Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9368110EDFFF11EF9F6F48AD762E951A.roa
File: 9368110EDFFF11EF9F6F48AD762E951A.roa (raw, json)
Hash identifier: t2BZ4RuyL5u47DQDvP1JEJKg/FQHowXqRHpH/irjF9w=
Subject key identifier: BC:4A:48:75:DA:37:9E:EB:05:90:A1:95:10:8C:A9:0D:E1:44:77:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9368110EDFFF11EF9F6F48AD762E951A.roa
Signing time: Fri 31 Jan 2025 18:17:06 +0000
ROA not before: Fri 31 Jan 2025 18:17:02 +0000
ROA not after: Tue 04 Mar 2025 18:17:02 +0000
asID: 60223
IP address blocks: 156.229.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71385 (0x116d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 18:17:02 2025 GMT
Not After : Mar 4 18:17:02 2025 GMT
Subject: CN=679d13a1-3fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:1d:55:e0:71:7b:ec:f9:00:4c:15:db:8a:
b4:ec:19:22:6c:4a:a1:c3:aa:42:99:02:52:b7:2e:
a5:94:ac:07:61:85:a0:6d:88:d9:ab:19:db:3b:e0:
95:29:89:b7:d9:16:86:f6:11:8f:6c:f3:db:42:7d:
c3:db:b3:39:3d:f4:ba:92:70:4b:5d:ca:ce:4c:43:
57:3b:e3:78:32:66:7c:30:8b:35:c1:2e:b9:33:38:
5c:5b:96:f3:7d:be:80:93:1e:10:bf:c1:7b:ba:e6:
2b:96:ed:c0:67:d6:7c:bb:18:c5:57:9e:76:f9:c6:
a6:e6:eb:1f:4a:45:24:e9:dd:7f:d4:59:8b:ac:70:
6e:d4:1a:ff:8c:1d:09:d2:4e:c5:0d:c8:fa:a0:5f:
de:ee:51:6b:17:54:cd:35:69:1c:e2:fd:9b:56:9c:
69:0b:24:86:b3:d9:a8:86:9c:f8:d7:40:9a:99:2e:
ed:59:6f:cc:3f:5b:c2:94:a7:7f:d5:a3:b1:f0:4d:
07:9a:ce:5b:6c:64:f3:fe:24:ff:47:70:70:36:dc:
cf:56:c1:7b:df:d5:fe:d2:a1:39:07:cb:48:bc:64:
ed:20:1a:67:5a:b2:cc:ac:a5:42:b8:ef:7f:97:b5:
5d:a8:d7:bb:bd:54:d2:aa:52:05:f9:6e:10:4b:33:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4A:48:75:DA:37:9E:EB:05:90:A1:95:10:8C:A9:0D:E1:44:77:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9368110EDFFF11EF9F6F48AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.252.0/23
Signature Algorithm: sha256WithRSAEncryption
99:26:43:f0:7a:1b:8a:e7:27:e1:fc:a8:4b:17:1e:f7:9e:9c:
b8:fe:87:ac:56:6b:7c:b0:ef:3f:3a:0e:05:91:e3:ef:2c:86:
26:91:a8:d0:26:c1:dd:13:39:eb:2a:40:f0:ec:04:0a:cd:82:
34:03:19:99:93:b4:9a:6f:82:c1:7c:47:31:94:f2:e8:af:dc:
35:5b:45:d2:dd:e0:fc:94:52:bc:41:20:09:4b:a8:cb:f8:24:
ec:54:15:8f:4e:1c:51:db:3c:c1:54:78:37:1c:39:93:9c:78:
b8:9b:16:6e:4b:c7:b9:a2:3d:1d:cf:2d:d4:f3:f9:b3:41:a1:
d8:c2:bc:81:ad:80:57:cc:d7:4f:29:8b:45:fa:74:8c:76:99:
87:8b:7c:e1:ce:20:ea:81:95:00:74:e9:d7:9f:ef:a1:4a:b2:
1d:31:6b:e0:15:cb:28:76:19:37:28:a0:39:54:e4:bd:f5:7a:
9e:2f:df:8e:e0:a3:6a:2c:70:ef:f9:64:29:4d:65:99:88:7f:
62:cf:fd:1c:82:f6:28:ef:ef:b1:d0:e8:d3:92:ba:5d:32:73:
15:b5:a2:ab:d5:07:8d:09:e6:ad:a2:2f:bb:2c:8e:9c:41:d5:
f2:8c:10:a5:a9:84:e2:93:48:f7:df:14:6b:00:2c:00:7c:90:
fb:2f:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:20 2025 by rpki-client