Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5997A58DA2111EFA3C7369A762E951A.roa
File: B5997A58DA2111EFA3C7369A762E951A.roa (raw, json)
Hash identifier: SJdwuEkmqwMLoxbh+Y6PB7wQh/B4YnOl9bFUMYzr704=
Subject key identifier: 0D:D4:F9:0F:18:7B:CB:DA:38:60:4B:16:5B:AF:10:8B:D0:64:DE:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5997A58DA2111EFA3C7369A762E951A.roa
Signing time: Fri 24 Jan 2025 07:06:19 +0000
ROA not before: Fri 24 Jan 2025 07:06:15 +0000
ROA not after: Sat 01 Mar 2025 07:06:15 +0000
asID: 61112
IP address blocks: 156.231.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69401 (0x10f19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 07:06:15 2025 GMT
Not After : Mar 1 07:06:15 2025 GMT
Subject: CN=67933beb-3bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:8e:15:b5:61:cb:6e:0d:b5:ab:a7:21:4d:
7b:87:e0:4c:94:9b:8c:35:da:c9:5b:df:f0:00:bf:
a2:ff:6c:73:8d:1a:1d:5e:bc:7a:cf:8f:b6:07:3a:
e5:96:2b:ca:be:52:f1:e7:d5:6f:73:9e:f1:da:55:
a7:52:e0:08:ad:6d:97:70:e0:57:90:11:62:03:dc:
08:cd:24:bf:27:13:1d:f0:12:c5:fd:00:4b:e4:05:
cc:0e:bf:0d:7b:db:93:23:b1:92:60:51:dc:56:f5:
9d:0e:93:45:87:b1:ed:74:92:5a:7a:2a:6a:bd:9f:
4d:2d:c0:a5:cb:2e:78:75:9d:c9:73:50:68:e9:e5:
c3:0c:26:04:a0:b6:ba:7f:0a:bf:09:9c:71:65:b2:
7b:54:68:0b:48:0d:98:59:fc:da:5d:0b:2d:4c:33:
f5:0c:5c:ca:2f:46:d3:39:a5:a9:9f:97:67:f2:56:
9b:ab:4d:b2:0c:6d:99:c0:c8:96:2e:01:a0:f4:48:
48:07:a5:5d:07:71:e8:50:ba:a9:c4:00:21:0c:85:
c3:49:13:79:99:1d:33:98:6f:86:7f:53:78:8f:a7:
be:37:33:17:74:ab:68:76:e1:e1:83:ce:69:ed:f3:
bc:06:92:48:74:8e:ac:cc:3d:47:3c:79:9c:66:2a:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D4:F9:0F:18:7B:CB:DA:38:60:4B:16:5B:AF:10:8B:D0:64:DE:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5997A58DA2111EFA3C7369A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:9a:e2:1c:46:4d:f9:85:23:c6:ba:6a:76:f8:9c:e4:18:97:
6b:05:34:42:08:67:e8:d0:c7:48:f6:96:1a:0a:74:23:98:a2:
9d:90:e5:b1:c7:2e:8a:e1:6d:54:58:05:41:1f:00:b0:e5:cd:
31:2f:ca:ce:e3:32:02:fc:78:8b:fe:1f:0c:55:71:1c:ff:85:
38:1f:24:f4:d7:48:f6:14:5f:ad:51:f3:7f:83:76:ee:f9:38:
09:a8:97:fb:b0:0b:b8:ae:27:39:1a:84:e0:6a:94:5c:48:a6:
dd:f1:d8:81:cf:53:48:b4:41:7f:bd:1f:ac:71:8e:3a:d6:95:
7a:44:63:bc:63:45:c4:23:a6:aa:61:9d:d7:fb:b5:77:55:97:
1f:5c:d4:4e:19:ea:66:90:6a:5a:4b:b5:4f:39:f9:51:4d:69:
92:d5:05:1a:ef:c8:ce:95:39:d6:be:e7:ef:4a:27:06:23:ea:
09:b9:9b:38:a8:88:0f:f1:22:b3:0d:c6:59:56:f8:8a:e3:8b:
e1:e1:ca:b3:9f:ab:c9:f1:ba:ff:3c:99:77:e7:57:23:1e:b5:
a6:13:35:2a:a5:90:e5:9b:4f:43:a0:5b:3c:1a:88:5e:20:0b:
3b:39:ae:de:a7:25:c5:7b:ef:f5:57:48:20:cf:a2:41:03:6c:
0c:40:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:29:24 2025 by rpki-client