Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/669447FADA6511EFBF185564762E951A.roa
File: 669447FADA6511EFBF185564762E951A.roa (raw, json)
Hash identifier: +yFtOHHYvHOqJlcnq7UKqeBQpMFddJUKyrNVn1+N++k=
Subject key identifier: B2:AE:C1:C2:02:67:C5:FF:B1:BA:07:B5:AC:13:E8:10:F6:36:B4:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/669447FADA6511EFBF185564762E951A.roa
Signing time: Fri 24 Jan 2025 15:10:52 +0000
ROA not before: Fri 24 Jan 2025 15:10:48 +0000
ROA not after: Sat 01 Mar 2025 15:10:48 +0000
asID: 44509
IP address blocks: 156.231.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69504 (0x10f80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 15:10:48 2025 GMT
Not After : Mar 1 15:10:48 2025 GMT
Subject: CN=6793ad7c-601c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bb:b1:f6:56:73:bc:9d:5b:f5:1f:5b:85:39:
ea:6e:5a:b5:c4:e9:c5:aa:8b:a1:7a:d3:f9:22:2e:
b7:10:e7:89:eb:63:96:40:e2:cc:4f:16:03:c3:5a:
b4:a3:4f:0a:6e:d6:f5:71:1f:e0:ea:e8:8d:58:e7:
85:22:6a:ae:c2:f8:e7:ff:32:44:45:01:22:74:a5:
95:35:bd:7a:f9:a5:65:34:9d:08:07:ff:cd:c6:5d:
2f:7f:95:57:a7:7e:01:ab:50:30:00:98:bd:72:4a:
ae:3c:af:f5:3a:57:85:8e:1a:97:6d:01:41:c0:cb:
a9:a5:99:26:78:b8:24:de:6e:92:20:47:b9:0a:a4:
16:30:db:ae:dc:b6:3b:e6:a5:73:fa:09:1e:6d:34:
91:6d:e0:5d:35:9f:2e:54:ab:e9:a1:b8:56:5f:0a:
02:07:ba:fd:7e:a4:15:19:76:ae:a0:dd:4e:46:19:
7a:95:72:8f:31:da:e3:20:f5:c0:e3:14:93:e9:90:
91:97:df:4a:da:97:17:d5:ad:8d:95:56:2d:75:d2:
c6:79:44:bd:d4:ad:31:bc:00:16:3a:c0:87:30:c9:
02:43:82:cf:bf:7e:97:30:35:c1:d7:04:71:0e:fc:
18:64:72:e0:13:b8:6c:d6:74:ab:7f:8b:83:de:49:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AE:C1:C2:02:67:C5:FF:B1:BA:07:B5:AC:13:E8:10:F6:36:B4:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/669447FADA6511EFBF185564762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ec:f1:2c:da:60:9d:d8:4c:84:8e:84:3c:6e:ee:f2:42:7d:
0c:31:ff:12:cb:22:2d:52:2d:ce:b1:b1:42:ac:9b:22:da:e0:
80:6d:ef:4e:6d:59:28:38:ae:51:11:2b:70:90:2e:29:68:cb:
a2:0b:45:b3:2d:57:48:fe:fb:b0:89:b9:1e:82:69:2d:fa:1f:
4a:8a:f7:a4:4e:93:6f:7c:ff:68:d5:b7:ea:cf:63:c4:bb:8a:
ff:a1:04:a3:89:c4:67:3d:31:7a:63:18:9d:78:27:ea:5d:31:
b7:b0:53:29:20:ea:25:17:ef:2b:ca:b0:f4:d8:20:54:03:1a:
8a:e3:77:7b:81:5a:c6:71:46:87:4b:76:7e:1b:db:52:7a:51:
17:43:98:cf:15:a3:da:24:f1:1b:36:8a:31:02:55:29:19:3b:
4b:b9:54:f3:36:2c:fd:5a:ef:15:88:eb:1e:6b:92:75:41:fb:
ad:49:a6:c9:74:df:a9:b4:81:8c:49:b3:b2:85:ad:db:50:42:
7b:e2:70:ad:8d:f8:a3:ce:c3:f3:25:8f:d5:a0:9f:59:6a:38:
17:25:db:3b:ad:14:d9:92:55:6c:4e:08:b8:76:b9:8c:ca:b9:
c7:bf:c8:fb:3f:56:4c:39:89:e6:a6:8d:28:b3:bf:34:ea:fe:
ba:ae:7d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:40:03 2025 by rpki-client