Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/229BA768D50211EFB3F054B8762E951A.roa
File: 229BA768D50211EFB3F054B8762E951A.roa (raw, json)
Hash identifier: +RtinTsd829fmefNpQR+lEyaJNU03tktxphAnkIkA6U=
Subject key identifier: 58:99:54:EB:68:E1:74:E9:31:72:14:85:93:F4:4D:7B:B3:BB:C8:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/229BA768D50211EFB3F054B8762E951A.roa
Signing time: Fri 17 Jan 2025 18:37:42 +0000
ROA not before: Fri 17 Jan 2025 18:37:38 +0000
ROA not after: Fri 31 Jan 2025 18:37:38 +0000
asID: 39600
IP address blocks: 156.252.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68174 (0x10a4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 18:37:38 2025 GMT
Not After : Jan 31 18:37:38 2025 GMT
Subject: CN=678aa376-f392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:b4:a5:f5:bf:f0:35:83:47:67:23:ab:8d:
29:b6:a5:18:b7:20:28:45:13:ea:22:df:04:cd:da:
60:9d:c1:a0:ca:2f:7d:26:7f:f4:ca:50:a2:55:29:
a7:c9:6c:4f:8e:28:ad:d0:50:89:b0:c3:5a:94:f9:
7c:f3:ee:62:04:0f:2f:cc:00:e3:24:e8:13:eb:5d:
54:c5:7c:2d:01:e7:88:74:70:77:f8:8a:85:aa:38:
11:c6:6f:7b:9d:7d:c3:9b:43:22:36:61:e8:e8:1e:
7b:34:dd:f9:89:02:91:13:5a:73:c9:19:41:ef:76:
bb:fe:70:e6:72:49:52:90:d9:3b:58:2a:a3:e3:34:
9d:4a:5a:f5:f8:04:1a:9f:a2:89:ee:b0:17:48:d8:
82:34:d3:00:c4:bc:f9:58:8e:bb:1d:d1:71:92:89:
e6:55:0f:89:ed:c3:e8:c9:b8:51:46:9d:fa:9c:f2:
09:8f:65:ab:bc:4a:e5:16:e5:08:dc:e7:01:fb:38:
21:d5:cf:ea:64:3c:40:1e:f2:e1:3e:e2:94:e2:00:
81:53:f1:f5:d9:dc:e4:00:12:ef:a2:b7:b5:4c:c8:
b0:c0:10:95:69:02:97:04:d2:37:d8:5a:98:29:5f:
ed:6c:74:28:4f:12:c0:8e:58:0c:9d:6d:bb:11:88:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:99:54:EB:68:E1:74:E9:31:72:14:85:93:F4:4D:7B:B3:BB:C8:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/229BA768D50211EFB3F054B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.14.0/24
Signature Algorithm: sha256WithRSAEncryption
94:73:b9:df:8a:24:18:00:e4:df:f1:e8:3d:da:0b:fc:cb:94:
a5:44:49:6b:44:c9:6a:ed:69:d7:2e:bb:82:cd:8a:34:6c:bd:
7a:c2:7a:eb:ed:5a:15:47:81:bc:ad:73:40:d7:77:e6:91:e7:
f0:00:ea:20:4d:35:c8:c2:3e:dc:4e:cd:03:ea:2e:d0:86:98:
51:01:78:ef:5b:ee:66:b2:26:ae:36:a2:b6:04:c2:2a:fc:ad:
fb:55:50:56:a2:49:07:bf:aa:bb:02:55:70:ae:38:87:1b:b6:
cc:17:42:84:74:4f:15:09:f3:90:9f:5b:12:3c:ab:2b:e8:5d:
7e:25:0f:66:c7:2d:64:ca:01:2d:76:af:3e:d9:91:19:03:64:
d8:3d:a0:3a:42:9d:d5:18:fe:e2:c4:53:e1:3d:9a:5b:7b:92:
7f:e3:b8:61:ca:fc:56:81:6f:a0:ab:cd:22:4e:c5:94:a8:d0:
35:71:54:aa:78:99:5b:62:fc:5b:ff:f6:8a:b1:1b:44:dc:1f:
50:9c:9f:e8:b5:44:0b:77:60:ee:4f:64:88:59:50:8a:a8:68:
31:ca:cb:19:15:0a:db:f3:c6:8f:46:d5:c7:22:87:c4:49:02:
77:ea:99:55:cb:2f:00:77:ca:4a:4b:c8:2b:b1:4f:9f:1f:ea:
c6:b8:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:04:02 2025 by rpki-client