Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CED7F95CD56E11EF9482178F762E951A.roa
File: CED7F95CD56E11EF9482178F762E951A.roa (raw, json)
Hash identifier: TRqSslhcjF2VnT7UUKNsjFt1JfF4mtwLK08pQrwr20Y=
Subject key identifier: 95:98:1B:1A:12:F4:A4:BC:9E:55:6B:79:05:FA:3A:E7:77:7E:E4:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CED7F95CD56E11EF9482178F762E951A.roa
Signing time: Sat 18 Jan 2025 07:35:37 +0000
ROA not before: Sat 18 Jan 2025 07:35:33 +0000
ROA not after: Sat 22 Feb 2025 07:35:33 +0000
asID: 55020
IP address blocks: 156.239.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68377 (0x10b19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 07:35:33 2025 GMT
Not After : Feb 22 07:35:33 2025 GMT
Subject: CN=678b59c8-f714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:91:7f:52:16:fa:16:19:1a:11:54:96:e1:
70:51:91:62:0a:f8:88:5a:9c:5d:64:95:55:d7:56:
9f:8c:f4:a6:2e:1e:82:ac:02:3e:3b:a0:7e:ab:46:
54:d2:e6:72:83:23:f8:45:61:ac:00:53:a8:3a:71:
2c:32:b3:7b:df:dc:a3:12:89:5f:d2:b9:36:eb:ae:
b9:f5:24:04:33:7a:2e:c7:85:11:4a:34:1a:f5:dd:
ab:fa:b6:f5:87:a1:87:7b:8e:bd:4f:e3:18:02:a1:
15:e0:43:80:45:c6:c0:87:2c:a4:13:5f:46:7e:a1:
03:c2:49:b6:0f:e1:83:d4:57:1f:5c:ce:66:31:cb:
aa:11:41:f9:48:c0:95:c5:f0:70:f9:89:2a:df:39:
a3:a8:ff:aa:5f:55:ee:97:89:b7:57:1d:e5:63:57:
5a:fd:c1:42:54:83:72:55:20:1f:7c:df:42:18:21:
4a:d0:84:6c:6a:8b:57:93:90:b2:8d:81:3a:aa:0b:
8f:31:25:08:da:58:53:a2:72:a7:29:ac:02:1b:bf:
a1:1e:33:0a:ef:7a:00:7f:11:02:84:9e:86:77:b2:
63:1a:1c:41:91:57:62:d2:13:5a:da:17:0b:82:f7:
96:bb:bb:dd:36:cc:46:b4:57:2b:00:7a:07:64:2c:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:98:1B:1A:12:F4:A4:BC:9E:55:6B:79:05:FA:3A:E7:77:7E:E4:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CED7F95CD56E11EF9482178F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.48.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:ff:a5:27:e6:2d:d5:77:40:74:8c:8e:73:b3:de:06:e7:12:
83:af:52:04:fd:3a:65:86:ef:74:de:cf:cd:e9:af:8b:cd:55:
5b:e8:a7:f2:eb:95:8d:02:b4:dd:66:d2:a8:8c:23:dd:8c:40:
c0:28:aa:a9:ef:a0:43:bb:07:ff:56:2f:60:be:4c:9e:02:03:
da:a7:13:ad:92:0e:ab:7a:2a:39:1a:a1:83:8a:c4:6b:e1:c4:
15:2f:b0:2a:75:13:f6:7f:37:2c:7f:11:86:b5:f7:93:9f:ad:
82:81:70:79:6d:03:ce:72:07:c1:dd:f3:5e:de:a8:e8:5b:21:
60:87:e4:d2:8b:13:34:ac:3b:5f:ee:7b:ac:b4:a9:30:9d:d2:
2e:5a:72:88:31:5c:aa:e3:12:2e:c1:5c:77:a1:ef:bf:3f:ad:
9d:1c:35:69:16:79:23:be:27:ef:3b:f9:15:27:a3:37:8e:7e:
48:d9:a6:0b:d7:04:f3:f1:33:c3:b1:4a:05:fc:be:54:aa:a6:
b1:2e:f4:ee:5c:22:ce:00:38:d9:ec:9d:a5:91:90:8b:dd:ae:
0e:57:4a:a5:7e:b2:38:a9:88:be:15:ea:9b:47:c2:de:c9:b3:
7e:1a:46:d6:5e:6d:eb:b9:88:12:69:55:c2:4c:d8:c5:c3:c4:
37:97:17:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:35 2025 by rpki-client