Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C98B97DADFE411EFB5481279762E951A.roa
File: C98B97DADFE411EFB5481279762E951A.roa (raw, json)
Hash identifier: YVuKBwECiEjAL7cViPzvImzxfhLqLSdQqtLpNrXXb1Y=
Subject key identifier: 8D:71:D2:53:51:EB:DA:1D:28:E7:02:40:61:F5:49:D5:B8:60:43:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01160E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C98B97DADFE411EFB5481279762E951A.roa
Signing time: Fri 31 Jan 2025 15:05:20 +0000
ROA not before: Fri 31 Jan 2025 15:05:16 +0000
ROA not after: Mon 12 Jan 2026 15:05:16 +0000
asID: 211392
IP address blocks: 156.238.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71182 (0x1160e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 15:05:16 2025 GMT
Not After : Jan 12 15:05:16 2026 GMT
Subject: CN=679ce6b0-25dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:a8:b7:99:a5:6c:3b:36:ea:07:7d:07:1b:
7a:4e:62:50:df:d0:76:d0:90:8f:a3:81:7e:ac:6e:
34:db:4e:43:e6:dd:df:4e:75:5c:5a:27:78:4b:65:
91:33:0a:81:23:28:a9:0e:f6:3a:5c:0f:94:eb:03:
67:8a:b0:90:51:6a:2f:da:df:59:7d:d5:6b:ff:35:
0d:ac:9d:4e:8f:b0:06:bf:ee:23:f8:32:cd:9e:28:
ec:d8:c0:fc:7c:5e:02:e1:66:71:7a:b4:ce:5a:38:
f0:ee:d0:7c:64:0a:16:b8:da:a3:7f:bf:e1:d2:d9:
3c:b3:8f:b9:55:df:e1:65:0c:3e:e1:75:b3:18:35:
15:ea:ac:8a:70:54:c0:72:31:72:f3:fa:36:98:f0:
ca:26:c5:5d:ac:73:9b:95:77:1c:f6:c5:04:01:65:
ba:dc:68:86:6f:6c:43:1c:db:c2:b0:fd:f3:43:06:
6f:a5:15:d7:a5:4f:59:3e:30:8a:84:ca:34:85:d3:
6a:c9:7d:5d:87:21:ca:c0:34:63:e2:3a:75:bb:6b:
29:da:35:73:1f:d4:33:fe:85:ec:a1:e4:cf:de:39:
79:2a:95:cc:4c:93:54:f3:2a:57:03:e2:46:31:c6:
03:ea:9d:de:2e:c8:70:ea:15:2b:f9:a5:2c:92:f1:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:71:D2:53:51:EB:DA:1D:28:E7:02:40:61:F5:49:D5:B8:60:43:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C98B97DADFE411EFB5481279762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.15.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a5:9c:9c:28:40:08:a9:46:70:9d:ab:a9:83:a9:13:cf:f1:
19:b6:0a:82:25:8e:0a:68:7b:11:c1:2b:df:dc:d7:72:99:70:
f7:3a:da:be:bf:0d:27:e1:60:fc:89:d0:c0:25:c8:f0:e4:7c:
db:b8:bf:1c:ca:5e:8d:de:a7:cd:67:a2:a1:39:e0:0f:17:ef:
70:e5:40:39:2f:73:d9:da:aa:7e:ea:32:d0:8a:33:03:c2:3c:
4a:bb:a0:f7:4a:45:2d:17:92:d5:dd:4f:96:ea:18:fd:26:79:
b1:34:b5:5e:50:96:fa:18:52:a6:30:ba:fe:85:83:4d:95:e8:
37:c2:c8:12:ad:cb:11:05:1a:cb:19:22:c7:a9:2a:23:7c:3f:
c9:c1:88:6e:66:67:5e:e6:23:16:45:92:9b:fc:be:3a:2c:51:
a6:36:82:49:29:86:06:54:a2:6b:66:90:62:1b:e2:05:0d:63:
3a:21:b7:9c:b9:55:2d:35:18:85:c2:fa:42:45:58:80:73:1d:
3b:6f:17:88:c3:dd:0e:7f:99:df:8c:f1:a7:c4:7b:34:fa:26:
13:ed:dd:86:84:7d:fd:67:fa:bf:d3:2e:e9:60:3a:25:89:d9:
62:4e:ba:72:ca:5f:4a:56:f5:95:a2:73:fb:ce:13:87:d3:8e:
b1:39:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:49 2025 by rpki-client