Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49F64C06D7EF11EFA9FA3C6C762E951A.roa
File: 49F64C06D7EF11EFA9FA3C6C762E951A.roa (raw, json)
Hash identifier: oqbu3z7vrIBEEpoMSqGPBWBGVnUaQdcXajsFm9jLJFc=
Subject key identifier: 30:56:89:52:A2:5D:42:A4:C0:54:51:B7:5E:1E:15:AE:E8:C8:BC:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49F64C06D7EF11EFA9FA3C6C762E951A.roa
Signing time: Tue 21 Jan 2025 12:00:21 +0000
ROA not before: Tue 21 Jan 2025 12:00:17 +0000
ROA not after: Sat 01 Feb 2025 12:00:17 +0000
asID: 44559
IP address blocks: 156.246.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69000 (0x10d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:00:17 2025 GMT
Not After : Feb 1 12:00:17 2025 GMT
Subject: CN=678f8c55-3116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:d8:db:85:b3:78:a4:89:b5:dc:69:07:13:
96:a9:84:35:f9:8f:65:ce:d5:db:36:1c:45:ee:d5:
df:07:85:0c:84:26:01:ca:d5:6e:2c:f6:3d:b7:b7:
4c:dc:42:7b:e8:6e:d3:42:d7:dc:2f:d8:ea:ee:43:
a4:d6:82:29:da:e0:bf:1d:3e:b2:64:10:a1:0f:d4:
a1:81:9a:2e:e4:34:a1:f9:00:c8:45:50:f5:86:83:
90:1e:5c:7a:ad:bc:42:50:b0:74:a5:95:e6:19:10:
5a:63:e5:c2:55:e4:c2:4f:c1:7c:c3:ae:e8:8e:77:
fc:f2:ec:84:d4:c6:8d:4b:55:b7:ee:dd:eb:23:cb:
69:08:de:69:42:77:a0:e9:9b:15:36:56:34:cd:16:
6b:6c:c9:11:c0:6e:ec:19:d4:3c:f3:cf:1e:3c:51:
67:03:7f:fb:d4:2a:89:10:24:1f:b2:aa:11:fd:b2:
ca:04:50:73:57:07:fc:6b:05:16:6b:ee:7f:11:ea:
f2:b7:4f:9e:ea:bf:64:53:81:13:59:c8:e3:18:5b:
be:8e:c5:ef:45:89:32:41:23:3c:da:e1:55:f8:a1:
ea:c3:72:d0:a5:52:cb:7d:68:56:7e:b5:31:70:17:
36:3d:e9:2f:05:e0:dc:7d:36:30:59:73:39:b1:96:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:56:89:52:A2:5D:42:A4:C0:54:51:B7:5E:1E:15:AE:E8:C8:BC:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49F64C06D7EF11EFA9FA3C6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ba:a5:18:6e:99:8c:8b:73:d7:38:bd:0c:5b:2c:fe:c6:3e:
67:e7:48:63:ea:6a:07:ed:94:81:53:8d:38:2e:8d:72:fd:15:
43:90:ae:bc:c8:3e:f7:d7:87:03:b9:dc:78:e5:4e:3b:c9:19:
a0:d8:7d:0d:ea:b3:22:1f:c5:3e:2e:2e:db:59:29:db:f6:59:
fc:cc:0a:22:b2:05:e1:43:93:5e:ec:70:10:90:62:c3:a9:52:
d9:e6:e2:97:28:21:44:b2:80:31:9d:60:a0:b3:1a:b5:79:68:
d2:ac:1e:4d:a8:8b:68:c7:6d:20:9e:1a:47:54:24:41:14:cf:
17:6a:a8:91:61:5c:20:82:c9:e6:1c:70:c6:88:c3:ff:d3:80:
8e:f0:b5:08:9a:f4:ba:3a:74:b2:84:2d:1a:21:5e:c2:b7:93:
d8:1e:19:a4:cf:6b:e8:d2:16:59:04:9a:17:12:f5:aa:e2:ee:
6e:01:22:f4:a2:8c:d4:89:3c:0d:9f:9d:6d:74:53:30:ed:95:
22:d2:1d:cb:12:70:ce:4f:ac:ad:8a:24:71:e3:b8:5a:77:56:
6d:26:2c:80:c1:26:1c:cb:e4:c0:41:48:2b:88:24:d5:ae:53:
40:b4:d6:02:02:1d:73:13:00:ae:0a:87:6b:f2:ef:ca:6c:4e:
ef:d0:1b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:13:02 2025 by rpki-client