Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29BDFE06DD6811EFA1D11ABC762E951A.roa
File: 29BDFE06DD6811EFA1D11ABC762E951A.roa (raw, json)
Hash identifier: g9S2pMxzjviKR4Py2J0TKRn28Ulah6WGTeiylmEaOgM=
Subject key identifier: 1B:22:2F:52:CA:3F:36:38:F5:1C:D0:24:E9:67:DC:5D:C5:7D:2F:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01158E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29BDFE06DD6811EFA1D11ABC762E951A.roa
Signing time: Tue 28 Jan 2025 11:08:12 +0000
ROA not before: Tue 28 Jan 2025 11:08:08 +0000
ROA not after: Fri 14 Feb 2025 11:08:08 +0000
asID: 5065
IP address blocks: 156.229.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71054 (0x1158e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 11:08:08 2025 GMT
Not After : Feb 14 11:08:08 2025 GMT
Subject: CN=6798ba9c-8dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:fd:c4:46:aa:f9:e9:fa:6a:ab:24:a3:c0:
a7:35:89:71:56:4f:bb:10:a4:85:c6:3f:41:71:26:
c9:5c:ab:85:9e:21:c8:ce:a3:57:e0:86:23:02:9c:
a7:ea:6d:2d:c1:57:02:c7:1a:94:92:13:e7:88:95:
97:d6:ba:8e:f5:23:8e:fb:09:ae:37:53:45:8e:e8:
5a:c8:78:0d:1a:c3:da:0d:30:a0:2f:bc:3b:9c:f3:
0f:1d:df:35:1e:4c:8d:16:41:2a:1c:4e:ae:1e:b8:
fc:70:54:54:6e:07:7a:c1:61:16:50:97:26:2e:7c:
c6:82:73:2b:df:57:b7:95:0b:6f:93:c3:7d:fb:1c:
76:60:e5:2b:1f:aa:9c:b3:27:b0:79:ed:cd:22:20:
f4:d5:5a:53:cb:0e:18:0b:78:48:62:ef:1c:27:b9:
45:95:42:86:0e:bf:1e:95:9f:35:08:13:02:f6:e0:
66:31:e6:54:77:9e:bd:be:15:77:3d:f4:74:54:5d:
21:a2:41:1d:f8:86:7a:4f:90:5f:ad:78:fd:a6:6d:
5f:86:be:b6:c9:86:90:16:89:d2:ca:2f:04:4f:8f:
6a:df:5c:0b:64:33:03:64:40:26:44:39:c0:2d:7d:
75:ac:48:2e:1f:af:c5:8c:21:e1:cf:15:c9:2a:56:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:22:2F:52:CA:3F:36:38:F5:1C:D0:24:E9:67:DC:5D:C5:7D:2F:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29BDFE06DD6811EFA1D11ABC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.58.0/24
Signature Algorithm: sha256WithRSAEncryption
99:1e:5c:98:eb:d9:bf:bd:d1:b2:4f:cc:a6:a1:63:68:0e:28:
94:c7:8e:f4:ca:e3:1e:94:2b:4b:c2:dd:2c:96:c0:f0:c2:09:
32:d1:8b:5d:99:b9:e5:ef:c1:9e:be:42:25:a2:81:27:95:67:
59:1b:0f:e5:e8:e1:60:36:fd:f7:7e:4d:1c:d4:4a:a6:33:35:
52:9f:d4:12:55:ac:ba:65:da:9a:06:ad:96:6b:a1:f2:54:5c:
5f:80:38:69:3f:ac:bd:cd:46:7f:1e:35:17:e6:a2:1b:81:77:
ae:30:d6:62:e3:10:9e:d5:8b:b1:cf:07:63:7e:23:2f:53:1d:
ac:16:11:72:9f:08:f1:19:97:dc:97:d9:41:65:19:76:47:87:
84:5b:e5:d3:ba:7d:9c:28:dc:07:c4:98:7d:51:ec:f0:d5:60:
d3:4e:d5:ba:44:34:eb:32:de:e0:f0:91:70:c5:39:5c:b9:24:
fd:a2:ed:61:97:fd:76:c2:e4:b2:48:19:e1:f3:48:29:f1:a3:
c8:59:db:49:f4:b5:d1:a7:dc:23:d7:11:9f:0e:33:be:a1:1f:
d0:4f:6a:49:23:5c:12:37:23:51:5b:f0:7c:74:49:ef:67:5a:
ff:86:62:d4:a1:be:1b:5f:6b:20:63:0f:26:cb:e6:3e:66:70:
1f:65:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:51 2025 by rpki-client