Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/495AFC62DFE011EF84DEF35C762E951A.roa
File: 495AFC62DFE011EF84DEF35C762E951A.roa (raw, json)
Hash identifier: lVlFDhXj3PsuS5fjkyEcraHteNQAb3Wm2i3ubScxUa0=
Subject key identifier: 4C:94:CD:73:6D:08:2D:50:CB:01:06:AA:54:1D:73:60:CA:C1:32:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011602
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/495AFC62DFE011EF84DEF35C762E951A.roa
Signing time: Fri 31 Jan 2025 14:33:07 +0000
ROA not before: Fri 31 Jan 2025 14:33:03 +0000
ROA not after: Fri 07 Feb 2025 14:33:03 +0000
asID: 63199
IP address blocks: 156.229.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71170 (0x11602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 14:33:03 2025 GMT
Not After : Feb 7 14:33:03 2025 GMT
Subject: CN=679cdf23-9353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:9c:cf:2b:20:28:d5:4e:a1:fb:fc:b5:c4:
a4:92:b5:dc:be:7e:ae:0e:d5:82:5d:72:cf:d1:e6:
20:62:ce:5d:1a:b0:b4:93:3b:0f:d8:b2:d7:12:bb:
71:86:14:5e:57:71:9a:61:7b:77:0a:d3:89:ab:f1:
a1:02:f2:74:2e:df:a1:49:f1:0a:45:dd:c0:86:57:
f6:80:98:65:9e:23:c5:6a:46:fd:b3:7a:db:00:a1:
3e:00:34:c8:d9:d8:ef:77:f5:86:0a:73:f3:cd:c4:
87:23:15:08:12:0c:9d:c8:73:0b:68:5d:58:c6:25:
f3:a4:8e:48:4f:02:6f:ab:57:8a:87:d6:b6:86:0f:
d0:f0:e1:55:ca:76:d7:58:84:07:6d:09:d6:c0:00:
cc:91:80:67:ae:67:44:df:43:28:67:1e:53:31:84:
15:68:7d:a9:14:54:74:5a:ec:6b:db:46:2a:a4:b9:
cc:19:bc:18:c4:c8:4f:10:30:3f:6f:90:78:92:ef:
be:fb:18:3f:2c:29:3a:5b:04:43:1a:1d:1e:08:bd:
8f:3c:c9:3a:bf:52:83:41:64:94:d4:5b:54:1a:ef:
df:db:3e:e1:25:c8:10:b1:cc:5f:fe:40:2f:67:27:
b3:9a:72:ec:c6:49:ef:d1:2d:85:40:3a:fb:13:f3:
ee:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:94:CD:73:6D:08:2D:50:CB:01:06:AA:54:1D:73:60:CA:C1:32:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/495AFC62DFE011EF84DEF35C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.120.0/21
Signature Algorithm: sha256WithRSAEncryption
99:cb:14:f1:22:50:d7:99:0c:1b:07:73:58:47:4c:d0:7d:92:
c9:6f:98:0d:d1:30:ab:2d:49:52:68:05:57:2b:02:90:f8:86:
9c:2d:95:ef:f3:58:ac:28:b5:d8:29:e9:42:4b:dd:d7:cd:93:
84:cb:3f:41:16:d1:4c:09:cd:99:dc:a9:98:21:35:37:a0:3c:
70:75:c7:11:9c:99:57:22:cc:08:23:28:38:f0:16:0c:19:54:
04:14:c1:6d:90:59:ed:64:b0:bf:fd:5b:b2:31:df:b1:6d:e7:
59:01:09:44:9b:78:6a:7e:9f:b0:e9:5c:94:c5:ae:21:00:6b:
f3:8c:f5:30:09:1d:7a:a7:1b:49:26:52:7c:03:ce:79:35:c7:
32:a5:d2:8d:8b:2a:b2:b4:51:33:5f:c2:ab:7a:27:40:82:22:
86:a1:f8:5d:d5:5b:e1:4d:50:2d:bb:3c:77:b7:2d:8c:3d:bf:
d7:72:3e:a3:cf:c9:dd:f7:74:9d:21:6d:4f:23:a9:88:67:38:
a5:af:70:ca:0c:67:74:46:10:7c:72:1a:65:24:f1:5e:7e:7d:
5f:3e:19:75:12:9b:ef:96:b7:47:34:c3:67:9d:e1:cd:af:d9:
85:ec:02:1c:b5:62:60:96:cf:e3:d1:17:6b:e8:c0:a1:f2:cb:
2a:89:e8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:48:10 2025 by rpki-client