Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F95587B0D8DB11EFB69AB683762E951A.roa
File: F95587B0D8DB11EFB69AB683762E951A.roa (raw, json)
Hash identifier: 6oCFz6a2dpurYaJPjFLXTp9efFhV0m6ZJXVOqvS7c5M=
Subject key identifier: FB:B0:7E:ED:0D:F8:B9:03:AF:E9:F7:EC:AA:84:76:6E:D1:B9:30:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F95587B0D8DB11EFB69AB683762E951A.roa
Signing time: Wed 22 Jan 2025 16:14:36 +0000
ROA not before: Wed 22 Jan 2025 16:14:33 +0000
ROA not after: Sat 15 Mar 2025 16:14:33 +0000
asID: 138915
IP address blocks: 156.244.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69242 (0x10e7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 22 16:14:33 2025 GMT
Not After : Mar 15 16:14:33 2025 GMT
Subject: CN=6791196c-dcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:36:81:5a:ca:50:bc:77:0b:05:08:70:f6:
26:78:bd:93:83:ce:9e:3d:8d:4f:48:e5:67:32:dd:
e1:4c:77:cc:80:08:38:59:39:61:48:d7:6d:e6:89:
c7:11:40:e3:cf:0d:e9:4b:e1:4d:7b:33:53:b6:a3:
a6:0b:05:72:1d:78:6b:e5:70:93:bc:13:1e:92:c7:
87:5b:38:90:6f:73:aa:71:ba:d3:6b:36:39:04:53:
20:d2:eb:0f:b4:56:a6:e9:1d:72:ea:cc:ea:a8:c6:
3e:bb:dd:14:59:56:bf:45:73:82:14:71:31:6f:92:
b9:2e:5c:d0:cf:f0:9f:c1:9c:1c:34:2b:8f:15:87:
05:c3:fe:62:2a:a2:2e:9f:c5:f7:e1:5c:8f:9d:79:
68:68:84:61:ae:1a:37:5e:54:ca:f3:8b:65:7f:d8:
88:61:92:b2:fe:1b:34:10:15:99:06:00:d6:0a:28:
3a:71:69:2d:67:14:ac:cb:81:b4:25:0f:0b:1c:76:
09:f9:a1:e2:ce:24:2f:66:0a:3a:e0:b5:a6:81:6a:
cd:65:c7:51:73:bd:91:51:4e:2d:ae:cc:e6:a9:8a:
f8:8c:30:c3:8e:8d:6b:32:fe:60:6d:1e:98:f4:e2:
c7:ab:62:6e:bc:95:dc:53:e4:e6:66:3a:c0:85:09:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B0:7E:ED:0D:F8:B9:03:AF:E9:F7:EC:AA:84:76:6E:D1:B9:30:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F95587B0D8DB11EFB69AB683762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.53.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8e:bc:97:20:ad:3b:f7:78:b7:5e:f9:7c:32:25:17:1b:14:
4b:b3:4b:44:2a:78:9f:de:bf:fb:98:d8:c9:e3:6a:7d:94:8a:
aa:3e:39:df:d0:bc:7e:2a:d7:d5:96:07:54:c6:d8:9c:f6:51:
a7:d4:f6:1a:68:0a:8d:19:78:2a:f1:87:4f:83:ee:1c:30:4b:
62:b4:b8:e1:7b:20:f9:ce:5c:72:45:a5:14:59:51:5c:da:b0:
68:4e:23:9f:41:82:73:2d:de:19:2e:b5:e0:3e:8f:58:bf:40:
83:0e:99:b2:6f:40:18:ba:75:94:fe:82:12:99:51:57:6f:28:
71:3c:59:96:36:2e:48:ad:df:52:80:eb:83:ca:74:54:c9:0a:
2a:5f:c9:04:d3:7c:bb:63:f1:18:27:0f:83:28:41:9a:78:f1:
fa:2e:3b:bb:d9:48:ff:24:13:f0:3e:71:c5:0a:3d:ea:73:47:
51:5e:4e:96:94:e4:03:02:f6:89:97:26:41:b6:c5:9a:cb:d5:
4a:2f:f3:6f:6b:62:a0:0d:63:55:3d:b2:34:97:bf:f0:3f:52:
97:b9:91:ef:0f:43:13:73:43:6d:3f:e5:cf:41:f9:99:5a:58:
d0:84:cd:f1:1f:09:13:2e:1f:8e:06:9d:17:c7:4f:52:bc:e6:
37:16:c0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:32 2025 by rpki-client