Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94E9404CD68211EFA5435192762E951A.roa
File: 94E9404CD68211EFA5435192762E951A.roa (raw, json)
Hash identifier: 3BoiKhhk/HsOjGx3RFoh1mOKq7vMUON9MaQ4OsQRdEs=
Subject key identifier: EE:D6:1D:6B:E0:CD:E3:51:6B:2A:58:AD:E1:17:2D:5C:A0:78:6F:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94E9404CD68211EFA5435192762E951A.roa
Signing time: Sun 19 Jan 2025 16:29:40 +0000
ROA not before: Sun 19 Jan 2025 16:29:36 +0000
ROA not after: Mon 24 Feb 2025 16:29:36 +0000
asID: 395793
IP address blocks: 156.228.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68534 (0x10bb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 19 16:29:36 2025 GMT
Not After : Feb 24 16:29:36 2025 GMT
Subject: CN=678d2874-ddeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:6d:e9:4d:cd:bf:24:a6:96:cb:1f:ac:ae:
0a:bb:e0:58:4a:cb:d5:f5:52:69:fb:e6:da:12:77:
07:13:db:48:25:67:4e:15:8f:65:0f:17:a9:f8:56:
f2:e6:d9:60:fa:e0:8d:bf:6a:03:ee:36:a6:a4:0e:
7c:64:49:c4:fe:e0:2b:57:20:d9:23:b4:7f:85:a4:
80:ff:84:ab:04:cf:88:f7:35:5b:94:ce:70:df:f0:
04:9e:99:81:2c:c8:38:80:af:e6:57:25:d4:76:74:
74:9c:b9:79:d1:df:78:fe:a0:f7:ce:a8:f6:13:18:
85:42:4a:4f:78:f3:b3:91:95:01:cc:f4:a0:43:38:
43:88:bc:12:d0:0a:43:4c:e2:b2:40:25:a5:d4:9e:
ee:9f:1c:7d:f1:d5:39:ee:59:9b:e5:09:0e:d0:3f:
6f:af:81:71:6c:37:aa:01:11:db:96:a2:9d:f8:7d:
af:78:ce:0b:f3:58:37:c6:1f:27:5e:8a:bb:42:a5:
56:41:1e:92:d4:4c:27:f1:d4:f2:16:0a:f4:1a:84:
b4:93:1a:6b:23:8c:25:7d:81:a9:2b:e5:73:3e:50:
b4:0a:e0:80:41:ef:96:8b:60:01:61:e2:f5:8b:a3:
a2:c6:31:02:d1:61:76:3c:4d:89:9c:5d:bf:17:be:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D6:1D:6B:E0:CD:E3:51:6B:2A:58:AD:E1:17:2D:5C:A0:78:6F:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94E9404CD68211EFA5435192762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.62.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:53:e7:5b:c3:83:37:d6:17:d5:fa:4d:31:2a:34:b2:04:99:
a5:d1:3e:d7:ad:b0:74:f4:58:a4:15:4a:1a:20:ed:41:d9:01:
04:e9:c5:ee:b6:79:46:49:7a:dd:1e:48:0d:a5:80:40:69:24:
92:bf:8a:cb:22:d5:20:bd:0f:76:59:f3:1a:d9:db:c8:a5:56:
4d:b5:18:f4:50:38:cc:d7:b7:ed:42:b1:ea:53:13:1d:29:af:
ff:7b:22:83:dc:76:cf:dd:4a:7b:48:2c:a8:f4:36:f1:02:45:
03:98:e8:47:49:8b:51:df:bf:ea:f0:89:d2:12:6c:53:28:de:
69:41:65:48:fe:7a:f7:c2:b7:da:ed:c6:bd:19:60:57:34:a2:
5d:73:80:cd:da:40:f1:f8:77:22:2e:03:58:8b:4a:fc:eb:8f:
2f:16:9b:05:25:67:5b:2c:ab:a8:8b:36:5f:5b:87:a4:20:dd:
39:e7:96:b9:80:08:30:31:44:1a:e9:e2:cd:d8:d4:dd:72:4d:
f5:c2:ab:b0:de:af:ae:51:3d:7c:85:18:b5:83:7f:a3:fd:04:
ac:81:7f:c9:52:51:7e:db:ae:01:98:f7:5f:47:df:cd:80:ba:
39:31:c9:52:39:c9:40:f8:90:02:1b:60:1b:e3:c6:00:ee:3a:
c5:fe:d3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:25:07 2025 by rpki-client