Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2E921E4DA5D11EFA47C22B1762E951A.roa
File: D2E921E4DA5D11EFA47C22B1762E951A.roa (raw, json)
Hash identifier: Uny76T4UQGGjRmHKImRofeC1nvAIvO18fciJD4peNYY=
Subject key identifier: 06:A9:7D:99:88:68:8D:FD:81:E1:A6:62:6E:A3:29:AD:6C:E7:6B:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2E921E4DA5D11EFA47C22B1762E951A.roa
Signing time: Fri 24 Jan 2025 14:16:38 +0000
ROA not before: Fri 24 Jan 2025 14:16:34 +0000
ROA not after: Thu 06 Mar 2025 14:16:34 +0000
asID: 5068
IP address blocks: 156.225.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69494 (0x10f76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 14:16:34 2025 GMT
Not After : Mar 6 14:16:34 2025 GMT
Subject: CN=6793a0c6-3399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:4b:11:7d:c7:27:19:00:19:bf:e7:1d:07:
34:49:93:70:61:9f:1b:7c:9c:4c:86:32:76:f0:5d:
e0:34:d5:24:ef:46:da:2b:6b:bf:67:b4:6a:64:c4:
ce:6d:20:55:be:1a:7b:05:ad:a7:f2:5a:86:6c:06:
1a:ba:27:de:16:e1:af:48:86:71:bb:5a:4f:04:16:
7b:27:21:7e:09:7b:8f:0a:f8:65:b5:44:3f:13:29:
9b:eb:35:ec:64:33:be:22:75:78:30:96:d1:15:bf:
a4:d0:4f:85:66:ff:ed:79:5f:ff:1d:fa:73:31:c2:
6a:28:9c:15:0f:a7:76:a5:8c:7c:8d:dd:28:73:e5:
1d:2a:0a:64:e4:05:da:5c:5f:26:a2:54:2c:e6:d2:
e6:12:64:13:77:0c:19:36:52:ef:5f:32:10:ea:3f:
33:9b:37:6a:5e:90:56:98:6a:3d:dc:24:3e:48:56:
f0:34:6a:78:4b:2c:3f:06:6a:58:f4:7d:76:15:36:
a3:69:b3:93:7c:cf:5b:57:05:c6:2b:11:9d:7f:98:
2f:bc:10:ac:02:b5:b4:93:20:9e:b2:d0:e1:f3:b8:
f3:0b:c0:0b:ff:02:09:44:d9:b4:8c:e5:1a:44:ad:
3d:99:5c:43:45:15:a9:3f:18:d4:62:1b:8a:64:bc:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A9:7D:99:88:68:8D:FD:81:E1:A6:62:6E:A3:29:AD:6C:E7:6B:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2E921E4DA5D11EFA47C22B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:a2:87:ab:67:ed:83:70:a7:a6:65:0d:ca:09:61:e1:96:b2:
79:41:ee:b0:9b:dc:cb:a9:e2:be:2a:f1:a0:f7:db:5a:b9:bc:
c4:d1:ab:37:b5:27:66:35:a5:65:db:ea:d0:84:cf:d2:02:94:
9f:16:71:4c:d2:f8:1f:8f:bd:95:f8:63:06:88:f4:87:3c:8d:
b5:0a:09:21:7a:5f:46:3c:f0:72:8f:b9:d9:e1:52:50:e0:2d:
19:65:c9:ef:1e:b8:a4:e6:02:ba:27:a5:f9:12:73:6b:0e:25:
2a:d5:1f:8f:7f:ac:3f:02:b9:f0:ad:5b:1f:9b:89:9f:c8:82:
98:2a:a5:46:24:2f:57:bc:22:64:37:23:e7:6a:7e:98:1f:82:
03:a0:f3:7f:47:ea:bd:05:f8:ff:ba:5a:63:80:d7:df:fb:36:
26:a4:05:97:7c:51:56:0d:a1:5b:f5:b9:1f:10:c6:9e:db:fe:
f9:c9:5d:f4:0d:1c:ad:ad:85:0b:86:54:04:3a:a8:14:18:4c:
e7:fc:94:19:2a:bb:ba:2b:2b:36:5d:a7:18:23:b9:3d:38:ed:
af:d2:2c:4c:86:e8:42:18:1d:15:9b:67:36:99:a8:b6:43:48:
1c:76:1e:62:99:e7:b4:a6:f0:ac:6b:33:7f:bd:1e:72:fc:e9:
04:8c:16:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:51:07 2025 by rpki-client