Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62BB02BCD96C11EF9F81A554762E951A.roa
File: 62BB02BCD96C11EF9F81A554762E951A.roa (raw, json)
Hash identifier: y9ki6sGrn9KLCNoMhgIDfTC72yAaGe83dPitdwRIi48=
Subject key identifier: 90:BB:4B:34:B8:EC:24:7C:3A:0C:41:1D:56:F5:81:64:5C:4D:93:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62BB02BCD96C11EF9F81A554762E951A.roa
Signing time: Thu 23 Jan 2025 09:28:21 +0000
ROA not before: Thu 23 Jan 2025 09:28:17 +0000
ROA not after: Sat 15 Mar 2025 09:28:17 +0000
asID: 138915
IP address blocks: 156.244.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69354 (0x10eea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 09:28:17 2025 GMT
Not After : Mar 15 09:28:17 2025 GMT
Subject: CN=67920bb5-56ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c4:c6:4d:4c:59:f4:aa:f9:9b:31:19:43:72:
6a:a9:4e:d8:e6:df:0c:f2:e2:0d:60:bc:87:36:35:
8b:8a:ac:89:b3:73:b5:5e:6e:b1:24:5a:1a:62:3d:
0f:dd:eb:72:9a:31:d7:ad:9d:96:0c:49:94:04:41:
e2:96:e9:f8:de:d4:07:81:89:aa:98:b1:46:44:46:
4d:f5:2c:6a:d8:90:6e:3a:d4:ae:04:43:66:7b:9c:
87:e3:e7:07:2b:19:55:63:24:9d:ff:e7:72:59:43:
a7:65:c2:3a:4c:39:30:bd:7a:44:1b:70:87:ee:2c:
cc:f0:e3:f1:09:63:bc:76:1f:31:15:96:f8:87:80:
95:a9:0d:e2:b3:11:39:e7:58:02:6f:ed:ef:f6:67:
a2:29:ae:31:05:5f:56:a5:8f:7d:ba:a3:83:a7:f9:
df:88:39:48:84:07:78:cd:af:d9:71:1d:c6:aa:cd:
3f:39:22:a2:1f:ea:fb:84:b3:72:8c:2d:19:c9:75:
9c:6d:02:03:43:fd:25:13:2e:55:a6:c9:76:52:dd:
86:37:55:f0:8d:23:28:11:69:f8:86:5b:35:17:64:
71:9c:8f:74:d8:97:ba:f9:41:96:1d:52:ec:9f:b8:
6e:0c:b7:52:53:65:b4:cc:68:d2:bf:30:ba:8c:ea:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BB:4B:34:B8:EC:24:7C:3A:0C:41:1D:56:F5:81:64:5C:4D:93:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62BB02BCD96C11EF9F81A554762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.22.0/24
Signature Algorithm: sha256WithRSAEncryption
86:de:aa:a8:63:64:6a:66:19:5b:a5:72:78:00:90:ce:94:7a:
9a:2d:13:a9:5b:c9:da:31:74:59:f4:89:17:28:0c:a9:43:2a:
b0:bc:7f:59:e7:a2:0b:58:d8:03:01:1e:7c:7a:31:45:a0:a8:
cd:da:30:fc:13:39:c0:86:39:07:1c:ea:f0:0c:8b:1d:49:4e:
64:75:72:35:68:5f:ce:81:07:7f:c7:c6:01:57:6d:5b:5f:0c:
5f:d9:db:82:78:73:27:67:8f:7f:a6:25:62:2c:c8:18:59:36:
6b:39:09:3e:0e:7e:c1:93:68:bb:4e:0b:2d:77:89:5e:81:2a:
5b:34:fb:ba:e0:43:72:13:c4:c5:05:ef:39:ad:d2:4c:86:4a:
01:bb:07:01:55:54:43:51:a2:82:d4:35:bd:1d:59:ca:99:a1:
d6:4b:6f:3d:db:78:0c:62:a0:7d:a4:11:01:5b:3a:93:22:2c:
a8:75:bd:2c:1a:84:c2:18:c9:30:dc:54:a7:ff:e8:03:aa:5d:
a7:6f:64:79:ce:34:57:2d:a0:01:a8:e2:35:d0:de:d2:95:55:
b1:b0:a4:93:2b:cc:78:b0:46:42:e7:28:d9:b7:4c:ad:bf:81:
85:6d:e7:77:52:30:7c:97:82:93:92:5c:4f:1b:b8:de:b0:17:
40:19:8a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:32:13 2025 by rpki-client