Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0B29A72C97E11EFA551B56D762E951A.roa
File: C0B29A72C97E11EFA551B56D762E951A.roa (raw, json)
Hash identifier: HY4RUspc6Hf/ouYTJvpsz6eqViQ7lhOz4AZkL87gRP4=
Subject key identifier: 3E:50:7D:5A:5F:8E:E2:AD:82:44:00:5E:4B:67:8A:18:D3:D3:D6:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F539
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0B29A72C97E11EFA551B56D762E951A.roa
Signing time: Fri 03 Jan 2025 02:59:31 +0000
ROA not before: Fri 03 Jan 2025 02:59:27 +0000
ROA not after: Sat 13 Dec 2025 02:59:27 +0000
asID: 984
IP address blocks: 156.229.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62777 (0xf539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 3 02:59:27 2025 GMT
Not After : Dec 13 02:59:27 2025 GMT
Subject: CN=67775293-d710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:5a:17:cc:ec:2e:10:7e:aa:e4:aa:b8:04:
7c:48:59:f0:36:e1:eb:88:46:c4:96:82:4f:3b:75:
4b:f6:a4:ec:7f:47:60:4c:68:4a:bd:2e:32:da:3e:
ca:5b:dd:2d:ca:e3:ff:fb:30:13:96:08:11:10:4d:
f1:74:a3:17:0c:0c:30:d4:7d:8c:d8:f7:da:94:31:
f2:fd:bc:0b:05:17:1b:02:b6:9a:83:cc:aa:d9:de:
51:86:fd:18:7d:4c:c9:1b:cd:d2:b8:9e:34:6d:65:
74:61:56:4d:f7:1a:c5:b0:bc:b6:4f:83:e3:de:96:
eb:35:c5:b6:d0:ac:75:4d:c1:cf:01:ed:c9:89:5d:
5a:12:2b:5c:20:97:98:8d:29:a5:64:17:b7:81:41:
2a:81:c5:ac:bd:dc:f2:85:d8:7f:42:8a:ca:6b:96:
38:ef:8a:80:98:02:f8:fe:e3:00:86:4f:3f:f2:b7:
b4:df:a0:48:a3:f9:4e:9f:c0:c5:2a:ef:7f:ff:58:
72:c7:b8:d4:8b:d3:f6:37:a0:d1:b6:fa:27:88:f6:
5c:da:d4:5c:ac:4f:e1:53:9f:52:d8:69:07:f9:3f:
de:71:1f:c9:9f:e5:83:e9:91:2d:9c:eb:1a:57:b8:
66:85:cc:15:0c:7d:9e:0b:eb:ee:88:16:6d:61:45:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:50:7D:5A:5F:8E:E2:AD:82:44:00:5E:4B:67:8A:18:D3:D3:D6:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0B29A72C97E11EFA551B56D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.226.0/24
Signature Algorithm: sha256WithRSAEncryption
41:06:e8:ca:7c:3c:57:a4:19:e1:fd:ee:8d:6d:e0:01:d3:5b:
36:7f:70:97:38:75:18:db:78:c2:c4:d4:30:52:e7:b6:38:22:
f2:db:8f:95:e7:6b:4e:aa:1a:af:09:00:60:66:03:02:88:60:
a0:c2:a5:e8:19:9a:be:92:38:bd:78:e3:c4:1b:a7:3e:96:be:
7d:fa:b8:d7:2d:de:99:a4:34:f8:82:9f:89:1e:76:9b:03:e8:
48:56:ba:bd:e8:80:5d:8a:74:be:5a:c0:c7:13:2c:32:6f:6f:
97:12:7d:b3:0b:cd:a4:73:9d:ff:70:33:5b:fe:bd:7c:62:4d:
ca:af:8d:64:93:1d:06:86:b3:98:a4:aa:00:3e:69:3f:b8:6c:
df:51:b0:a9:20:48:8d:cb:1b:ef:c8:94:c2:28:fb:e5:bf:8f:
7f:14:eb:8b:64:93:d1:53:76:b5:75:27:e3:04:3f:89:32:19:
dd:b2:11:08:e7:67:d6:2e:74:02:a3:2c:7e:80:cd:23:37:74:
6d:5d:10:ba:59:d1:f8:eb:c2:dc:9b:06:cc:3a:cb:d4:d7:14:
17:ce:fb:7c:cb:32:02:96:ee:2f:7d:63:b5:da:a7:e3:e6:83:
fe:64:50:4f:6f:6b:4a:3b:02:63:04:9c:88:28:96:ea:09:a0:
d2:1b:2b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:15:31 2025 by rpki-client