Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/052113C6D3D611EFAC56439A762E951A.roa
File: 052113C6D3D611EFAC56439A762E951A.roa (raw, json)
Hash identifier: Czye1MWY6Sp3iKi8V1J3ZGLNeVJb7I7XfcImcDS8Ky4=
Subject key identifier: 87:AA:9F:B2:86:2E:2B:40:E4:06:F6:B3:A4:E7:6B:88:55:A0:C3:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/052113C6D3D611EFAC56439A762E951A.roa
Signing time: Thu 16 Jan 2025 06:49:23 +0000
ROA not before: Thu 16 Jan 2025 06:49:20 +0000
ROA not after: Thu 06 Feb 2025 06:49:20 +0000
asID: 60223
IP address blocks: 156.229.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67752 (0x108a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 06:49:20 2025 GMT
Not After : Feb 6 06:49:20 2025 GMT
Subject: CN=6788abf3-a821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:28:87:a6:2c:a1:05:4d:ca:58:2d:17:2d:
e3:13:4c:e2:7e:e1:74:f2:4a:51:8e:64:d5:ab:f3:
c0:a9:b1:a1:e8:16:3d:bc:6f:65:01:3e:99:05:a5:
a6:db:7e:a7:96:ac:79:1f:87:73:65:92:a3:1b:71:
f9:f1:c6:e4:5a:c9:d7:19:11:90:62:f1:1e:1f:27:
58:d0:0f:3d:3c:96:7d:f6:0d:bc:03:f9:58:e1:a2:
75:df:c7:cd:e3:14:19:02:35:0d:4d:ef:9b:63:64:
bc:55:1b:6a:05:f7:fc:90:79:78:f4:9e:63:c6:5a:
63:10:17:d9:3c:a3:bb:5a:95:97:48:44:60:35:2c:
44:80:24:c1:a0:aa:17:cd:71:b0:44:38:28:29:64:
9d:44:65:59:54:ec:e6:01:76:35:39:f7:75:ae:89:
2f:51:22:d2:9a:57:c7:b2:28:ac:b1:4c:07:67:bd:
2a:6a:60:a4:c1:2d:4b:9a:76:18:da:5a:e8:07:7f:
d3:5b:f0:cd:51:1b:3a:a9:37:90:0b:d0:74:1a:8e:
b4:34:75:7a:22:35:fb:34:7c:c3:64:b2:07:61:36:
a3:b3:1b:11:a3:57:3c:dc:44:43:9c:1b:9e:a6:12:
2e:6d:be:7c:39:a1:90:48:5b:40:92:87:91:e1:dc:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AA:9F:B2:86:2E:2B:40:E4:06:F6:B3:A4:E7:6B:88:55:A0:C3:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/052113C6D3D611EFAC56439A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:ca:7a:37:01:ad:22:e9:41:d3:9f:76:74:d6:90:ba:e6:56:
e1:29:b4:c6:2d:36:af:c9:a2:56:85:16:2d:fb:69:a6:c9:11:
2e:b5:f7:d9:54:ca:2b:e3:3d:3d:b7:6e:fd:8c:e1:19:e7:51:
be:9c:4f:b4:01:01:a6:46:d1:4d:06:ca:b4:bd:68:9a:8a:98:
1d:d5:da:fc:81:2c:aa:40:9e:1e:38:92:53:7a:2e:87:77:1e:
6c:80:d0:72:e7:a6:10:f4:e0:0a:9b:28:b0:1e:5a:22:ff:0f:
08:ad:55:6b:5e:a5:ee:45:2f:34:50:0a:df:51:c1:12:75:96:
e6:5b:a5:ab:35:d9:fe:89:e3:f7:f8:6e:fd:12:86:66:ba:7a:
a6:40:20:a0:b0:a7:df:00:51:ed:92:a7:95:bc:5a:50:80:8c:
ad:31:bc:90:b5:49:c3:9d:22:59:d4:57:93:3a:20:cd:cc:87:
16:df:a6:c4:b3:ca:dd:ff:b7:6d:16:3d:be:98:b9:2b:e3:d6:
10:af:83:7c:d3:05:c0:5e:1e:14:62:2b:eb:64:f1:f6:db:c9:
80:b1:a7:8f:26:ed:35:12:fb:8d:5d:0f:c6:49:49:20:c7:a1:
f7:09:d6:5c:c8:c4:5f:4a:41:37:76:26:a0:82:9e:5d:11:73:
90:c6:76:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:20 2025 by rpki-client