Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/590196B0DAF111EFAE5CB29C762E951A.roa
File: 590196B0DAF111EFAE5CB29C762E951A.roa (raw, json)
Hash identifier: dhn6EvJBTyocYM4oi1HTCUyYGM5ITfuV+iBO2v60yKc=
Subject key identifier: 08:6F:0D:81:21:70:79:5B:9D:4A:34:51:F0:BC:33:44:4A:62:B2:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01114B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/590196B0DAF111EFAE5CB29C762E951A.roa
Signing time: Sat 25 Jan 2025 07:52:39 +0000
ROA not before: Sat 25 Jan 2025 07:52:35 +0000
ROA not after: Fri 07 Feb 2025 07:52:35 +0000
asID: 5065
IP address blocks: 156.229.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69963 (0x1114b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:52:35 2025 GMT
Not After : Feb 7 07:52:35 2025 GMT
Subject: CN=67949847-6fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:e2:56:6d:15:72:0f:8c:23:98:28:6b:4c:
6c:f4:3a:c8:16:af:84:85:c0:0d:15:22:10:e3:b9:
25:56:10:16:16:ad:86:e2:95:c7:42:c2:2a:37:62:
61:4d:83:9a:0f:62:0c:0c:4b:6f:c6:46:f8:25:c1:
d3:09:a3:82:45:5c:b8:5d:12:a7:53:7b:1a:ce:92:
a9:f8:df:0c:16:2a:e5:2d:02:62:94:de:1f:60:f8:
01:fc:49:73:51:60:d1:39:d6:b4:1b:57:aa:9c:80:
1f:11:ec:28:db:20:a9:7e:b5:ea:3f:bc:0b:69:da:
c0:a0:0a:0b:04:fc:08:f6:e3:07:1f:90:d2:ec:78:
ba:64:8d:3b:53:ff:f7:8b:6d:1e:3e:c9:46:b4:a9:
f2:61:0e:4f:f8:1c:32:70:1e:10:bf:d9:8d:60:39:
b7:c6:b0:45:84:4b:01:21:34:c6:65:d1:4b:ad:a5:
2b:94:aa:78:4f:54:bb:1b:66:ac:4d:ad:dc:7d:61:
2c:1e:75:67:08:4b:9c:c1:47:cb:f7:06:07:90:62:
d8:4d:90:d3:b4:e2:13:af:21:40:83:18:d1:c5:75:
04:02:ec:1e:61:1a:c3:1f:79:a2:e8:5d:7f:81:28:
31:76:d0:da:eb:68:8f:2e:f1:8c:51:9d:b5:a9:48:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6F:0D:81:21:70:79:5B:9D:4A:34:51:F0:BC:33:44:4A:62:B2:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/590196B0DAF111EFAE5CB29C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d9:14:55:fe:68:cd:c2:cf:a7:a9:b6:ae:80:27:a3:5f:4f:
85:8c:be:50:8b:7a:2e:11:86:2b:80:98:07:32:b8:4d:48:8b:
9e:a6:a6:38:8d:57:b2:bc:fc:c5:13:64:e9:a7:3b:3f:34:53:
fb:08:ba:1f:0b:fb:66:79:20:19:22:86:a9:18:ae:a0:73:ff:
92:ee:86:c1:a8:87:aa:b3:fa:3b:c8:24:52:68:09:b9:4b:f1:
df:00:c7:70:d9:98:03:b8:94:58:cf:74:f6:ca:24:be:e2:fc:
c0:95:13:c3:db:67:26:70:05:cc:c7:0d:10:a9:ae:36:36:b2:
1b:74:11:f2:83:64:e5:5b:e5:d9:cd:59:b0:f4:ba:6f:fb:18:
a3:ba:5c:ca:54:75:a3:41:27:11:c2:fa:fb:be:77:d4:ac:cb:
05:41:fd:e4:5e:b1:5c:83:ff:dc:6b:8f:2b:09:1b:a4:2e:ff:
a0:90:18:2f:12:93:b8:be:e7:d8:80:37:bc:df:51:a1:71:e1:
d7:03:c9:91:26:d3:fc:1a:92:17:f1:0c:cf:2e:21:5b:76:e8:
ce:27:d6:48:58:bd:ce:26:28:71:f4:e1:f7:40:10:72:bb:fb:
ba:9d:0e:8c:b6:1f:95:58:45:8f:44:50:c2:7c:a9:ae:88:79:
ff:27:db:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:17 2025 by rpki-client