Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C68D55CDA3211EF992A6E89762E951A.roa
File: 1C68D55CDA3211EF992A6E89762E951A.roa (raw, json)
Hash identifier: EGU3VuZWz2GMt+I35X0z9SZKvxWNv8fecn7sRJVUNqE=
Subject key identifier: 1A:A5:23:BB:11:D0:72:14:65:50:15:E9:B1:1D:7A:F0:30:31:6F:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C68D55CDA3211EF992A6E89762E951A.roa
Signing time: Fri 24 Jan 2025 09:03:43 +0000
ROA not before: Fri 24 Jan 2025 09:03:40 +0000
ROA not after: Fri 28 Feb 2025 09:03:40 +0000
asID: 61112
IP address blocks: 156.226.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69447 (0x10f47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 09:03:40 2025 GMT
Not After : Feb 28 09:03:40 2025 GMT
Subject: CN=6793576f-37c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:2b:e4:d3:e3:f0:f7:03:dd:fa:a9:07:a0:
1f:79:49:89:7e:30:e9:d8:28:47:f4:6d:ae:c0:39:
28:0b:44:29:f4:ed:8d:74:a2:3c:91:d0:65:28:24:
c9:97:9a:aa:b4:bb:c9:1d:72:94:3e:93:b9:19:51:
f7:8f:7b:3f:26:2f:1a:0c:7e:ce:44:26:d0:00:e1:
ad:39:37:df:6c:23:cd:ee:0a:37:c1:bc:34:93:87:
b5:be:7e:e5:21:97:6c:33:27:1c:3d:1f:0a:43:9c:
bb:29:59:d2:bc:c9:32:64:d3:e4:b5:cb:da:68:f4:
29:57:3b:16:41:d2:a7:36:b5:6c:65:c7:cf:8f:79:
49:1c:f5:1c:11:c0:2b:fd:c1:e1:1a:13:11:9d:9b:
a0:5c:26:d0:cf:23:54:7e:5f:57:a3:35:db:f7:11:
c0:7f:ac:82:40:38:5f:2f:1d:2c:70:35:0b:82:36:
07:ca:9a:dc:af:88:66:db:6c:3c:02:f5:22:47:ce:
70:22:b3:69:0a:2b:ac:d5:84:fc:d7:54:6b:f8:1e:
00:37:19:ff:24:78:d1:dd:62:60:87:a2:9d:2c:e7:
d4:df:e9:4e:a8:30:f8:50:2a:96:a5:3b:e5:57:50:
c4:9b:2a:2b:71:c0:7f:77:a3:28:8e:90:08:7d:68:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:23:BB:11:D0:72:14:65:50:15:E9:B1:1D:7A:F0:30:31:6F:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C68D55CDA3211EF992A6E89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.174.0/23
Signature Algorithm: sha256WithRSAEncryption
85:be:43:ac:0f:46:28:78:87:a3:f8:89:2a:ab:d6:24:f3:15:
97:6e:2b:67:49:27:eb:ab:9a:65:bf:66:da:59:90:16:58:4b:
5b:27:c8:57:09:54:b2:84:91:aa:c9:fe:48:b7:aa:85:d1:6b:
29:8f:55:fa:5f:4b:76:05:ba:d3:74:f9:f9:7b:89:f2:6f:e8:
4f:01:34:55:83:4f:3e:f6:3a:9c:05:90:b6:5e:d1:78:14:b8:
78:6b:8a:7c:36:81:10:5a:f2:42:71:5f:44:ca:ad:5a:f3:d6:
7d:a6:70:e2:38:0a:71:d1:98:85:8b:2c:aa:f3:f6:fb:b1:35:
b3:16:b4:52:66:a2:16:7f:e7:40:86:0c:84:12:6b:25:64:54:
a5:b4:60:b3:19:a1:22:66:4a:f9:f8:62:35:71:e9:c7:2c:44:
44:17:96:1c:bc:2d:b3:22:86:ad:01:ac:a4:d6:96:6f:89:46:
d2:bb:1f:fc:6f:b2:77:d0:06:88:a9:97:9f:72:24:7f:f1:73:
a4:c4:34:93:a0:7e:fc:f8:a7:2d:15:8e:ce:41:c5:12:c2:1e:
89:35:8d:42:81:b4:ab:0a:8b:f2:cb:24:98:ae:d2:a2:3d:ae:
ed:42:d8:53:5c:fe:c4:c5:2d:a1:e8:ec:1d:b9:c5:ea:d4:b7:
2b:46:10:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:33:46 2025 by rpki-client