Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF2B1110DCB311EF82100476762E951A.roa
File: FF2B1110DCB311EF82100476762E951A.roa (raw, json)
Hash identifier: b9F3qB3awFzCoXhwaNyooJvk3BipK+PPw57Dzaf4H2w=
Subject key identifier: B8:41:FC:D2:D9:02:02:0B:BE:10:1B:F0:18:1E:20:6F:C8:05:24:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011519
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF2B1110DCB311EF82100476762E951A.roa
Signing time: Mon 27 Jan 2025 13:38:31 +0000
ROA not before: Mon 27 Jan 2025 13:38:27 +0000
ROA not after: Sat 08 Feb 2025 13:38:27 +0000
asID: 22773
IP address blocks: 156.239.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70937 (0x11519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 13:38:27 2025 GMT
Not After : Feb 8 13:38:27 2025 GMT
Subject: CN=67978c57-c3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:97:3d:c0:4c:35:e2:86:3e:b8:36:4a:16:
4c:b3:b1:ff:0e:26:73:d6:91:15:ed:42:9c:17:f9:
08:f1:b6:d5:d7:24:e3:54:c3:c1:d5:d1:0a:63:08:
ee:1f:4e:e4:2b:63:9f:a7:be:6a:84:3b:00:b4:48:
8e:72:2e:27:f3:96:2f:03:e2:ef:95:1a:9e:b5:ba:
ed:aa:3a:1c:5a:47:ac:63:36:8f:8b:20:23:b1:e3:
b6:8a:2a:23:9a:82:28:b8:1c:19:67:5a:01:07:a1:
42:e9:44:8e:79:88:08:13:81:3b:07:e7:58:7b:0c:
a9:61:4c:e9:19:76:72:9f:d3:7d:cc:f0:ca:ba:3f:
6e:ba:1e:f1:14:fb:7a:57:7c:41:41:2c:d7:40:2f:
49:e8:48:09:6c:7e:35:bd:86:56:ec:52:3e:6b:88:
18:4e:29:5b:aa:62:e4:12:06:7a:fd:43:86:78:b8:
90:80:2d:ae:b4:79:b1:b1:30:10:40:ee:64:a9:0b:
df:8e:2d:8d:8a:a9:ac:c5:23:41:99:18:36:81:73:
63:48:1d:39:6b:db:27:24:0d:da:d0:f7:58:62:7b:
91:82:b3:d3:08:c6:e7:8c:b3:7d:fb:76:00:87:ee:
44:be:0f:09:48:a5:c5:35:15:9e:07:47:a8:26:63:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:41:FC:D2:D9:02:02:0B:BE:10:1B:F0:18:1E:20:6F:C8:05:24:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF2B1110DCB311EF82100476762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.128.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:4e:84:5e:1f:5f:bf:b4:7e:51:ea:f8:cd:d4:43:b1:68:d5:
e3:32:d3:4a:e6:ab:27:be:ed:9e:e0:3a:a2:a8:26:be:9f:aa:
4a:7a:a8:6e:26:48:82:9a:59:87:59:4e:6c:ba:17:d4:a3:32:
0f:0a:98:63:9a:93:f2:42:4d:75:6e:9b:db:81:ba:79:31:92:
2f:68:84:09:17:42:f4:27:c9:66:df:e8:30:3f:d2:7a:67:40:
bc:9e:9f:0c:cd:7a:6e:1a:4d:87:fe:6d:f0:f6:32:75:36:d6:
5b:78:af:d0:af:00:cf:19:a5:35:d0:93:1e:89:3a:68:fa:67:
78:f7:31:b8:96:97:39:b1:95:a8:a7:d0:71:4b:a9:84:bf:f1:
00:b2:72:79:9b:af:79:5b:f0:4d:de:1e:ae:92:85:f0:04:cb:
31:e7:b4:13:76:e7:bf:0d:23:72:80:10:7f:fa:48:41:09:61:
2a:80:2b:33:8f:8b:72:69:7d:22:02:a9:54:78:e1:7b:85:04:
92:94:73:dc:3f:dd:f9:74:61:96:8c:44:aa:9f:3d:a0:1f:48:
1b:12:1f:57:4d:db:a8:31:f6:04:f2:68:64:b0:87:c9:a3:05:
57:77:78:ec:a8:0f:30:88:02:22:79:07:6c:49:40:87:ea:ee:
50:f8:35:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:41:04 2025 by rpki-client