Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/992F3E9CDBF811EFB353FF85762E951A.roa
File: 992F3E9CDBF811EFB353FF85762E951A.roa (raw, json)
Hash identifier: LMEemeilJuOs2Ip3SNVwFkiONqi1tlHqL1Me1npK7hU=
Subject key identifier: 17:B4:5C:3C:D6:97:74:1E:1A:16:18:FA:99:3F:79:67:0F:50:2D:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/992F3E9CDBF811EFB353FF85762E951A.roa
Signing time: Sun 26 Jan 2025 15:17:04 +0000
ROA not before: Sun 26 Jan 2025 15:17:01 +0000
ROA not after: Sun 23 Mar 2025 15:17:01 +0000
asID: 63139
IP address blocks: 156.227.224.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70608 (0x113d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:17:01 2025 GMT
Not After : Mar 23 15:17:01 2025 GMT
Subject: CN=679651f0-0bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:df:fa:eb:f1:91:0e:a8:b5:0d:70:7c:a8:
2a:bd:0b:19:08:33:91:31:a3:44:27:3f:1d:f9:4f:
76:69:5a:3e:42:72:1f:75:85:6a:47:15:f4:28:03:
b7:b7:0c:c4:53:21:7a:b7:03:43:36:b7:45:fe:5d:
69:15:53:8b:08:5c:df:a9:a1:31:89:be:52:3d:a2:
3a:14:e9:ff:12:2e:de:26:51:d6:a0:d5:47:b8:3f:
5c:0f:77:96:3d:27:b2:1c:46:ef:04:ce:b6:52:98:
60:31:cc:0d:2d:39:07:cb:48:81:a3:2b:de:9e:f2:
ec:6b:cf:06:03:63:69:4d:c2:9d:b2:8e:9b:60:10:
4d:48:80:61:eb:82:c1:c3:a1:d9:d2:24:dd:7c:98:
fc:09:e8:48:d0:1e:e5:b7:d5:32:db:08:cb:e3:ca:
7a:7e:0c:d5:df:db:2f:a1:47:54:c5:57:63:c1:00:
6e:ad:2e:3e:0e:50:ad:aa:e3:2c:50:ce:9c:f2:e4:
68:b9:0d:e6:33:cd:f2:76:ed:6b:e1:3b:c9:cf:bc:
3b:73:bd:ca:76:33:b9:42:1a:43:4c:34:72:3c:f0:
ed:b4:86:11:59:70:b0:25:4a:86:96:9a:d2:35:40:
79:ee:de:82:b7:71:be:ec:2a:f2:2c:af:b7:45:2e:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B4:5C:3C:D6:97:74:1E:1A:16:18:FA:99:3F:79:67:0F:50:2D:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/992F3E9CDBF811EFB353FF85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.224.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:69:b0:f4:1b:ab:6d:53:d6:7b:f6:4b:aa:ca:6c:a6:b0:b0:
18:0b:f3:2a:0f:80:55:fa:be:1b:3d:7f:ed:3c:53:f5:c5:b5:
9d:e8:f0:5b:6e:7a:5e:c1:82:bd:05:54:59:43:71:d4:6b:60:
8b:52:da:01:91:15:7c:0a:9a:58:7f:7a:fb:7c:b9:25:2d:0e:
17:19:71:41:c2:66:ca:f8:4d:5a:cf:58:a6:a3:9d:8f:49:34:
68:44:07:c8:a0:8d:d2:7c:cb:e1:00:9e:84:27:13:ef:b1:f8:
62:46:1d:35:c6:ab:2c:eb:86:ea:de:1b:b3:2c:82:aa:83:6c:
5b:fe:bd:cd:7e:bb:ee:71:50:f1:c6:36:34:18:cd:54:c2:a1:
d6:1d:47:5a:2d:45:75:8b:99:ae:11:e0:8b:92:7d:e8:40:ed:
ae:e9:fe:51:0b:e3:f7:6b:ec:4e:5f:3c:94:f8:e7:9d:6a:29:
78:06:b6:82:7e:02:f3:05:75:1d:c7:f5:ff:51:a0:d7:a3:00:
23:50:f4:d5:35:34:87:c1:77:1d:fd:ab:8a:9a:34:54:bf:7e:
bb:da:a2:b6:bc:67:14:b0:62:4c:a5:60:03:1a:77:1d:f4:e6:
a6:df:cb:19:c0:47:b4:9e:d7:7f:97:3f:92:46:cc:0e:56:47:
b5:43:bc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:12 2025 by rpki-client