Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B22BB2ADBDE11EFB39F9957762E951A.roa
File: 5B22BB2ADBDE11EFB39F9957762E951A.roa (raw, json)
Hash identifier: Xhou7ls07R0ReCarMdjr08eSrcXOHx1mupneMvCI6xs=
Subject key identifier: 4D:2F:B1:2E:86:71:8B:69:3A:AD:D3:14:2F:43:4F:44:2D:5D:74:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01136C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B22BB2ADBDE11EFB39F9957762E951A.roa
Signing time: Sun 26 Jan 2025 12:09:13 +0000
ROA not before: Sun 26 Jan 2025 12:09:09 +0000
ROA not after: Tue 04 Mar 2025 12:09:09 +0000
asID: 203020
IP address blocks: 156.228.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70508 (0x1136c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:09:09 2025 GMT
Not After : Mar 4 12:09:09 2025 GMT
Subject: CN=679625e9-65be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:30:fb:3f:ed:48:00:35:ba:7a:bb:08:67:
2b:04:b3:97:c9:90:91:6a:d5:9e:14:09:c6:84:fe:
ef:83:4e:73:17:c1:00:a1:98:dd:70:ba:c0:1c:1c:
cf:9d:86:27:66:a4:dd:5c:92:24:17:52:36:85:37:
74:3e:0f:80:7f:b8:82:34:13:f7:15:ce:ba:63:7a:
4a:30:f0:a1:e9:c6:af:24:8e:a0:d0:b7:5a:d4:cb:
91:ba:c1:07:e7:fb:df:85:42:ce:c4:63:f1:63:ef:
c6:b5:d6:52:a3:8d:9d:86:59:c8:d1:7b:cd:2d:fe:
3d:c4:30:37:d6:61:fa:68:d6:21:0b:6e:d2:b2:30:
df:12:fd:a5:1b:b7:65:76:7f:ca:8e:3c:6d:03:8e:
07:26:f3:c7:58:90:e1:93:59:fb:71:5d:a0:e8:68:
43:9b:80:18:68:af:c3:43:16:18:1d:d9:b1:a3:cf:
3c:40:e1:7a:b7:a9:c1:0b:08:0f:49:a6:79:bd:27:
c6:ac:3f:4e:28:13:53:cd:fe:f4:3d:73:9a:9d:2c:
54:ee:1c:6e:c5:27:9b:4a:38:4f:e6:29:34:34:49:
4e:7c:e4:20:41:dd:88:86:7a:c6:cb:78:43:08:99:
86:e1:75:9f:7c:32:8b:3f:c1:06:57:0f:73:9e:16:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:B1:2E:86:71:8B:69:3A:AD:D3:14:2F:43:4F:44:2D:5D:74:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B22BB2ADBDE11EFB39F9957762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.251.0/24
Signature Algorithm: sha256WithRSAEncryption
98:00:67:df:8b:02:36:35:72:9e:19:cd:7e:12:fb:61:5c:7e:
e3:d8:2a:28:4c:38:da:ce:f4:ee:3d:51:cc:dc:ab:db:b2:6c:
b5:13:7e:72:3f:44:3c:74:62:3e:f6:8e:d1:af:e0:a3:94:3b:
4f:05:bd:74:0b:3c:e0:bc:37:02:71:7f:49:ae:1b:1f:a7:4f:
f5:f0:f9:5d:af:da:5a:51:58:89:c2:6b:e4:b9:b0:bf:e5:33:
15:e1:13:e3:03:d2:13:98:13:a3:fd:80:f0:73:a4:3b:bb:83:
b0:a9:75:f4:c9:c3:7a:b2:2b:43:95:63:df:1a:f3:c0:59:d2:
50:b0:46:24:cb:ec:09:e6:1a:5c:de:70:32:a9:0d:20:c3:8a:
88:dc:79:cd:2f:12:61:72:9a:b9:14:6c:9c:82:b6:90:44:fb:
9a:1a:c7:cf:44:c3:0f:65:e1:1a:e0:72:ed:26:09:d6:b3:11:
82:83:4e:99:07:3e:dc:d7:47:82:30:8c:b2:df:e8:b0:1b:c2:
19:25:5b:9e:0c:2d:ee:e3:c7:0d:6d:e8:c7:f6:19:5e:62:39:
46:94:9d:ae:68:74:00:d5:84:6c:7d:74:31:47:ff:79:fe:4f:
4c:82:a8:d1:99:bd:78:97:98:db:20:d0:93:0e:59:27:ce:ca:
71:2f:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:31:19 2025 by rpki-client