Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22C3D098D51711EFB68EEB41762E951A.roa
File: 22C3D098D51711EFB68EEB41762E951A.roa (raw, json)
Hash identifier: tvcQ3ooUoUu2BcKiIOSfJ84/Z/xd4lJ2dfAvJ5xQuM0=
Subject key identifier: 4C:00:BA:09:3E:DE:35:E4:27:2D:3A:EF:6C:57:85:C3:D9:27:91:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22C3D098D51711EFB68EEB41762E951A.roa
Signing time: Fri 17 Jan 2025 21:08:02 +0000
ROA not before: Fri 17 Jan 2025 21:07:58 +0000
ROA not after: Sat 22 Feb 2025 21:07:58 +0000
asID: 139646
IP address blocks: 156.240.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68276 (0x10ab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:07:58 2025 GMT
Not After : Feb 22 21:07:58 2025 GMT
Subject: CN=678ac6b1-0f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:37:f7:66:d7:87:93:ce:71:2d:81:78:75:
10:86:7f:6b:b3:7a:a6:35:34:35:c4:1e:6f:46:85:
52:6d:9f:9c:cb:16:ba:72:78:8b:ca:b1:75:69:a0:
0d:8c:85:5f:cb:d9:df:1e:b1:cc:c5:e4:65:70:e5:
63:e1:db:68:13:81:c6:c6:e1:e8:21:9c:c2:8b:f2:
1f:bb:f0:83:6d:43:b3:64:5f:22:00:ed:82:6a:b5:
e2:06:72:97:9a:fe:07:1e:f3:11:a1:47:e9:91:22:
1c:20:1b:72:00:06:9d:76:f3:47:12:a9:1d:29:30:
28:ea:ce:45:51:b9:e8:e5:ac:17:b4:88:cd:8c:88:
6a:62:ba:35:7c:f5:38:f7:fd:1e:d3:01:e0:6a:12:
09:fb:cc:b4:05:54:24:ec:22:44:5f:83:86:ec:06:
58:0a:2e:cc:7e:1c:91:af:3c:05:b9:5d:e3:2d:82:
68:9e:76:90:d6:1e:12:26:b1:ee:1a:29:82:73:30:
7a:94:37:88:48:f9:1c:50:11:3f:65:0f:e7:1b:44:
75:51:9f:73:d4:57:15:20:33:de:98:0f:ec:17:68:
52:8c:bf:da:1b:5a:ed:9d:af:4c:31:ac:3e:1c:a2:
9b:06:2f:18:6e:e5:2e:01:46:38:ce:96:74:a7:2d:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:00:BA:09:3E:DE:35:E4:27:2D:3A:EF:6C:57:85:C3:D9:27:91:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22C3D098D51711EFB68EEB41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:5b:58:3c:9b:9d:70:0e:fc:18:df:a6:98:ad:2b:bd:35:a0:
2e:d7:93:06:02:19:35:fc:30:9f:ea:c7:ff:47:94:c3:85:17:
6b:b6:e6:0e:46:d6:8e:ac:eb:db:00:58:3c:ab:bb:4f:e3:34:
a3:b1:62:e1:28:90:11:ef:d5:0e:50:f8:25:04:78:8a:ab:54:
ea:22:7a:c0:2c:a2:f6:9c:58:a3:33:d3:f9:d1:8a:09:75:b6:
01:be:8a:6b:cf:57:25:46:01:a0:8d:4d:92:8b:92:d1:e9:3e:
b6:6f:29:52:a7:3d:34:a6:a9:58:4e:33:de:9c:61:00:f1:22:
d3:27:17:82:36:0f:5b:d5:ba:1c:8c:9d:30:c3:b3:c0:81:6f:
7f:a7:fe:0b:78:5c:f0:47:2b:a7:c7:0e:a0:e9:e1:0f:81:b6:
07:01:87:6d:b4:ca:2a:13:5e:00:7e:f8:02:28:a0:ef:d5:22:
84:dd:cf:6a:86:65:d7:ea:c3:cf:79:c5:b0:23:57:25:47:13:
65:7f:61:7f:fa:e6:b6:35:ff:82:82:51:dc:96:83:cd:9a:81:
5d:9a:4e:92:0f:f1:b5:b0:40:53:6f:92:77:fa:7c:a7:ab:57:
e8:1e:9d:a5:9e:74:44:e5:92:ea:da:30:97:1d:2a:3b:8d:56:
e4:2f:5e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:58:50 2025 by rpki-client