Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2091220CDBFD11EFB01C5CA3762E951A.roa
File: 2091220CDBFD11EFB01C5CA3762E951A.roa (raw, json)
Hash identifier: GBbazUjp7Own8VFXgUELeQBFTbM2dCU5o97Zz/eFHDE=
Subject key identifier: 2D:AB:D9:AB:23:6B:F3:1D:3E:E9:E7:70:7B:3E:7F:49:BB:DA:65:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2091220CDBFD11EFB01C5CA3762E951A.roa
Signing time: Sun 26 Jan 2025 15:49:29 +0000
ROA not before: Sun 26 Jan 2025 15:49:25 +0000
ROA not after: Sun 23 Mar 2025 15:49:25 +0000
asID: 63139
IP address blocks: 156.227.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70638 (0x113ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:49:25 2025 GMT
Not After : Mar 23 15:49:25 2025 GMT
Subject: CN=67965989-d891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:cc:ca:fe:c8:91:0f:bd:35:04:2f:9f:f7:
f0:8b:a5:e9:e6:b4:65:ce:61:49:a6:4a:16:aa:e7:
57:0a:24:45:ab:ba:24:64:69:67:2c:04:5e:2b:71:
39:78:ee:04:01:81:c6:97:d7:d5:af:13:37:8b:5a:
8d:e5:d0:1b:11:8f:5e:91:60:e2:72:1a:48:29:ac:
3b:9d:01:15:25:98:65:46:59:e5:41:27:79:3a:2b:
14:52:b6:7f:10:95:f0:bb:cf:15:fc:d4:1c:44:a0:
f1:20:e1:c1:f9:d7:5a:b5:ef:c0:62:55:95:68:4e:
f2:7f:44:c5:21:f3:dd:93:84:8d:49:38:cb:83:cd:
74:28:e3:96:a6:64:58:0c:9b:34:52:5b:b4:a3:dc:
9e:c6:73:fd:f8:0f:e4:e5:1a:27:21:6e:2f:21:db:
33:fe:9f:16:78:44:7f:47:b1:c8:4a:5c:3e:87:93:
de:09:19:bb:32:52:1c:5c:ea:d3:0f:ca:1e:7c:86:
86:03:9e:97:a5:d3:69:ef:0c:bd:07:82:3e:1a:37:
a0:27:10:6f:f1:e0:81:c5:85:71:20:7d:18:eb:97:
92:3b:30:76:30:f8:d4:20:04:75:b5:ee:11:5a:6f:
93:3e:81:fb:6f:16:8a:d7:36:81:c9:d0:1d:1c:c6:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:D9:AB:23:6B:F3:1D:3E:E9:E7:70:7B:3E:7F:49:BB:DA:65:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2091220CDBFD11EFB01C5CA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.198.0/24
Signature Algorithm: sha256WithRSAEncryption
59:26:9e:65:ed:1c:fd:f4:f7:44:3a:56:b8:81:bb:9f:cd:91:
0b:0e:45:49:64:78:5b:54:f7:67:b8:ac:21:b8:94:e9:53:d3:
9c:ef:5a:c3:7b:49:d1:75:e8:78:5f:e6:1a:9b:0b:4b:7e:99:
a0:f5:76:f7:ca:9e:50:42:c0:6d:e7:59:d1:bc:36:af:d8:e5:
8e:77:44:b4:2e:1a:46:f5:72:e7:f6:80:6d:18:94:4e:61:44:
45:48:ab:02:6b:22:a5:a1:b3:b0:68:88:27:e7:19:64:dc:0b:
47:19:cd:7a:52:68:5c:57:f7:ac:ed:6b:b5:f7:25:b8:6c:2c:
8f:46:9c:48:46:b7:99:bb:60:15:e8:2a:5b:20:8b:ce:f5:cb:
ba:8d:10:67:e5:ba:8b:f4:92:14:0f:2d:11:42:f1:c5:63:ed:
fa:3b:18:01:76:5d:c4:67:0e:d5:45:ca:e7:08:7c:8b:0f:ed:
7b:c9:86:b1:0a:45:71:0b:8a:c6:39:27:a6:69:1b:01:14:02:
44:a5:f6:37:66:48:fc:f0:da:39:7f:8a:2f:34:b0:39:95:17:
13:15:8d:d1:5a:33:0c:2e:4b:87:70:a8:f3:1d:d4:f8:32:9d:
ba:6a:ab:51:70:e8:d2:b5:dd:0e:08:83:28:30:bf:87:ca:35:
fe:dc:90:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:41 2025 by rpki-client