Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32C07ECCDBF911EFAEAD7D8A762E951A.roa
File: 32C07ECCDBF911EFAEAD7D8A762E951A.roa (raw, json)
Hash identifier: iJ1CyBKJs+RkyTlCPJ/7IWSIDDH/Gnc94D17FDG5yX0=
Subject key identifier: 74:48:9D:A6:64:96:A7:0E:D4:9E:8C:18:AC:58:1F:1D:AB:2F:CD:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32C07ECCDBF911EFAEAD7D8A762E951A.roa
Signing time: Sun 26 Jan 2025 15:21:22 +0000
ROA not before: Sun 26 Jan 2025 15:21:18 +0000
ROA not after: Sun 23 Mar 2025 15:21:18 +0000
asID: 63139
IP address blocks: 156.227.228.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70612 (0x113d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:21:18 2025 GMT
Not After : Mar 23 15:21:18 2025 GMT
Subject: CN=679652f2-13c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:71:e0:cf:af:ec:d0:75:61:9c:2e:9f:80:
8b:2a:91:c8:07:6e:c5:73:2f:98:3f:62:a9:59:01:
16:6b:8d:7f:bc:6d:ca:db:1a:34:32:10:92:94:38:
8e:28:74:a8:83:b9:27:ad:71:b0:f8:35:b0:55:94:
55:91:33:9f:b8:8b:cb:13:af:71:eb:3e:bd:ee:70:
47:03:0b:1f:3a:90:f2:e7:80:1c:b2:66:1c:19:51:
1a:87:3b:d2:bc:7b:f9:9c:6e:ea:ae:e1:ab:80:24:
e6:7a:09:ac:2b:70:2f:2f:b8:8c:db:1e:38:75:71:
41:05:ee:2c:30:d7:5f:9e:67:9c:b0:9b:cd:bb:19:
4f:af:11:94:3e:b8:da:99:f8:20:60:ec:32:17:92:
c4:11:29:2b:04:67:c5:fa:aa:d5:a8:7d:81:e4:9c:
06:54:4d:99:69:5a:57:03:c4:4e:2a:8a:98:d0:34:
b5:9e:7c:f9:be:a2:e2:31:a6:20:26:b7:ca:9e:54:
c6:ce:55:ba:ca:0f:1e:bd:54:52:8e:74:83:69:8c:
d7:67:f9:57:96:88:a9:a6:bf:61:3b:49:a6:14:d3:
b7:ad:0e:e8:73:bd:5d:33:76:21:0c:32:87:72:92:
71:2d:5e:75:80:57:f0:b4:90:c5:3a:bb:8b:a5:2a:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:48:9D:A6:64:96:A7:0E:D4:9E:8C:18:AC:58:1F:1D:AB:2F:CD:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32C07ECCDBF911EFAEAD7D8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.228.0/23
Signature Algorithm: sha256WithRSAEncryption
59:80:9a:13:3c:cf:2a:4e:ba:a4:4d:0c:d4:71:97:a8:73:f6:
3f:5c:66:d9:fe:5d:d8:74:25:1b:09:36:42:24:e6:af:6c:7e:
b6:c3:37:1a:f7:71:91:de:02:5a:aa:ae:26:44:7f:bb:69:5c:
b8:ff:bf:ed:56:0b:0c:d8:db:79:7e:e9:dd:4f:a0:5d:cb:5a:
f2:3d:56:de:b3:2b:2a:df:d9:32:3b:25:f4:44:55:fa:82:7b:
ea:90:7d:a7:c2:17:8f:15:5f:b5:5c:48:ea:77:6e:00:57:9a:
a4:66:87:56:1f:98:c4:6f:f1:d5:27:5f:a3:25:2a:b9:c8:0a:
f7:ad:4e:77:06:1b:09:2f:c5:43:b4:08:fb:f5:50:5f:60:5d:
a8:cd:4d:09:6d:f8:7e:68:1f:c7:ca:a4:fe:c9:f6:79:81:55:
12:e8:d7:9a:b4:b9:b9:47:81:3c:c5:87:3c:7b:7e:0c:b4:6b:
dd:35:e0:58:41:37:7e:40:81:3f:33:2d:28:1d:8e:0b:db:fb:
79:70:67:c4:5f:2d:d2:4d:c6:f3:50:2b:05:b1:02:14:53:e1:
ea:29:6c:fd:a6:14:ca:9c:8a:41:5e:1c:7f:91:80:71:4f:2b:
e7:86:5b:9e:04:05:56:36:4d:cd:5c:e3:14:f6:64:cb:cb:d7:
6c:9f:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:47 2025 by rpki-client