Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F1CC412DBFD11EFA152BAA5762E951A.roa
File: 6F1CC412DBFD11EFA152BAA5762E951A.roa (raw, json)
Hash identifier: 3AHDdH+a0wd9D9M87ORx8KbgIOOoFRBL0+KWN29coKs=
Subject key identifier: 23:48:3B:F0:25:90:A4:AD:F7:7D:F2:7A:75:06:EF:BA:63:28:34:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F1CC412DBFD11EFA152BAA5762E951A.roa
Signing time: Sun 26 Jan 2025 15:51:41 +0000
ROA not before: Sun 26 Jan 2025 15:51:37 +0000
ROA not after: Sun 23 Mar 2025 15:51:37 +0000
asID: 63139
IP address blocks: 156.227.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70640 (0x113f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:51:37 2025 GMT
Not After : Mar 23 15:51:37 2025 GMT
Subject: CN=67965a0d-4769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:ba:51:79:5b:fd:60:4e:87:45:1a:28:f4:
5a:e8:db:7a:5a:c2:41:14:ed:f8:bc:cb:38:31:38:
9c:36:50:d7:a8:89:92:cc:49:48:e6:fd:d4:a8:54:
6c:de:5a:28:10:5c:2b:18:d7:5c:60:18:c2:48:b3:
9e:52:56:71:ac:42:18:8a:71:64:1f:b0:ee:59:3c:
f9:8d:19:b3:7b:30:2f:07:ed:75:f1:55:09:a5:a6:
fa:d8:1b:c8:52:ef:a1:4f:70:3c:58:ce:87:6b:00:
60:ae:b3:e2:1e:0d:42:7f:ae:2e:0d:08:05:02:53:
0d:2a:69:b7:c9:b4:12:9a:08:87:b9:e9:2a:a7:bb:
32:94:ae:f0:e4:69:c0:45:7c:a2:c3:a3:0d:65:98:
91:23:7f:da:b6:3c:d7:57:84:8d:be:d3:83:36:ff:
3a:26:ce:ec:6e:7b:8e:65:fd:3c:1b:a5:6a:3e:9e:
77:2e:2a:89:04:a5:b8:ad:08:9f:1f:f0:f8:c1:99:
86:55:02:b8:b9:65:6e:9f:98:b3:6e:aa:50:5a:eb:
c6:52:75:f3:71:a5:42:91:84:18:89:a0:9f:dd:f4:
78:f7:2e:09:0c:6d:67:4d:85:90:bd:19:57:7e:19:
72:49:1b:5c:d4:47:2a:c6:e0:17:3f:ec:2d:49:76:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:48:3B:F0:25:90:A4:AD:F7:7D:F2:7A:75:06:EF:BA:63:28:34:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F1CC412DBFD11EFA152BAA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.199.0/24
Signature Algorithm: sha256WithRSAEncryption
95:5b:da:5e:5c:b8:0e:67:b2:07:6c:00:fd:77:ad:0d:c4:1d:
41:f4:ba:7c:b4:b5:a7:cb:10:54:56:95:85:27:14:63:9a:28:
2a:21:ff:74:4a:08:de:fd:5a:5d:0c:0e:51:4f:b9:d0:0a:ab:
46:c9:9c:df:f5:5b:f7:01:1f:7e:77:fc:21:15:cf:91:b5:20:
ad:6c:58:40:98:7d:93:69:fd:28:dd:a6:99:b2:ea:75:4c:e2:
61:ec:9d:dd:91:51:af:ea:1e:b5:c6:4c:31:a2:14:51:e5:32:
1a:49:fd:3a:5c:bc:d7:1f:39:ea:fe:a7:b2:31:a9:9b:47:09:
62:f9:d1:c9:76:cf:d3:d5:b2:6a:65:7d:fa:3e:29:42:36:7d:
d5:20:3f:4d:f4:f4:2d:e6:56:c8:48:38:96:9f:62:a2:0f:64:
4d:0e:64:60:21:2b:7f:ca:6f:cf:3e:cd:e3:91:c3:ef:ed:0e:
bb:9d:7c:98:02:dc:4b:66:89:a1:40:c4:b9:ac:4a:46:6a:74:
c0:56:ca:1d:63:dc:9b:41:da:d4:54:2a:9a:88:27:37:90:1a:
a2:a7:ea:e7:4e:c3:bd:3d:d7:c6:ff:b4:75:7b:bc:39:42:14:
b7:a5:d9:3a:ec:f5:35:e2:6e:40:1e:8c:10:a9:32:21:cf:44:
47:f6:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:54 2025 by rpki-client