Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7652FE6EDFE411EFB2504378762E951A.roa
File: 7652FE6EDFE411EFB2504378762E951A.roa (raw, json)
Hash identifier: z1Vw/J7YIVYUO2yuKD72ZM/XZropjjKqDFomSFVq6tc=
Subject key identifier: 0B:81:59:1B:76:D3:BD:31:3A:BB:1E:F1:86:FA:94:EB:C9:38:F1:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01160C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7652FE6EDFE411EFB2504378762E951A.roa
Signing time: Fri 31 Jan 2025 15:03:00 +0000
ROA not before: Fri 31 Jan 2025 15:02:56 +0000
ROA not after: Mon 12 Jan 2026 15:02:56 +0000
asID: 211392
IP address blocks: 156.238.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71180 (0x1160c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 15:02:56 2025 GMT
Not After : Jan 12 15:02:56 2026 GMT
Subject: CN=679ce624-fc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:f9:96:f1:27:e5:e9:a6:e0:8c:3a:09:da:
8e:cd:d7:96:92:20:44:e0:a6:37:e7:80:e9:e9:46:
50:5b:0e:dc:4d:3c:e5:26:36:6b:71:da:0c:b3:1a:
45:fb:7f:73:87:77:d6:e0:7c:6f:fd:9d:7f:25:d5:
27:c4:20:ad:39:6f:17:cc:fe:c9:b3:eb:05:dd:ed:
f5:4b:98:a6:6a:a6:4d:ad:08:35:37:0d:67:8e:e8:
16:6c:0d:37:c2:08:48:04:c4:92:76:08:99:55:78:
ca:5b:0b:30:67:28:a3:85:0b:7b:d5:89:62:82:43:
c1:ad:cb:2f:37:6f:20:5c:36:47:e7:74:b5:3e:8a:
49:cb:ab:33:32:f7:84:41:31:8a:05:8b:f8:01:bf:
b1:9d:66:12:cd:f4:d0:68:f9:c0:0a:f5:ed:51:ad:
c3:71:06:bc:d7:73:73:04:e2:ca:fd:aa:d3:47:8e:
dc:09:04:60:04:bb:18:04:cc:f8:b3:81:59:37:a9:
66:48:17:56:dc:6f:56:cb:4e:9a:04:0e:d6:1d:b1:
76:28:82:ba:ef:bd:49:9a:da:1a:1e:ae:48:82:84:
c5:c8:1a:89:28:3d:5e:15:ea:62:39:5e:73:59:ee:
c2:9d:8a:bc:5a:ec:3a:f6:30:b1:70:b2:e3:06:8e:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:81:59:1B:76:D3:BD:31:3A:BB:1E:F1:86:FA:94:EB:C9:38:F1:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7652FE6EDFE411EFB2504378762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.14.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b0:17:e6:54:fe:9d:97:ac:09:62:25:25:4e:51:41:80:6a:
27:4c:0d:36:8e:7a:a9:37:f7:c3:28:38:46:20:0d:6f:43:a3:
89:3b:36:ce:e8:cd:21:a0:bd:2a:e8:b1:5c:9e:7a:54:16:6b:
ab:48:a0:b4:40:ba:95:3c:76:90:d3:53:38:81:5a:6f:f5:8f:
9a:df:4f:c2:4e:a9:10:27:b7:66:51:63:39:32:dc:b3:45:78:
d2:11:cc:7f:25:79:cc:1d:ff:54:0e:65:7a:77:26:28:6b:ce:
85:0c:c0:4a:30:24:b2:50:f9:53:82:48:68:50:83:d5:2b:38:
e7:2f:26:c6:a9:5c:0e:59:35:f3:97:66:04:5a:6e:e3:03:84:
f8:e8:b5:28:be:38:16:7a:a4:cf:5c:78:9b:8d:e0:0a:6d:89:
fb:58:59:32:36:7c:82:f7:81:15:0a:83:1e:b7:e6:3b:af:30:
18:7d:b5:6f:28:75:ec:9b:e1:e4:fc:cc:f7:8c:79:ef:d9:51:
a9:56:40:6a:86:3a:fc:37:09:67:aa:1c:62:ee:e4:7f:20:c2:
fe:ef:5f:c5:d7:54:50:9c:51:2b:95:46:e3:6f:0c:7c:c0:06:
9b:39:31:c9:8e:a7:0c:53:83:3a:88:ef:5e:fd:6a:c4:f1:fe:
98:cc:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:35 2025 by rpki-client