Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B8900F0E00011EFB8F2D3B1762E951A.roa
File: 3B8900F0E00011EFB8F2D3B1762E951A.roa (raw, json)
Hash identifier: exa/JV4hvatRlZ09uvDfDHpv8j4/pg0O6PGXE6lPxog=
Subject key identifier: CA:08:7D:43:58:23:D4:0D:1A:E5:98:5C:E9:15:76:4F:A1:6B:FB:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B8900F0E00011EFB8F2D3B1762E951A.roa
Signing time: Fri 31 Jan 2025 18:21:48 +0000
ROA not before: Fri 31 Jan 2025 18:21:44 +0000
ROA not after: Tue 04 Mar 2025 18:21:44 +0000
asID: 200019
IP address blocks: 156.229.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71391 (0x116df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 18:21:44 2025 GMT
Not After : Mar 4 18:21:44 2025 GMT
Subject: CN=679d14bb-7806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:97:77:61:27:9e:38:46:cb:9b:9f:63:fb:
fd:cd:45:54:b2:f8:9e:27:02:ae:40:56:10:43:f9:
6a:de:58:86:10:40:09:59:a2:93:f1:90:0d:1f:40:
fd:27:32:e7:02:34:4e:db:48:f1:40:18:01:86:86:
5a:33:de:30:a9:9d:fb:96:e8:50:0d:39:90:64:d6:
06:ed:ab:8d:3d:21:75:16:4f:c3:e5:c1:b4:93:a1:
0b:d6:bf:12:6d:9a:34:77:c8:61:77:fa:48:63:45:
fc:8e:05:77:a1:e4:6f:36:00:d3:77:98:05:de:63:
16:ab:f0:4b:ea:61:aa:12:41:a7:3e:7e:e2:c0:f0:
c0:d1:94:6e:40:db:9e:be:5e:a3:78:1f:ac:e6:8e:
7a:56:05:78:89:43:c7:80:17:16:3a:37:d8:82:6a:
87:30:0a:cf:65:90:4c:c8:5e:aa:71:be:da:8d:6c:
97:52:78:03:58:42:27:65:17:7e:db:6e:2f:21:98:
5a:92:18:35:81:51:e4:96:83:ec:8e:95:32:67:3d:
4e:4d:f6:39:bf:6d:a3:02:ae:dc:cd:70:e8:a5:7e:
7b:88:d4:dd:ea:dd:1a:4f:cd:23:c2:3d:04:6e:7a:
25:56:88:a2:04:0a:7c:4f:8d:64:88:14:6f:43:8c:
79:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:08:7D:43:58:23:D4:0D:1A:E5:98:5C:E9:15:76:4F:A1:6B:FB:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B8900F0E00011EFB8F2D3B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.228.0/24
Signature Algorithm: sha256WithRSAEncryption
05:14:f2:09:d2:8c:a8:1e:d8:72:db:4b:20:c3:63:78:82:a8:
6d:8e:9e:b4:ba:ee:12:3a:1e:0f:77:e4:76:b8:7f:5b:d2:b8:
cd:46:d3:ce:3e:7d:43:7c:e0:cd:f3:7d:59:46:d4:14:80:c6:
bb:a3:07:f0:f4:a3:e1:8c:4a:55:38:24:1a:db:c4:a7:d2:34:
26:f4:4f:25:0e:23:2c:aa:ba:60:74:87:cb:50:18:ce:f3:19:
72:80:a7:87:cd:58:d7:e2:58:74:67:ae:15:70:53:ec:c4:33:
10:9e:5a:fd:95:85:81:07:44:4a:0f:0e:24:15:1e:56:8f:f2:
7a:9d:5c:0d:a6:a9:d4:be:89:4a:14:a5:9e:f6:de:92:29:da:
48:51:e4:a7:f6:5c:31:7c:31:58:26:f6:e6:7b:0f:e2:ed:ef:
4a:14:0c:cf:df:60:c2:3c:e1:e9:fd:c9:56:3d:8a:3f:88:1a:
ea:47:c8:8d:4a:1d:2f:7d:00:65:92:2f:10:fb:ea:0d:a2:dc:
2b:89:9c:f1:b1:af:42:a4:b3:a6:b4:87:e4:3f:3c:61:80:9d:
72:26:5d:b8:ac:52:4e:0b:54:a8:67:bf:8e:09:07:a7:0b:a7:
1a:33:56:22:99:5f:e9:d8:ac:a7:b3:cb:f2:11:cc:1e:71:f7:
dc:8d:90:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:38:32 2025 by rpki-client