Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B1A904EDFDF11EF84719A56762E951A.roa
File: 5B1A904EDFDF11EF84719A56762E951A.roa (raw, json)
Hash identifier: RWxE5ioFbYAn0dTN2IhZCXeggpaDVhEGS6sTxvcMOpk=
Subject key identifier: 89:88:F8:6F:61:BC:FA:83:26:1C:27:F6:CE:8C:4F:38:36:34:CE:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B1A904EDFDF11EF84719A56762E951A.roa
Signing time: Fri 31 Jan 2025 14:26:27 +0000
ROA not before: Fri 31 Jan 2025 14:26:23 +0000
ROA not after: Fri 07 Feb 2025 14:26:23 +0000
asID: 63199
IP address blocks: 156.230.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71164 (0x115fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 14:26:23 2025 GMT
Not After : Feb 7 14:26:23 2025 GMT
Subject: CN=679cdd93-f68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:e4:94:84:1e:9a:bb:4a:bd:99:ec:0b:ff:
26:93:89:e6:35:1f:ea:35:ae:bc:39:fb:f7:78:63:
0b:82:84:34:75:03:45:b7:a3:0f:cf:44:cc:6a:f9:
3f:0b:85:d8:ed:05:02:80:f1:f4:dd:da:78:97:6e:
7b:d2:de:d6:ae:61:2e:53:ef:29:ab:3f:56:17:cb:
9c:5e:04:be:d6:32:69:d8:b9:c2:9f:9e:b2:a7:d5:
db:a2:1f:78:fe:3b:c9:82:4a:73:6c:54:bd:70:9f:
bb:7a:4e:23:cd:5e:a3:cb:e4:b8:c5:ce:79:9b:90:
e0:a1:bf:02:f0:53:51:b4:0e:53:0a:18:2d:e5:3c:
01:72:f3:c9:5b:ef:a4:d9:cc:30:f6:52:c1:cb:d4:
48:90:92:fb:79:d2:f6:5c:d0:1c:8f:f8:d0:0f:a7:
dd:18:f3:9c:ed:7a:9d:89:a5:d8:19:c2:12:ba:a2:
e1:0b:14:f1:83:32:81:a3:ce:64:ea:d3:ef:c9:7b:
a5:2d:f6:c7:aa:10:6b:35:77:ea:a1:54:9b:d7:2c:
b1:36:36:39:58:2c:63:65:a2:d1:62:1f:5b:68:65:
f9:f9:c3:ab:04:49:7b:64:1c:d3:08:11:6e:21:86:
0c:c6:56:06:b4:76:1f:79:d3:5a:42:9a:d2:21:d7:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:88:F8:6F:61:BC:FA:83:26:1C:27:F6:CE:8C:4F:38:36:34:CE:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B1A904EDFDF11EF84719A56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.52.0/22
Signature Algorithm: sha256WithRSAEncryption
05:9f:25:b4:d3:c8:29:c7:1f:25:2c:03:ae:a5:01:f8:51:af:
c3:15:df:45:59:9c:67:25:4c:34:57:c4:9f:1d:f8:72:f6:a2:
53:97:76:bc:de:53:ef:c3:c7:93:ae:1e:bf:42:41:c8:4e:d7:
4c:ac:a0:ac:e8:92:a1:46:89:d0:8e:1a:f9:02:1e:46:74:41:
8e:fb:22:75:63:a3:8b:7d:76:3e:72:63:4e:61:19:11:59:20:
05:5e:dc:e7:a0:87:08:2a:d3:7c:13:00:66:52:9c:d0:5d:f4:
a6:0b:69:11:9e:0d:39:bb:68:ce:c2:58:1b:82:56:71:46:ae:
76:8a:45:4d:bd:76:9c:54:62:93:2d:1b:57:ba:8f:ed:ca:11:
b9:9d:8f:ba:72:72:bc:62:ce:cd:b5:5c:4c:8c:9f:b7:d2:e4:
38:1d:59:5c:5f:57:dd:ab:de:78:a9:8c:b5:28:59:ee:4b:18:
08:aa:28:c9:b3:c4:c3:44:5e:e3:e1:fb:0f:3e:c1:e3:23:4d:
ee:96:eb:55:c8:d8:0a:56:86:47:f4:9e:7c:0d:62:ca:a6:d3:
b7:b3:ef:41:00:dc:17:bd:0d:d7:42:8e:7f:48:08:25:b3:d6:
06:f0:7a:d2:4e:a2:0a:83:11:e7:05:8b:fd:57:92:cf:ff:04:
b6:ca:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:16:23 2025 by rpki-client