Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9ECEEDAD57311EF9FA805AE762E951A.roa
File: B9ECEEDAD57311EF9FA805AE762E951A.roa (raw, json)
Hash identifier: Cpyn4bdgmtKUkCElnE/IRfNxAOZ1dE4F9gjquoXThfc=
Subject key identifier: 71:67:0E:A9:F9:D9:1E:CC:FD:7C:AD:F4:AF:BD:30:63:C3:98:7A:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9ECEEDAD57311EF9FA805AE762E951A.roa
Signing time: Sat 18 Jan 2025 08:10:49 +0000
ROA not before: Sat 18 Jan 2025 08:10:45 +0000
ROA not after: Sat 22 Feb 2025 08:10:45 +0000
asID: 400619
IP address blocks: 156.239.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68385 (0x10b21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 18 08:10:45 2025 GMT
Not After : Feb 22 08:10:45 2025 GMT
Subject: CN=678b6209-8baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:1a:b2:20:88:c3:95:7e:a4:46:a3:e4:8d:
70:03:af:0e:66:81:f6:45:95:fd:73:7a:bc:be:09:
2a:c7:8c:7d:82:43:64:d9:3d:82:d5:1f:3f:54:bf:
38:3f:db:71:9e:cf:6d:90:31:4b:51:77:00:6b:66:
fe:65:47:72:87:03:78:fa:bb:60:09:73:a1:2a:11:
14:0f:de:bd:fa:b0:c9:3d:72:54:7c:6a:65:b2:b0:
9c:22:6e:31:0c:5f:d4:98:9c:2f:40:a6:80:0e:c1:
4d:0f:88:57:86:79:b0:7b:8b:3b:ff:b7:e4:64:3c:
ac:d1:18:aa:3c:b9:18:9b:a3:eb:80:37:63:0b:ef:
93:83:b5:2c:67:30:d7:f1:fd:5a:b0:f8:2d:86:34:
48:ae:71:0c:35:bb:f8:6d:94:7e:d3:b2:59:15:a3:
28:f2:d3:00:6e:d1:b1:36:db:25:15:fa:2a:b3:3e:
41:0c:7f:52:34:21:05:bf:c9:d3:53:35:0f:25:8f:
06:f3:17:a4:09:ed:7c:9b:bb:b0:6e:b8:22:8e:68:
63:12:f5:32:e0:62:27:05:a2:57:d5:71:ad:74:dc:
a6:d9:cc:c3:53:b1:02:9c:d4:48:a4:a1:69:21:b0:
6d:be:28:c5:82:0e:0a:3e:6c:e2:54:d5:63:93:4f:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:67:0E:A9:F9:D9:1E:CC:FD:7C:AD:F4:AF:BD:30:63:C3:98:7A:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9ECEEDAD57311EF9FA805AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.32.0/20
Signature Algorithm: sha256WithRSAEncryption
95:ee:e8:f9:99:42:3c:4d:db:d9:37:44:a6:29:ac:28:51:49:
3e:92:79:62:52:33:bf:1c:ba:2a:15:3d:00:4d:7d:48:a8:cb:
97:86:d0:cc:d3:5e:85:e2:e0:e3:b3:47:91:48:51:41:a7:ab:
e7:e8:0a:cf:49:95:a7:16:94:ef:81:22:15:9d:61:47:38:2d:
04:85:a7:b8:18:47:e3:e9:e7:cf:ea:e7:e4:eb:ab:8d:70:90:
35:0d:97:b0:03:63:01:ae:73:98:4e:df:f4:bb:2f:ca:41:c4:
d4:85:b2:71:46:f9:39:7a:b5:11:2b:5c:c2:05:72:37:fe:33:
13:cd:01:e2:91:d9:e3:8a:83:49:56:ec:54:93:c0:e4:06:3c:
0a:db:ba:f9:fb:3b:6d:34:e9:a5:f6:ab:ce:22:93:e3:50:87:
ab:9b:88:d4:5b:af:77:fd:05:1c:44:9c:97:ee:56:94:6a:7b:
41:fd:63:c3:fa:c6:38:61:a1:f1:50:d2:85:8b:16:88:f9:87:
c7:bb:2f:53:f3:0a:95:0e:24:80:db:63:09:5b:6e:16:af:50:
8e:29:a3:ac:2d:27:8c:bd:cc:63:1b:e0:b7:35:ef:ea:39:20:
19:2f:9a:d8:0f:9c:3c:27:78:76:02:69:fd:e0:21:e9:6d:57:
12:31:f5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:30 2025 by rpki-client