Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/819DD562DBF911EF814DA38C762E951A.roa
File: 819DD562DBF911EF814DA38C762E951A.roa (raw, json)
Hash identifier: 9vL5uvVuMU/deMX055uFQK/BtS9yYqLT2H7CGIydEyU=
Subject key identifier: 1E:8F:21:58:57:27:A3:3C:37:A7:34:FD:4D:09:D9:83:52:2A:9E:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/819DD562DBF911EF814DA38C762E951A.roa
Signing time: Sun 26 Jan 2025 15:23:34 +0000
ROA not before: Sun 26 Jan 2025 15:23:30 +0000
ROA not after: Sun 23 Mar 2025 15:23:30 +0000
asID: 63139
IP address blocks: 156.227.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70614 (0x113d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:23:30 2025 GMT
Not After : Mar 23 15:23:30 2025 GMT
Subject: CN=67965376-f793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:24:ca:df:d8:95:23:47:ed:1c:ee:cb:8c:b2:
95:b9:34:b1:e4:fb:9d:1a:2b:4b:cc:a5:9c:8c:5c:
f1:72:e0:78:b7:30:59:47:9e:f4:34:32:bd:ba:d4:
70:3d:f9:a2:75:d6:82:d2:86:7c:ee:c3:7a:28:9e:
ea:09:5a:ba:9b:e3:60:11:b5:e9:98:47:86:6e:46:
da:30:28:c9:6b:a5:ad:ec:82:67:0a:22:0e:14:60:
60:ea:2b:25:fa:10:c5:db:6c:4a:d3:ec:0b:4a:22:
fb:83:f2:3e:a3:4b:40:56:55:85:f7:e4:0a:69:df:
4d:dc:b2:51:73:72:cd:2f:07:3f:27:2b:7e:ae:3e:
2b:23:05:35:f8:bb:01:63:90:ba:5e:20:5a:4e:a0:
0f:52:2b:15:ae:95:58:b6:1c:14:12:35:05:dc:ec:
a0:49:cd:55:60:d8:00:15:d0:26:40:ff:95:5e:72:
03:c9:4f:d5:dd:90:3b:5b:ed:3c:a6:42:fd:5f:49:
ee:77:be:7f:b0:aa:a0:19:89:84:2c:b2:69:38:26:
66:05:c0:cc:e5:76:db:29:81:6f:85:97:c7:04:37:
3d:d5:73:82:b0:78:a5:f2:44:09:e3:ab:09:c8:b0:
11:ba:63:3d:a8:16:48:83:5c:b1:5b:bb:9e:af:19:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:21:58:57:27:A3:3C:37:A7:34:FD:4D:09:D9:83:52:2A:9E:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/819DD562DBF911EF814DA38C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.230.0/23
Signature Algorithm: sha256WithRSAEncryption
27:4a:6b:a7:34:70:a0:9b:92:06:bb:94:a7:99:fe:e3:68:33:
d6:a7:2e:33:ae:8f:0c:9e:a4:25:78:b7:ad:16:fc:f9:06:3e:
c9:13:5b:b6:b8:45:20:b2:25:df:be:fd:42:e5:4c:78:a3:65:
20:c4:6b:8b:f5:68:7b:b2:b1:18:a8:bc:53:03:ee:57:c8:ee:
3a:fe:b6:5b:86:bd:31:f0:a8:f2:0e:0b:26:e2:87:df:95:5d:
ab:92:49:dc:a4:2c:55:8d:de:10:46:eb:48:01:f7:83:6d:6d:
6c:58:6b:00:b2:78:d7:1c:31:97:c5:74:7d:56:bf:95:35:a4:
1e:43:19:10:54:1c:d3:8f:bc:b7:71:e6:0e:6b:d6:b9:d5:f3:
36:46:1e:57:16:22:cf:77:98:af:a0:e1:80:12:b3:0f:b2:e1:
7e:c9:34:8b:59:a7:aa:48:7d:76:06:10:ea:d0:c8:b4:46:33:
60:2d:0e:d7:62:74:1a:17:5a:79:17:10:49:3e:58:73:c6:e2:
84:e3:2e:38:01:36:94:f8:4b:42:f4:cf:5a:c7:ec:9e:3a:93:
50:1e:e5:a5:e0:5c:35:1b:73:e4:f9:c0:5c:88:fb:28:de:93:
25:2f:d5:92:35:20:05:5d:e7:52:5a:df:f5:01:98:d9:4b:0a:
38:fe:da:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:47 2025 by rpki-client