Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA296850D3DE11EFAAF22050762E951A.roa
File: CA296850D3DE11EFAAF22050762E951A.roa (raw, json)
Hash identifier: H/xq8bxB/BLMqD9L/vtcfkreifZSYCazRX44ckwI8YY=
Subject key identifier: EE:70:0C:81:8D:A4:43:28:D1:32:3A:7A:72:A8:69:44:8E:5B:D9:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA296850D3DE11EFAAF22050762E951A.roa
Signing time: Thu 16 Jan 2025 07:52:10 +0000
ROA not before: Thu 16 Jan 2025 07:52:06 +0000
ROA not after: Sat 01 Mar 2025 07:52:06 +0000
asID: 398478
IP address blocks: 156.229.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67808 (0x108e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 07:52:06 2025 GMT
Not After : Mar 1 07:52:06 2025 GMT
Subject: CN=6788baaa-5d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8c:16:02:5e:dd:ea:0b:79:da:c8:cd:6c:73:
ae:90:15:07:d2:ea:f8:c6:1c:5a:85:00:dc:b3:91:
3f:5e:ce:ec:71:f2:d1:f0:da:46:cc:4e:2a:7b:b0:
73:d8:fe:2b:99:f1:1a:c1:bf:86:6d:30:bf:9d:1e:
7e:76:72:9b:93:1b:ee:da:16:2a:73:de:b6:9a:06:
5d:0a:06:79:e8:84:98:0b:30:f7:97:2c:cb:0d:77:
ae:24:1a:04:4b:e3:65:63:21:01:e9:25:3b:72:6c:
b7:81:d2:8d:47:72:b1:35:b2:1f:e5:56:93:eb:9f:
8d:d8:25:d5:fb:10:54:21:2f:74:1a:c3:88:ed:54:
ca:11:cf:2f:03:f4:57:93:a4:7f:ff:6f:3c:b2:a2:
f9:9f:ac:fa:cb:36:fa:62:8f:ed:f6:b1:ce:37:13:
6b:af:76:73:0f:a0:eb:f1:f9:ad:4b:c8:43:b6:6d:
76:2d:21:28:b2:07:86:4b:80:b0:fc:62:3b:90:c1:
b1:b4:e0:f2:7a:7c:58:66:26:a4:68:56:82:0f:1c:
cf:e9:44:22:63:86:84:6f:c1:5a:c7:2e:8a:7e:4b:
92:c7:a2:18:fd:91:15:9c:a8:94:89:dc:63:f5:21:
ac:dd:af:68:05:99:a9:e7:34:4c:8f:44:fe:3f:e5:
88:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:70:0C:81:8D:A4:43:28:D1:32:3A:7A:72:A8:69:44:8E:5B:D9:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA296850D3DE11EFAAF22050762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.192.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:b3:da:9c:c3:75:e9:52:34:10:74:c4:f5:6c:c8:a6:cd:06:
ef:08:4b:31:23:8e:97:a0:53:7b:c9:5f:f6:31:80:d5:2c:40:
06:83:6e:86:18:a4:e2:8d:14:85:c4:6d:ac:d4:4e:3a:0e:c9:
36:c9:54:1d:d5:94:ff:d6:ee:ae:d6:30:a2:20:92:e8:e0:3d:
c8:66:89:d1:1d:68:f7:67:e3:f2:41:11:d8:91:0b:56:86:3d:
3a:19:f7:1e:65:f9:b1:a0:04:92:3c:50:49:a6:f5:7c:04:b4:
a2:f6:8e:39:d5:97:ba:52:74:97:b5:2d:ce:1c:b1:77:86:ec:
dc:01:5a:f5:8b:76:aa:a5:29:d3:da:3c:1f:30:07:51:72:4f:
41:81:fa:46:89:2d:5a:6c:12:1a:55:0d:5b:b8:0e:22:06:9b:
ff:db:be:4b:c1:88:99:14:7c:e5:d6:94:18:38:28:41:7c:8c:
74:1e:2c:1d:f7:03:48:91:7a:79:1b:3b:10:7b:3c:f7:54:d4:
2e:5c:b9:2e:42:e9:56:7f:72:0c:b5:36:80:f4:fa:fa:6b:87:
a1:d9:e0:5b:b8:00:67:67:38:33:8c:12:8f:07:73:7c:b4:f0:
f0:e1:b9:7c:55:eb:05:81:b0:f3:dc:36:e2:14:9b:04:9e:f3:
52:44:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:18:37 2025 by rpki-client