Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BDB016DBD211EF89584388762E951A.roa
File: 63BDB016DBD211EF89584388762E951A.roa (raw, json)
Hash identifier: JenIvc+l0N7f5kYRALAkx8v+BekJa6lj2pbMJzosqBg=
Subject key identifier: 2F:36:94:C2:CA:3F:05:AE:16:0E:72:BA:D9:5C:60:AC:8E:6C:8A:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011326
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BDB016DBD211EF89584388762E951A.roa
Signing time: Sun 26 Jan 2025 10:43:34 +0000
ROA not before: Sun 26 Jan 2025 10:43:29 +0000
ROA not after: Tue 04 Mar 2025 10:43:29 +0000
asID: 58689
IP address blocks: 156.230.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70438 (0x11326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 10:43:29 2025 GMT
Not After : Mar 4 10:43:29 2025 GMT
Subject: CN=679611d5-22de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c5:de:fe:72:32:f6:8a:8e:bf:2f:1f:2d:3e:
5d:d7:40:b6:5e:d6:a7:f2:b5:f9:d3:c6:bc:fa:7c:
2a:3a:c6:da:e7:aa:f0:4d:55:2a:00:e0:ae:27:68:
e7:73:8f:19:71:0e:1c:66:40:a0:e7:dd:ff:60:d2:
00:32:4d:01:69:35:dd:91:79:69:b3:37:6a:3c:3e:
0e:dd:1d:33:92:8d:16:54:84:fb:48:8e:58:89:fd:
9b:28:4e:8f:7c:40:03:40:3a:f3:ae:75:63:9c:e5:
24:6c:1d:38:4a:86:a0:6f:c5:8e:01:6f:54:ff:4c:
4d:dd:7f:c4:e4:87:62:c4:24:6e:00:16:b9:41:e7:
25:ac:1c:5f:24:34:44:5f:f4:5d:1e:45:ce:06:57:
af:3c:14:2b:43:f3:61:71:e9:1e:a1:41:37:d2:b8:
e9:c9:91:45:4d:f8:a9:9c:d0:4d:7d:9d:f0:01:f1:
15:8a:8e:18:ad:1f:63:db:e3:c7:50:64:ec:a5:a5:
d1:b4:c0:a7:95:51:67:1b:1e:a9:7b:a8:55:76:39:
8f:ea:51:08:0d:91:f3:d7:4a:14:71:83:31:8a:3e:
4b:af:f2:ed:78:ff:7c:1a:60:1f:1d:55:2d:9e:b5:
f9:04:75:33:e7:d9:4e:3f:70:f8:09:78:34:01:02:
a7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:36:94:C2:CA:3F:05:AE:16:0E:72:BA:D9:5C:60:AC:8E:6C:8A:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BDB016DBD211EF89584388762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.0.0/24
Signature Algorithm: sha256WithRSAEncryption
34:47:7a:b9:f5:7b:89:2c:8f:44:ca:f2:93:6f:0b:cf:74:0e:
39:18:be:1c:f4:42:19:49:d4:88:1f:b5:cf:8a:16:bf:f5:e0:
34:1c:ae:77:65:ab:8e:19:4c:a5:1f:f0:63:c1:9f:57:e8:66:
d6:9f:b7:cf:7c:06:df:04:86:58:d1:77:ff:b7:d7:8d:d9:4e:
ab:6b:6d:c7:c0:45:fb:5a:c9:ef:3f:98:a5:2c:f9:05:14:99:
bb:9b:c2:2a:34:cb:7a:ab:be:ac:ee:39:99:a3:48:5a:db:85:
a6:25:5e:67:43:41:8b:1d:6a:57:c2:b0:80:24:6b:2a:3f:64:
bc:9f:ac:75:9f:77:5b:1d:42:b4:85:6f:c5:b6:07:46:3c:40:
ad:56:32:75:70:18:c4:a2:0b:cd:c1:9f:06:cc:26:c9:49:bc:
fc:ae:fb:fa:0c:ba:8b:71:5a:44:ef:60:c6:5b:99:ca:0b:8e:
2e:d4:13:fc:ac:7a:fd:74:14:c2:84:81:95:ad:d6:b9:76:1d:
04:68:a9:34:5f:be:35:a7:ff:0b:37:da:c3:8e:81:72:ae:d0:
51:86:90:9e:a7:19:e5:86:7c:8f:b7:89:d2:87:87:fa:0b:73:
46:05:23:f2:cd:69:cd:f6:6c:c3:c9:c8:f6:db:7b:d2:b4:aa:
11:11:9d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:13 2025 by rpki-client