm: sha256WithRSAEncryption
04:49:56:4f:c3:af:c8:6d:83:22:a5:ba:94:40:bd:cb:b4:89:
24:aa:68:af:c2:cb:38:60:a9:2a:fb:ec:3a:17:18:59:96:21:
71:33:bf:8f:74:f5:50:b6:a6:2b:6c:7e:43:e0:b3:2e:36:9c:
5b:f9:f8:6c:c9:e9:d1:31:8b:ed:21:48:ef:72:e1:3d:b2:17:
e2:cc:8d:0d:53:7e:a7:74:80:6c:a4:fa:ea:ea:c8:35:56:c7:
81:31:f3:62:7a:4e:24:21:dc:75:89:52:f8:ba:24:83:19:38:
33:69:31:60:cd:d7:d9:77:a7:cf:94:bb:ac:f3:ee:30:76:3a:
22:bb:21:4a:15:53:44:ab:cc:88:44:bf:c4:d9:6f:3a:ae:74:
62:96:e6:80:cd:d6:34:22:e2:6a:9b:a8:de:90:4b:36:7d:a1:
3e:91:15:65:f7:61:23:65:72:49:ef:2c:3e:5d:90:ec:2a:9d:
cf:f6:0b:32:11:f4:0b:a0:32:b0:89:3e:82:83:85:e0:0e:41:
e0:33:8d:ac:f4:83:d7:81:04:05:fe:a2:9b:a6:06:6f:9e:1b:
83:16:4e:cc:c4:ec:e4:71:f5:67:2d:bb:c4:bc:7c:3b:78:0d:
86:69:4f:76:56:22:e8:51:a1:d7:de:f9:74:98:ab:13:16:c7:
c9:ee:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:49:26 2025 by rpki-client