Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25F4851EC32411EF8C3AE66F762E951A.roa
File: 25F4851EC32411EF8C3AE66F762E951A.roa (raw, json)
Hash identifier: uB8ycmis5dTw6DqBRwsJ6yZwRV2+R8V9iHDRvt74q8I=
Subject key identifier: 02:8B:EC:CE:2A:4A:B6:77:74:34:3B:BC:7B:1F:C4:C7:98:4E:78:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25F4851EC32411EF8C3AE66F762E951A.roa
Signing time: Thu 26 Dec 2024 00:55:49 +0000
ROA not before: Thu 26 Dec 2024 00:00:46 +0000
ROA not after: Wed 10 Dec 2025 00:00:46 +0000
asID: 984
IP address blocks: 156.228.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59999 (0xea5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 00:00:46 2024 GMT
Not After : Dec 10 00:00:46 2025 GMT
Subject: CN=676ca995-e140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:2b:3e:6e:15:76:92:63:1f:52:89:3a:86:
23:c7:a3:b4:e4:5a:8d:da:8f:9d:73:44:cb:f8:e5:
53:a0:d0:b2:d1:de:2c:1d:18:fc:cd:17:81:46:5b:
e9:76:6d:9e:a0:23:1e:fd:d8:42:c8:6f:b0:d3:f8:
9e:91:11:48:d8:01:bf:69:ee:e7:9e:40:31:f5:de:
fb:0f:00:75:2a:b7:88:93:92:3c:98:38:9a:d3:5a:
53:dd:31:2d:75:02:1e:c0:63:92:71:51:7a:08:06:
0c:39:57:a9:20:8f:a2:f9:40:52:42:f0:a0:3c:d5:
38:0b:d4:95:57:2d:0b:71:77:8c:2b:09:e9:80:24:
c5:d7:b6:6a:e9:df:95:81:65:32:45:c8:b8:28:73:
b7:dd:58:f9:70:d9:17:ae:8f:1c:40:0c:23:15:8a:
44:3c:d6:73:2d:52:45:18:3e:5a:ba:d5:30:84:e6:
c9:e0:50:79:4f:48:85:7e:fe:f9:4a:dd:f8:a8:57:
09:c0:02:db:d8:b1:32:f3:ad:bf:f2:ef:11:e3:e4:
d9:9f:f4:30:02:c0:2c:a0:7a:2a:3d:28:09:9d:31:
0d:0f:b6:c2:a1:d4:25:69:46:e6:f6:82:bf:5f:60:
04:5c:76:43:20:de:dd:94:ef:60:cd:e1:df:dc:7c:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8B:EC:CE:2A:4A:B6:77:74:34:3B:BC:7B:1F:C4:C7:98:4E:78:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25F4851EC32411EF8C3AE66F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.245.0/24
Signature Algorithm: sha256WithRSAEncryption
68:63:61:24:6c:fb:c0:f2:d0:51:c2:58:f7:f0:55:00:74:b2:
a5:ff:3d:41:5c:7e:5c:e7:b9:ec:72:e8:68:b1:7a:b7:b5:09:
af:f7:6c:34:0a:9e:d7:68:f3:50:29:a9:b3:3b:77:5c:67:1a:
a9:c5:6a:d0:1e:4a:61:9d:31:66:12:2d:34:f1:1e:d2:f1:92:
ae:41:33:13:4c:06:c4:bb:88:ae:23:b4:ec:1d:0d:3e:be:18:
bf:7a:4d:a8:78:fb:61:04:38:bc:db:d2:73:7e:41:01:cf:f7:
4b:8b:63:b8:7d:5f:ff:a4:21:29:b9:20:36:e9:34:02:a5:ca:
c3:f8:b8:99:20:ad:9e:3e:d6:49:35:3f:05:fc:ab:32:43:0f:
e9:c5:f1:98:dd:12:05:cd:f4:7c:98:99:4b:d0:ba:a7:5e:2c:
e5:93:bc:15:dc:4d:3d:e1:fc:73:2f:c2:78:df:ec:f9:3f:37:
4c:25:26:fb:86:fc:30:46:8b:78:5f:87:63:e4:9e:93:53:6e:
64:2f:96:8d:4d:90:a8:50:89:ea:c7:29:e8:b3:32:c2:17:c5:
e4:d6:86:5d:2d:ec:a3:21:4e:12:dc:fd:75:b4:c6:fe:26:9d:
ba:6a:f3:44:f9:8a:e9:54:98:b4:a9:a5:bb:38:d6:4a:83:94:
23:71:c0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:15:20 2025 by rpki-client