Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55658076DA6411EF9B69155F762E951A.roa
File: 55658076DA6411EF9B69155F762E951A.roa (raw, json)
Hash identifier: 3G/P7Zid5bAZUChIxEs/UHjJ/UkRT8uAwuUo21eMQ/4=
Subject key identifier: 25:0F:92:18:EC:7F:00:0E:A8:A3:DE:9B:11:20:26:D0:57:68:BF:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55658076DA6411EF9B69155F762E951A.roa
Signing time: Fri 24 Jan 2025 15:03:14 +0000
ROA not before: Fri 24 Jan 2025 15:03:09 +0000
ROA not after: Sat 01 Mar 2025 15:03:09 +0000
asID: 44509
IP address blocks: 156.231.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69500 (0x10f7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 15:03:09 2025 GMT
Not After : Mar 1 15:03:09 2025 GMT
Subject: CN=6793abb2-736a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:d8:b5:12:da:67:9d:83:bd:f6:52:06:01:
32:04:cd:23:e4:a5:f6:0a:39:ff:4d:06:77:19:d0:
e7:57:7e:70:27:de:4b:ed:7b:5f:54:3a:15:5d:30:
d3:73:9a:a4:de:d4:ec:b1:4a:0d:7f:b3:d3:80:2c:
0e:f6:5a:ab:46:66:de:97:a2:b8:b6:ff:fb:ed:b7:
72:0f:67:9e:6a:66:76:27:72:6e:61:6f:e6:c8:7c:
d7:16:03:a7:5b:81:c0:61:24:00:eb:e7:64:16:c4:
67:af:84:7d:38:f8:f4:90:46:60:ab:f2:7d:5f:41:
9a:cc:8f:fd:f5:14:d0:cb:57:b3:ce:18:78:57:d2:
57:78:29:cb:db:84:80:ac:83:59:f1:03:77:1b:c9:
37:63:66:be:75:f5:b3:db:c9:b3:14:18:78:ad:21:
06:6e:69:07:55:e9:ec:e4:29:ab:dc:54:c9:c5:92:
28:c5:b5:b8:08:43:2f:be:4e:e8:15:8c:e5:8c:b9:
97:f0:3c:64:cd:e8:e8:36:db:dd:cc:f8:a2:84:84:
81:5e:40:70:49:ae:f3:a8:81:41:bb:95:27:f8:2c:
7d:41:42:bb:90:f5:93:7d:09:45:57:7e:94:2c:61:
dd:41:76:ee:1b:86:fd:1a:c3:24:05:7a:0d:79:e6:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:92:18:EC:7F:00:0E:A8:A3:DE:9B:11:20:26:D0:57:68:BF:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55658076DA6411EF9B69155F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2e:83:86:a9:02:f1:60:a5:42:25:f7:93:1c:34:71:5e:58:
f5:4a:05:1c:90:53:09:8d:ac:9a:ee:b2:84:e2:19:b7:8c:ca:
03:67:45:d9:19:67:86:29:a4:32:2d:db:1a:8f:73:01:1f:64:
6f:cb:47:21:62:98:6c:f9:97:52:77:2a:c3:21:e0:7e:80:ed:
14:14:c1:41:55:68:25:c5:d7:60:97:4b:6d:f0:9e:16:4f:84:
05:39:0d:38:31:94:4d:25:1e:e5:5b:62:95:fb:5c:af:53:47:
74:64:75:6d:aa:b4:8c:47:30:98:c9:b5:b6:d6:82:ff:82:f2:
72:f0:ce:53:83:80:19:6b:21:ad:0a:7c:ec:22:ae:78:06:45:
7a:be:80:08:1a:db:f4:68:2d:ee:57:74:b2:4b:14:52:65:0e:
db:bf:62:fb:b2:cb:11:68:c9:e0:d5:cf:9b:91:cb:06:3e:81:
41:b6:6c:76:0a:e9:1b:16:c0:2f:b0:48:cf:98:4a:76:0b:40:
23:7d:59:d0:1d:66:7b:fa:e2:da:9e:62:dc:29:66:bd:38:75:
28:83:b0:49:1a:93:58:63:34:8f:b8:a3:fd:e6:4c:65:0c:f5:
60:4a:f3:6c:50:93:42:67:98:78:25:c8:81:a7:40:65:dc:9a:
79:3f:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:16 2025 by rpki-client