Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17262D98D50E11EF8A01D486762E951A.roa
File: 17262D98D50E11EF8A01D486762E951A.roa (raw, json)
Hash identifier: 2IlYQ01037nnGA13N4kJEiEn8is7cUOhQNfnDaVEkrQ=
Subject key identifier: 9F:6F:5B:D7:AE:1F:59:9C:6A:CD:AE:83:5D:A2:44:45:AA:16:4B:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17262D98D50E11EF8A01D486762E951A.roa
Signing time: Fri 17 Jan 2025 20:03:17 +0000
ROA not before: Fri 17 Jan 2025 20:03:13 +0000
ROA not after: Sat 22 Feb 2025 20:03:13 +0000
asID: 54801
IP address blocks: 156.249.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68236 (0x10a8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 20:03:13 2025 GMT
Not After : Feb 22 20:03:13 2025 GMT
Subject: CN=678ab785-5fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:03:a8:0d:12:01:b0:5b:26:a6:ad:7f:80:e5:
2f:e4:aa:00:19:9e:24:1a:fc:98:8c:3d:ad:de:f7:
0c:04:3c:f0:60:17:dc:17:e5:9d:ec:60:e3:5d:50:
8f:85:0b:12:e3:ec:b3:c8:cb:3c:dd:b1:86:3e:b7:
42:7a:fb:b1:37:36:28:b6:70:7e:05:93:4c:f3:09:
fb:99:d0:5c:ac:52:af:f3:22:ae:fb:23:ef:b4:4f:
af:64:60:fb:a8:f9:e7:44:cb:a6:d6:52:0d:a0:b0:
bf:31:8f:59:02:85:ea:60:aa:83:08:0e:1c:d9:69:
ff:6f:00:a7:5e:da:76:c5:e8:d3:7b:ef:24:90:07:
89:d6:6f:0b:81:0b:83:7f:b4:b1:ad:32:c0:7a:6d:
71:d1:fb:e3:5f:f2:e8:3d:38:2a:a5:b4:1c:84:af:
1e:36:8a:e1:40:ab:7f:73:6f:c3:0d:f9:c3:38:36:
57:48:67:4b:07:95:db:27:7e:9d:5e:69:4f:08:92:
7e:79:05:c7:6b:54:be:00:e3:a9:de:c2:2c:77:09:
02:f7:24:74:6e:a0:f6:52:f6:1e:cd:90:5b:45:89:
06:7c:4c:6e:d7:7b:b9:e7:d5:62:60:bb:d6:40:4c:
e6:6c:a9:aa:1c:11:32:33:5a:9a:1e:0a:68:a3:57:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:5B:D7:AE:1F:59:9C:6A:CD:AE:83:5D:A2:44:45:AA:16:4B:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17262D98D50E11EF8A01D486762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.28.0/22
Signature Algorithm: sha256WithRSAEncryption
28:44:dd:34:3f:ed:50:e0:b7:b2:51:d9:16:68:f6:ee:88:d4:
6d:9b:0e:84:38:8c:f0:40:c0:ad:81:2e:37:3a:f9:9d:11:f6:
b8:c6:f0:d3:02:d1:dd:a9:c7:95:47:56:78:d8:41:1d:e3:ca:
fb:e6:89:e9:23:94:b3:0e:72:8c:e9:ec:91:a9:15:b6:72:09:
64:3e:c5:46:fd:16:5a:8d:f0:d7:d5:be:4d:2c:41:b8:16:3f:
2d:7b:fe:49:a4:68:f8:46:1b:d3:69:4a:0e:07:68:09:27:41:
03:b7:48:ad:5a:57:c8:11:c8:44:b8:8c:44:39:42:91:4b:6c:
85:0e:01:a3:08:82:ee:16:88:7b:dc:b6:a7:a4:a1:80:91:34:
1b:15:7a:39:4a:aa:f7:a4:d5:60:e7:6e:4c:da:b5:e7:ca:99:
17:8e:62:ad:87:62:2b:b7:02:3f:0f:7d:13:cd:7a:9f:f8:5c:
89:41:10:0f:4e:a2:b2:9b:c1:0c:1b:07:19:82:69:c8:db:ab:
0d:86:55:b2:02:f2:c2:69:61:db:89:4f:7e:20:5e:ed:4f:a2:
83:b0:25:e9:8c:b1:92:69:25:56:11:79:47:ca:8c:32:c4:12:
ce:c9:2f:e9:33:58:c3:2f:74:2f:2b:1b:93:23:98:1b:72:8f:
35:58:87:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:48:02 2025 by rpki-client