Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CC8959CD3E111EFB01FC560762E951A.roa
File: 2CC8959CD3E111EFB01FC560762E951A.roa (raw, json)
Hash identifier: qyo59k+Js679bGUiHWCe0icplg+CsJKQpHMMzFknY88=
Subject key identifier: 51:55:E3:B6:C8:78:99:25:6B:03:B6:05:79:3C:84:1F:FA:A7:78:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CC8959CD3E111EFB01FC560762E951A.roa
Signing time: Thu 16 Jan 2025 08:09:15 +0000
ROA not before: Thu 16 Jan 2025 08:09:11 +0000
ROA not after: Sat 01 Mar 2025 08:09:11 +0000
asID: 398823
IP address blocks: 156.229.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67824 (0x108f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 08:09:11 2025 GMT
Not After : Mar 1 08:09:11 2025 GMT
Subject: CN=6788beaa-f6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:79:d6:c4:7f:a9:69:5e:74:cb:13:64:b7:
95:7f:f5:fc:b3:8b:32:67:9d:ad:1a:03:e1:75:c6:
03:1e:16:7d:40:41:f7:2c:6e:87:2f:83:d6:9e:65:
27:36:9a:16:12:6e:5f:5b:0f:b6:29:a0:ab:36:45:
6a:36:34:e9:89:9c:83:34:98:e7:cd:5f:7a:1c:7c:
0d:26:32:4f:ec:01:ad:3f:ef:1b:a3:d1:0f:41:b6:
89:3a:a5:b8:97:df:d7:98:57:20:0d:05:ec:e4:58:
f2:c9:53:0c:70:5c:e1:9e:c5:e3:a7:c5:88:02:c2:
04:ef:2d:55:ed:f5:aa:61:ba:c6:5a:e1:8c:99:52:
f6:4f:f9:86:51:67:0f:9f:15:26:e3:af:25:b0:10:
24:88:90:9e:18:5e:03:5d:02:55:2e:5f:c3:25:6a:
e7:0d:84:c7:be:ec:d3:d1:a3:de:bf:49:87:0a:ee:
71:13:d4:15:51:56:b2:fb:ff:5f:57:28:1b:17:6b:
8c:ff:07:08:08:8c:50:60:97:37:54:62:22:06:30:
a1:6d:5e:70:a0:ab:67:e5:ac:13:4a:ae:19:af:ac:
64:a7:d7:05:29:59:02:c2:e7:eb:8d:43:6f:b5:d0:
27:85:69:41:1e:77:1b:7e:56:4b:48:87:6d:ce:0a:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:E3:B6:C8:78:99:25:6B:03:B6:05:79:3C:84:1F:FA:A7:78:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CC8959CD3E111EFB01FC560762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.176.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:9a:8b:c4:3d:ee:cc:0f:fa:bd:a0:54:27:96:c2:04:df:67:
8c:8e:d2:52:0f:e4:42:b9:46:51:bc:af:23:22:b6:60:b8:ec:
93:37:41:75:98:d2:f8:de:c6:14:3d:3d:e1:7f:e5:9a:df:02:
c5:69:70:02:c3:92:88:16:66:d9:85:5d:0e:b7:79:a3:7a:3d:
a5:75:12:50:c8:54:23:77:7f:76:29:3f:73:7f:ab:a2:d4:6d:
e2:bf:42:ae:60:80:14:d0:aa:06:5a:28:e4:72:eb:b5:6e:e9:
ad:34:e7:11:c1:6c:02:be:24:84:a7:43:fc:b7:da:2f:88:60:
5d:c9:9f:9a:e4:8d:7b:b6:03:fb:04:11:9e:9f:a0:a3:6d:ec:
47:be:48:96:3c:d0:76:38:85:6f:92:ca:f4:f2:25:fe:1a:29:
15:04:8b:23:0e:20:60:c7:ab:d4:30:5d:a6:d5:75:4b:ef:73:
7a:59:d7:d9:fa:2f:4f:de:47:8d:ff:27:ec:80:b4:e8:a6:62:
44:66:12:63:34:0e:d1:6e:b1:f5:0d:39:bf:6a:61:b1:a7:15:
d9:90:e0:13:0d:46:b7:d5:84:c6:ed:d4:2c:af:e2:80:86:31:
eb:e0:ba:6f:90:29:da:d8:68:37:1b:00:fc:9e:eb:ae:cd:81:
6e:7d:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:07 2025 by rpki-client