Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F297DA4AE00111EF92672EBD762E951A.roa
File: F297DA4AE00111EF92672EBD762E951A.roa (raw, json)
Hash identifier: f5xxXuBRBFSlRx9O4jRJw89AHapfVlPR3Fij3SRbV34=
Subject key identifier: 69:E9:81:95:32:43:95:97:A1:A5:A2:67:29:5F:BA:34:5B:96:12:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F297DA4AE00111EF92672EBD762E951A.roa
Signing time: Fri 31 Jan 2025 18:34:04 +0000
ROA not before: Fri 31 Jan 2025 18:34:01 +0000
ROA not after: Sun 11 Jan 2026 18:34:01 +0000
asID: 399077
IP address blocks: 156.248.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71409 (0x116f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 18:34:01 2025 GMT
Not After : Jan 11 18:34:01 2026 GMT
Subject: CN=679d179c-da30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:c4:4a:4e:4c:05:32:30:d9:23:71:08:ad:
58:3b:3e:86:89:20:e5:18:27:60:da:55:db:5c:32:
6c:b5:10:08:91:b2:d3:7e:e0:c9:70:b1:4b:24:54:
ec:c2:20:c9:cb:8c:5b:55:08:7e:42:d7:31:23:8d:
53:d5:37:88:b2:51:7e:bf:a4:44:56:91:65:49:f0:
80:9e:57:f4:c7:48:99:c6:54:e6:9d:b6:cc:a4:11:
7e:2c:c2:fc:71:b5:6a:f1:cf:e8:25:c4:8b:8a:33:
e6:c5:c3:cd:50:0e:e3:4b:bf:dc:4f:96:db:11:84:
94:cb:00:fb:24:be:6a:4a:81:1f:0c:8b:ff:56:b9:
24:f6:16:e9:86:bd:3c:28:41:c9:a3:9a:01:79:c9:
ce:b2:be:08:e4:18:f8:40:4e:30:05:e8:de:8f:82:
80:7e:77:63:16:81:d7:0f:93:6a:c9:50:41:68:0e:
42:f9:bb:53:06:38:6c:24:10:d4:4a:1d:f6:19:c5:
49:ba:5a:0f:cc:ef:d3:91:00:bf:95:f0:0b:25:b1:
b9:00:e1:02:e9:d0:c8:fd:86:4a:ee:d8:c3:8c:6a:
5a:87:fa:58:6c:13:b0:bf:4c:e6:3d:88:a9:64:17:
b4:d8:fd:a6:b1:d6:9f:66:4f:60:02:c6:29:d5:ba:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E9:81:95:32:43:95:97:A1:A5:A2:67:29:5F:BA:34:5B:96:12:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F297DA4AE00111EF92672EBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.77.0/24
Signature Algorithm: sha256WithRSAEncryption
16:53:8d:ef:b9:42:df:23:11:01:bd:5c:71:39:1d:7b:42:51:
a7:02:0b:04:69:1e:15:c8:a2:f6:9f:06:af:56:61:1d:93:9c:
e0:4f:a6:79:b8:1b:1f:fb:52:c6:50:1c:fc:0f:ee:ce:51:5c:
a1:39:e5:16:c2:0e:ef:49:3a:ce:db:1d:7f:6c:39:15:c4:6b:
a7:25:f2:6f:59:8a:b3:3d:51:c0:e0:90:49:61:28:8b:a2:4d:
44:20:a4:03:1f:d4:31:59:f6:aa:ed:76:b1:9e:32:aa:22:d1:
fb:b9:02:2d:e6:d9:61:4a:6d:b1:55:d3:e1:d6:b8:51:a2:b8:
7a:d5:2b:16:33:d3:23:d0:ee:f9:f9:09:ef:46:23:00:d6:2f:
23:e1:a6:e2:75:eb:e2:90:1d:19:29:92:22:e7:df:82:d7:a8:
e4:e1:7a:34:d9:32:ac:a3:76:51:d2:ec:40:46:6b:3f:5b:42:
2d:36:c8:46:fb:2e:65:49:0c:4a:97:77:9b:1f:f3:e1:0e:52:
69:a6:3c:38:f7:1d:29:d4:b9:b7:de:4a:d9:07:df:97:61:b2:
5b:55:89:c8:78:5e:a2:e7:7b:85:90:96:52:37:11:e0:68:5c:
93:91:de:df:3a:b3:59:4a:01:38:7d:ce:f0:04:3c:5b:6b:a9:
55:6b:ae:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:30 2025 by rpki-client