Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB0A0B7CDB2811EFBB7C388F762E951A.roa
File: FB0A0B7CDB2811EFBB7C388F762E951A.roa (raw, json)
Hash identifier: FaFqT2uXcHj5RlK/92gHLLa0KTPyj/pDu5Y4LBX9Rgw=
Subject key identifier: CC:AF:D1:5F:F7:94:A9:F5:39:7E:2F:CB:3B:DC:4D:6D:9C:E0:FD:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011281
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB0A0B7CDB2811EFBB7C388F762E951A.roa
Signing time: Sat 25 Jan 2025 14:30:53 +0000
ROA not before: Sat 25 Jan 2025 14:30:48 +0000
ROA not after: Wed 05 Mar 2025 14:30:48 +0000
asID: 216047
IP address blocks: 156.234.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70273 (0x11281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 14:30:48 2025 GMT
Not After : Mar 5 14:30:48 2025 GMT
Subject: CN=6794f59d-e209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:18:2b:fd:06:06:36:29:89:30:1e:f3:25:
b5:40:1d:93:84:f4:14:ee:16:5a:66:43:3f:0c:ed:
ee:06:95:1d:ec:22:ac:6c:8b:b3:05:85:74:8d:75:
41:d9:00:d3:b8:6f:6d:a3:09:e7:ad:a0:6e:be:56:
4b:f1:00:75:d4:4b:97:83:d2:d9:0d:46:e1:f3:9f:
40:0f:12:b1:fe:07:ea:4b:fa:a1:b3:87:db:b1:a0:
21:e1:93:a9:a5:97:a5:0e:72:97:95:2e:d4:97:97:
12:25:78:f1:8f:85:51:83:a3:75:f3:ef:d9:f6:6d:
d1:50:6a:ea:4d:0a:59:04:67:ba:ce:b9:10:26:9e:
43:be:18:58:3f:2a:ea:ec:07:77:2b:87:06:f2:cd:
70:11:a5:f9:4f:95:96:25:44:00:01:a9:11:84:58:
89:e8:a8:57:18:9d:aa:7a:37:bd:d3:b3:3a:21:58:
1f:31:11:c2:d3:f7:68:6a:c2:ca:72:69:5b:d6:aa:
25:41:41:63:e9:c3:ca:bc:78:de:15:d4:f2:4d:69:
57:8f:56:e4:9d:72:e9:d7:05:00:72:6a:bc:51:3b:
eb:de:d2:c9:39:d8:c7:f7:65:34:42:f2:d5:64:fa:
6a:ef:f8:c3:80:42:ef:29:eb:35:41:d9:a0:37:15:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AF:D1:5F:F7:94:A9:F5:39:7E:2F:CB:3B:DC:4D:6D:9C:E0:FD:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB0A0B7CDB2811EFBB7C388F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ea:aa:d3:d6:9d:91:de:76:f0:69:73:ca:61:44:1b:7c:1a:
94:d2:8f:81:62:a0:ef:f1:2c:75:c4:73:b6:1e:56:c0:3e:36:
5b:7e:48:0d:7e:59:d9:7d:d2:b4:01:10:07:4e:7f:2e:5b:51:
a8:76:3b:52:e6:5a:b0:3d:67:55:a2:52:cb:c1:f9:25:98:d3:
68:1e:04:a4:71:ac:42:77:c8:17:b4:48:a6:68:f9:d7:2b:cb:
d1:d8:6a:86:37:45:b5:33:7c:d8:70:22:37:7b:3b:1c:85:1f:
b2:69:1c:c9:b3:2d:11:dc:e6:b8:6c:50:99:38:f6:71:26:b0:
2c:80:db:d5:ab:fe:67:86:05:58:36:a5:11:48:34:c8:aa:1b:
58:3a:90:f9:71:33:12:b2:de:26:a8:ea:15:02:79:02:1c:ca:
f4:04:4c:fe:92:76:db:87:72:d6:38:f3:ef:ce:ac:d7:01:ee:
c5:d5:cb:07:b1:a4:24:68:1b:3a:cd:41:0a:28:ab:aa:ab:a8:
69:e0:cd:e4:e0:5d:42:0a:53:71:84:79:8b:65:3d:f5:a6:45:
54:f4:61:2c:59:57:11:2f:3c:24:cc:be:43:bd:71:bd:6e:36:
16:88:cb:d1:2b:88:5d:50:39:d0:df:96:9f:d8:84:8d:74:11:
74:57:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:23:58 2025 by rpki-client