Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B555ED24DAF311EFB446FAAA762E951A.roa
File: B555ED24DAF311EFB446FAAA762E951A.roa (raw, json)
Hash identifier: 8XMEKF0C8JNO+qFO+T8fyAQL2TlFpMXxFZYU0MrgUkA=
Subject key identifier: 93:9A:98:B3:FB:AE:80:DF:AD:48:98:7F:79:90:63:70:2E:61:AF:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01116A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B555ED24DAF311EFB446FAAA762E951A.roa
Signing time: Sat 25 Jan 2025 08:09:33 +0000
ROA not before: Sat 25 Jan 2025 08:09:29 +0000
ROA not after: Sun 23 Feb 2025 08:09:29 +0000
asID: 44559
IP address blocks: 156.246.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69994 (0x1116a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:09:29 2025 GMT
Not After : Feb 23 08:09:29 2025 GMT
Subject: CN=67949c3c-8eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:9e:62:6e:3b:cb:59:6d:e5:09:13:48:2a:
89:e8:89:99:37:9c:52:f9:0c:4b:62:95:16:af:c3:
2b:35:76:67:74:ba:bf:d3:f5:7d:b7:b5:f6:68:12:
39:ce:bf:19:da:17:ce:73:68:08:a9:2b:10:24:c8:
b2:3c:d5:4c:a6:21:2a:38:1d:17:87:0c:4b:ad:8e:
92:9e:b7:17:ae:5b:0c:47:eb:07:5d:7b:64:8e:a7:
b3:7b:8d:54:75:c5:39:47:b0:99:3e:d7:48:c0:ab:
43:81:30:9e:82:f9:9f:6a:80:a3:3c:f5:06:cb:6f:
70:d3:6f:2f:12:c3:5c:e5:b7:dd:67:c2:dc:6e:cc:
b1:20:a9:1d:f6:08:31:38:a2:0e:e6:b0:15:ad:ed:
be:d9:53:d2:9f:d6:64:5a:92:1f:99:1c:77:8f:e4:
d1:21:b5:8e:4f:05:13:39:1a:48:a9:f9:fd:b7:76:
e1:74:0a:95:6f:0b:06:ec:66:22:62:c2:e2:45:df:
7d:c0:6c:85:44:65:7b:dd:ee:11:68:73:20:ca:5e:
96:e8:5c:48:36:8b:65:5b:57:48:e0:8a:a5:bc:56:
35:d6:4e:d0:8f:df:22:3d:5e:8d:21:47:52:de:2f:
ee:59:53:5c:64:5c:f1:06:f7:a6:d5:33:d0:14:16:
d0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9A:98:B3:FB:AE:80:DF:AD:48:98:7F:79:90:63:70:2E:61:AF:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B555ED24DAF311EFB446FAAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a3:d8:fd:7f:4d:03:b1:d0:7d:59:cf:9f:f1:31:54:29:82:
d0:8c:8e:d2:02:96:a4:a6:e2:61:ae:56:df:c9:9e:67:a8:d5:
7f:13:ca:c3:8e:bf:f8:5c:03:c2:d4:04:33:2c:9e:6f:7b:43:
3b:9b:68:29:6b:65:4e:d7:e0:f3:70:1c:86:5c:9c:40:ee:c9:
91:4d:0e:80:fe:05:45:6f:c2:e7:a0:f7:55:12:9f:1f:ff:e7:
22:88:bc:02:76:9b:76:c5:11:77:05:18:d9:f3:dd:87:82:18:
06:3a:ed:db:a2:68:b5:56:34:8d:0c:a8:f7:ba:e4:72:41:fe:
62:a4:44:3f:5a:c3:db:5e:0e:9f:7c:fc:bc:4a:5d:c4:b5:71:
32:01:6a:7a:56:58:aa:16:ae:6b:c3:8d:41:03:d8:64:d0:30:
2a:3c:31:28:dd:e2:f3:95:c1:7d:9a:e5:5f:bb:dd:d1:3b:e3:
69:c2:cb:b0:d8:3a:64:f1:5d:f9:b6:85:fe:a4:67:e3:6e:fa:
92:84:68:f5:34:94:53:b1:20:31:17:05:7b:2c:24:1e:86:ad:
c9:de:04:d0:7d:56:be:83:34:c6:a0:08:1c:33:2e:04:47:a7:
db:62:9f:1b:29:c0:0e:b8:8d:b5:93:4d:47:bc:36:69:1c:09:
8f:6f:d7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:06 2025 by rpki-client