Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38763D20E00411EFA0F7684D762E951A.roa
File: 38763D20E00411EFA0F7684D762E951A.roa (raw, json)
Hash identifier: 6tbug3BqK6G/bm3nKzXB8iTAtj0UWkNa9kkmcSznows=
Subject key identifier: 99:B5:0D:83:99:95:99:67:4D:A4:91:E7:04:64:47:4E:80:DB:10:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01170F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38763D20E00411EFA0F7684D762E951A.roa
Signing time: Fri 31 Jan 2025 18:50:20 +0000
ROA not before: Fri 31 Jan 2025 18:50:17 +0000
ROA not after: Sat 10 Jul 2027 18:50:17 +0000
asID: 50183
IP address blocks: 156.238.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71439 (0x1170f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 18:50:17 2025 GMT
Not After : Jul 10 18:50:17 2027 GMT
Subject: CN=679d1b6c-38c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:16:a7:13:c0:e8:bc:88:cb:68:f4:7e:4a:f6:
1c:cf:7b:6d:7f:80:85:ab:2d:8e:e5:80:39:41:55:
67:07:92:36:5c:77:3d:dc:21:2c:30:b2:40:15:fe:
b1:1e:9d:ad:ba:4d:d9:a4:67:ec:39:e7:88:d0:02:
ab:f3:f4:a9:b5:1e:b2:c0:05:36:57:8a:12:d4:65:
b0:c9:ce:c7:36:1a:f4:d2:55:78:84:a7:54:48:68:
7c:86:13:2b:fe:84:07:73:40:3c:b9:80:3f:1a:e8:
3f:53:52:4e:c2:57:5e:dc:2e:f7:64:d4:b4:0b:f2:
f5:d4:d8:3e:71:3a:5b:ef:8d:e5:b2:81:52:6e:18:
00:c8:24:c0:17:59:a5:91:f9:f9:88:1e:0f:b2:3d:
fa:36:4b:9d:7e:3e:90:07:77:11:c1:d9:49:8b:78:
26:53:b9:de:e4:3d:49:4b:76:24:e7:cd:2b:12:00:
aa:0d:84:e2:38:ae:85:8d:5d:57:15:2c:80:65:60:
2a:b0:4e:0b:07:4a:05:6a:d2:95:5c:d3:64:f1:01:
18:4c:c7:94:fe:7f:8b:e2:bf:d7:54:15:ef:3a:5c:
07:08:bd:1b:39:d0:2e:14:73:1c:f4:7f:ee:56:78:
0d:74:93:ca:b9:c0:07:11:3f:57:5b:3d:0c:36:49:
e2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B5:0D:83:99:95:99:67:4D:A4:91:E7:04:64:47:4E:80:DB:10:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38763D20E00411EFA0F7684D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:da:d6:43:b9:6d:9b:70:f5:1a:1d:a9:52:ab:4c:5c:36:72:
0f:b5:fc:5e:b9:76:bf:00:f0:1f:37:19:7b:74:2e:02:c5:3e:
e6:59:89:3b:73:fe:fa:92:77:fe:15:8c:ae:97:96:d8:0d:0c:
85:77:cd:aa:f5:4c:87:07:8c:42:6f:ab:d5:f9:5d:57:fa:a8:
43:5e:fb:c6:07:54:7f:73:df:88:91:ac:9d:ac:08:37:d7:d6:
72:9f:47:30:ca:f5:70:6a:60:3c:3e:33:4a:1e:5b:a0:17:62:
b0:9d:08:7e:74:2b:ca:c5:96:63:ee:1b:e7:65:0d:32:bf:49:
c6:b6:10:7f:d1:28:0c:d0:b8:3e:87:16:86:29:d8:24:15:01:
68:c7:90:5a:ed:58:e1:8f:c7:d6:99:73:ac:bb:06:aa:ce:ed:
5c:8f:cb:07:5b:1c:7e:7f:81:91:3b:68:03:cc:e6:00:f4:be:
06:6e:d1:61:25:f1:aa:25:d8:4c:76:3a:37:28:f4:50:22:a6:
67:ba:27:dd:11:de:2c:16:18:8b:51:f6:b7:3d:f4:cf:64:0f:
6a:96:ab:d0:40:ab:7f:00:76:47:6b:31:32:86:b4:63:14:b9:
4b:3b:b8:df:81:48:1e:cc:0f:b2:db:15:b6:82:39:6c:39:25:
44:91:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:52 2025 by rpki-client