Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48488CF8D52311EFBFC28390762E951A.roa
File: 48488CF8D52311EFBFC28390762E951A.roa (raw, json)
Hash identifier: q4mWWq43wlY2v0yF/1oz+FRDQVbAZnAMqwGr+lvIBLI=
Subject key identifier: 44:52:70:51:7B:FC:50:02:4D:20:B7:20:1F:E2:E3:21:10:13:1E:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48488CF8D52311EFBFC28390762E951A.roa
Signing time: Fri 17 Jan 2025 22:34:58 +0000
ROA not before: Fri 17 Jan 2025 22:34:55 +0000
ROA not after: Mon 03 Feb 2025 22:34:55 +0000
asID: 5068
IP address blocks: 156.224.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68338 (0x10af2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 22:34:55 2025 GMT
Not After : Feb 3 22:34:55 2025 GMT
Subject: CN=678adb12-2dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:a6:19:21:7e:2a:63:15:b6:57:b4:db:e5:
0b:31:7a:74:7b:5f:f3:51:71:fb:5f:6d:29:81:6d:
34:a1:ee:2b:11:5a:ad:a5:65:6b:c2:25:14:34:bc:
fb:eb:ba:6f:ec:d4:4b:d3:1e:18:7f:24:ad:40:96:
02:38:0b:e6:c4:38:84:ab:41:f9:a8:e0:c6:85:79:
c9:5c:a6:2f:97:94:74:4e:d1:73:b9:26:37:73:c9:
c5:c7:28:e4:51:45:c9:ba:68:85:a1:0a:02:5f:ed:
24:e6:58:2a:2b:92:92:ac:e7:f2:7c:20:e5:fc:a0:
7d:a1:5d:fb:7b:10:af:ec:82:46:87:99:83:bf:fc:
e2:fb:e1:85:d8:4c:c6:b1:a2:f9:af:81:26:b2:c2:
0b:f4:21:45:e9:6a:fc:b0:39:09:59:3a:f7:d2:9c:
f8:68:02:cc:76:7b:e0:8f:cd:bb:05:d5:5c:5a:5b:
15:c4:49:bf:95:81:a3:57:12:8e:db:e3:30:39:8f:
8e:5a:3a:c1:79:5e:6f:3b:1e:44:36:04:87:14:3f:
dc:bd:f3:ba:98:13:b9:17:dc:ad:63:be:88:72:1b:
3d:c3:3e:68:3b:a4:48:10:a8:d2:7c:c0:70:b8:43:
95:28:04:74:c5:1f:d3:54:21:18:09:05:e9:4d:7d:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:52:70:51:7B:FC:50:02:4D:20:B7:20:1F:E2:E3:21:10:13:1E:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48488CF8D52311EFBFC28390762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.84.0/22
Signature Algorithm: sha256WithRSAEncryption
00:b8:ef:ed:ef:06:07:d1:0e:22:a8:f1:c3:5f:98:2d:d7:8e:
2b:45:d0:ee:33:35:02:94:0b:0a:2d:1b:f4:52:97:5d:2c:e6:
46:76:92:85:50:4b:0d:31:af:3d:7a:e8:7e:03:92:eb:01:40:
df:74:7e:e5:d7:6b:3c:75:c9:7d:68:ba:bf:3d:ec:c5:b7:86:
20:0e:7b:49:87:34:90:a2:a2:e9:c7:16:bc:98:a1:86:77:44:
9b:a5:14:e7:82:4a:b3:0b:b3:56:1d:e9:42:3c:97:15:b5:0a:
cc:55:67:5d:b0:74:6d:cd:52:4f:bb:5c:4b:2f:a0:d1:54:42:
12:ab:d6:46:1e:a9:3f:30:5d:20:42:23:3a:54:92:65:dd:c8:
14:8e:eb:c5:dc:10:24:cc:17:63:51:0c:93:a8:57:76:22:2d:
6c:4e:6e:98:b6:e9:f3:66:6c:06:32:90:ad:11:a7:96:6a:db:
d6:89:a3:27:e7:26:8f:1f:85:6d:13:76:88:c4:e3:0a:88:ad:
b6:6e:24:0e:84:e7:d5:96:13:ac:ee:54:63:24:6f:13:f0:d0:
6d:ad:8f:b7:e5:64:f8:dc:81:be:77:7e:99:31:d7:54:90:72:
22:eb:92:5a:46:fd:cb:be:e0:52:38:b2:c8:66:56:3c:67:47:
2f:98:e0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:06:47 2025 by rpki-client