Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A33B0D56DAF111EFBBF12D9D762E951A.roa
File: A33B0D56DAF111EFBBF12D9D762E951A.roa (raw, json)
Hash identifier: tjGiZgw6glr8sBiB/9We6sC+MKYXdFfOfOcvJoU7dNA=
Subject key identifier: 62:37:DF:E8:22:1A:5C:30:EF:3E:1B:1C:BB:C1:2B:15:89:64:82:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01114F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A33B0D56DAF111EFBBF12D9D762E951A.roa
Signing time: Sat 25 Jan 2025 07:54:43 +0000
ROA not before: Sat 25 Jan 2025 07:54:40 +0000
ROA not after: Fri 07 Feb 2025 07:54:40 +0000
asID: 5065
IP address blocks: 156.229.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69967 (0x1114f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:54:40 2025 GMT
Not After : Feb 7 07:54:40 2025 GMT
Subject: CN=679498c3-957b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:3c:d9:dc:0d:55:73:63:f4:be:90:61:35:
ab:f0:ea:bd:82:aa:4c:19:c5:b4:bd:9c:a1:67:63:
1c:2a:9c:29:28:aa:fd:39:86:7a:8f:49:c3:59:0b:
ed:01:1c:41:3b:e0:1f:0c:ac:e3:ea:38:9c:44:62:
a7:5e:14:0d:c0:81:f0:df:7e:0c:d5:eb:91:0a:a1:
3f:92:ee:ce:6f:0f:42:4d:4e:88:8e:e9:7b:86:03:
99:57:73:9a:d5:96:31:d9:4d:02:44:92:72:bf:d2:
3f:db:ff:55:7c:a2:59:2c:bc:33:9b:d0:22:ce:1e:
4e:f6:24:09:c9:57:46:71:ed:13:8b:5b:52:24:f6:
f4:6f:30:bd:2f:91:61:a9:11:54:51:99:c0:fc:61:
21:f7:4e:a6:6e:f3:b9:f7:7c:18:46:d7:24:5f:c8:
59:48:ab:43:5b:f9:8c:28:90:96:7a:f0:36:a5:62:
e7:d9:b0:86:aa:20:d0:b5:87:c8:10:55:7d:10:8f:
03:03:d9:ee:df:79:a6:d7:8d:a2:e9:19:c1:05:6b:
61:97:c1:08:0e:4e:ec:61:88:8c:57:b2:67:d7:6a:
9e:01:24:4d:92:fb:5e:cb:f2:7d:ce:a8:92:ce:27:
f7:48:af:fa:3b:67:de:92:6f:b1:fc:25:2b:46:52:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:37:DF:E8:22:1A:5C:30:EF:3E:1B:1C:BB:C1:2B:15:89:64:82:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A33B0D56DAF111EFBBF12D9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.57.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e5:3b:44:08:af:36:9d:92:ca:97:32:f7:40:c7:b8:22:a9:
b6:67:e6:43:b9:3f:a7:3c:09:db:9f:17:36:6c:db:40:6e:06:
2b:62:fc:f9:cb:f1:28:cb:d7:fe:4e:c4:a5:71:f5:01:64:8f:
a2:7f:9b:cb:ea:96:54:42:81:35:17:80:64:e7:49:80:d4:f0:
68:af:e4:50:17:c7:df:14:f4:00:02:b5:29:ad:51:4f:20:bd:
1c:04:77:e4:9f:7e:5d:02:3a:5d:e4:3f:29:65:63:a0:e3:bb:
d8:a7:8c:9a:65:c0:1c:df:9f:c2:41:15:9e:81:4f:7b:00:d2:
97:aa:66:d1:1f:2d:aa:4f:73:78:32:89:7b:e8:cd:f4:e6:ad:
9b:85:1d:f8:b7:ba:5b:2a:71:c3:35:e3:b8:42:23:63:13:c5:
95:d1:05:ef:47:d8:93:51:9a:a4:ac:2d:46:df:6c:39:f2:ed:
f8:1f:31:7d:5d:61:d9:15:b4:ea:7d:99:18:20:0f:d6:fd:2b:
e0:d7:64:a3:c3:1a:08:37:8a:15:20:19:15:b6:40:bf:f0:d4:
f4:01:7e:14:e7:ea:6f:a6:a7:98:84:48:35:06:13:01:97:06:
2c:04:c5:b1:a5:61:a9:78:0e:15:1a:1b:44:2f:d6:42:9e:cc:
6d:c6:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:08 2025 by rpki-client