Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06872F28DAEA11EFA60D226B762E951A.roa
File: 06872F28DAEA11EFA60D226B762E951A.roa (raw, json)
Hash identifier: n2WT3q/gtPSmQPn4T0PbcTQqJnlzV+0QpXMC636zc9A=
Subject key identifier: DA:D0:47:96:C0:5B:F6:71:26:5D:36:E0:C2:D8:12:77:FC:0B:82:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06872F28DAEA11EFA60D226B762E951A.roa
Signing time: Sat 25 Jan 2025 07:00:14 +0000
ROA not before: Sat 25 Jan 2025 07:00:10 +0000
ROA not after: Sun 23 Feb 2025 07:00:10 +0000
asID: 44559
IP address blocks: 156.246.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69873 (0x110f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:00:10 2025 GMT
Not After : Feb 23 07:00:10 2025 GMT
Subject: CN=67948bfe-9c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:73:8c:36:6e:36:f9:58:ec:4a:42:20:c5:
9e:87:35:09:ca:2e:6b:df:32:9a:48:32:a9:0f:07:
14:90:2d:d4:91:61:9e:a1:5f:6a:29:a9:cb:c8:56:
71:7d:28:ac:10:48:e2:a9:7c:df:52:17:35:d6:0a:
94:0e:48:ae:bb:a9:b2:7e:46:99:c0:fb:f2:c7:f7:
67:db:5f:b8:06:8b:df:3f:f5:46:ea:f6:4d:13:f5:
9c:07:6f:4f:57:d9:70:fa:29:aa:f3:58:20:21:14:
57:23:ae:38:72:49:5a:87:42:fc:7e:08:a4:27:82:
30:26:63:21:b5:98:5a:05:9f:e1:af:f0:f6:64:c0:
aa:ba:b9:d1:e8:32:6d:b0:85:e1:dc:10:6e:89:e0:
b6:be:67:28:d0:ad:7d:e0:cd:9a:51:75:be:c7:39:
a5:08:eb:1d:d3:db:a4:1f:5f:c0:0c:e5:8b:54:d1:
b5:f8:be:01:ec:e0:6c:f9:fd:06:bf:e4:7c:2c:66:
7d:ae:41:6d:ca:11:cd:72:1a:ed:6a:9b:0b:e1:e4:
1b:e4:22:7d:b3:88:de:67:dc:4f:bd:4c:04:6f:d8:
64:3b:fe:09:62:6e:e5:cb:ad:54:1e:17:df:40:5d:
dc:75:a4:05:a4:5c:ee:6c:07:bd:22:e8:9a:f2:ef:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D0:47:96:C0:5B:F6:71:26:5D:36:E0:C2:D8:12:77:FC:0B:82:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06872F28DAEA11EFA60D226B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:4f:04:6b:81:1f:4b:55:43:d5:3f:70:13:a1:26:7a:68:70:
0c:5d:1d:5e:ad:d3:6f:21:ad:14:af:e8:96:a5:ce:0e:70:67:
af:6d:80:4a:b7:5d:51:64:5d:5f:d5:77:5f:c8:fb:8d:e0:6a:
26:70:ac:07:a6:e1:6a:e1:87:8e:ec:05:f2:03:d3:ef:09:ec:
a6:c4:36:67:c9:91:35:ac:16:d6:01:5d:d6:94:ab:36:cf:29:
ad:38:36:de:c5:92:f5:42:a8:db:d4:3f:94:31:19:1a:45:2e:
f4:67:fb:ce:56:a9:dd:54:23:09:6c:80:51:97:be:51:31:bc:
c3:1f:0d:d4:86:ca:d9:8e:1c:dc:10:69:9a:6c:e0:a8:41:ed:
18:be:1b:2e:2a:17:4d:96:ff:79:0b:58:8d:61:65:cb:f6:28:
79:d0:ee:cf:8b:a7:13:7f:34:43:33:5e:a7:70:95:3e:ef:22:
d1:e3:a5:5d:b4:6a:1d:8d:0d:3d:cb:01:d1:b8:0f:d6:6b:7f:
64:39:60:69:87:8c:18:14:62:38:45:ec:36:0c:be:f8:92:a7:
f6:c9:0f:d7:79:5e:69:f2:75:be:de:24:de:4b:bf:22:50:c1:
89:cf:0e:0f:78:4d:68:ef:93:02:e9:04:11:a8:42:d3:0e:f7:
2b:f9:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:27:06 2025 by rpki-client