Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BAEE9C8D51F11EF881E6776762E951A.roa
File: 3BAEE9C8D51F11EF881E6776762E951A.roa (raw, json)
Hash identifier: fQCT1BxkEAlJI6mxYnwdZGbXUapVKooEHV3wmAsQ/XI=
Subject key identifier: DE:EA:61:1B:AB:BE:34:B7:29:F2:A8:56:C8:86:19:63:A3:13:A5:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010ADE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BAEE9C8D51F11EF881E6776762E951A.roa
Signing time: Fri 17 Jan 2025 22:05:59 +0000
ROA not before: Fri 17 Jan 2025 22:05:56 +0000
ROA not after: Sat 22 Feb 2025 22:05:56 +0000
asID: 139646
IP address blocks: 156.249.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68318 (0x10ade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 22:05:56 2025 GMT
Not After : Feb 22 22:05:56 2025 GMT
Subject: CN=678ad447-b4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:a4:f7:63:77:11:ed:dd:ae:16:d0:7e:9d:
13:91:1a:e1:1c:6a:e7:75:b5:06:5b:d7:ee:3c:6a:
06:8e:e5:d6:a2:72:8f:06:ad:b1:8e:b4:87:4a:5c:
27:e1:d5:a0:4f:01:2b:9e:3a:90:65:6d:a1:fe:38:
c9:41:9c:73:00:13:c7:f1:dd:a5:b8:73:2b:c7:06:
42:10:2a:e9:d3:67:c1:fc:3f:d0:6c:78:ab:6a:ae:
5e:8c:03:b4:38:39:f5:85:66:94:37:35:74:9c:ec:
97:1e:06:1a:54:8d:fd:55:f5:92:ce:99:97:0b:db:
66:a7:5a:c2:cc:1e:60:eb:11:89:28:d7:26:79:75:
f9:87:0b:09:b2:c0:15:d4:2d:7d:b6:21:be:7a:ae:
37:fb:6f:2b:ec:04:c2:0d:6c:0b:05:36:bf:87:6f:
93:9e:f6:69:d4:78:d5:ba:f5:8b:b2:e7:af:57:16:
41:b4:52:1a:8b:c7:9c:4b:f6:0d:2e:20:cc:8e:ca:
16:a5:b6:cf:0d:7f:1d:5b:4b:b5:97:94:e0:33:ec:
5d:8e:20:8d:32:b4:8e:7c:5e:6a:af:2d:60:83:64:
e3:ac:5c:5d:6f:80:0a:a8:3b:71:79:10:95:ce:61:
b7:00:2e:6f:6f:88:e7:39:61:e5:07:e0:34:3f:2f:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EA:61:1B:AB:BE:34:B7:29:F2:A8:56:C8:86:19:63:A3:13:A5:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BAEE9C8D51F11EF881E6776762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:5c:80:26:97:6a:c2:39:c6:0f:c3:27:50:df:6c:a3:80:48:
2d:03:be:f8:3e:da:1f:5b:07:79:54:4b:b0:2c:3a:98:74:56:
2d:af:a2:44:95:bf:9e:57:6d:30:c3:3f:6c:a6:b2:bf:8e:12:
2d:09:52:1a:19:ac:50:09:9e:8c:c9:2b:4b:9e:61:c9:40:0d:
64:b7:6c:6c:ce:75:4b:22:4b:8a:16:4c:d2:62:4f:0e:da:48:
0a:4b:9a:81:4a:25:91:e3:cd:e5:1c:17:85:08:7a:12:d8:81:
20:a0:73:aa:e5:ba:c4:c2:bb:24:88:e6:ca:7a:84:3c:6e:fc:
be:86:f9:6a:e2:9d:57:62:9d:73:e4:1c:32:b6:a5:e4:96:ae:
fa:a0:b4:f9:2b:e5:53:0e:89:37:e5:d7:71:15:5f:9a:51:b2:
84:a9:81:71:06:b8:7c:70:98:98:dd:47:ab:e1:88:fa:c2:06:
6a:0a:d2:2a:40:32:ee:52:53:00:30:ce:f9:3d:29:ab:ab:43:
09:fa:1e:53:e1:f9:6a:58:fc:ba:78:61:df:af:92:61:d5:4d:
7d:99:95:7c:75:1d:f4:60:0c:04:2b:65:68:2e:e7:99:da:a0:
8a:6b:80:85:6f:11:e0:f2:30:6d:74:70:f4:b8:d1:62:8a:9a:
00:8a:38:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:10:31 2025 by rpki-client