Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5B18920DA9911EFB9A6F040762E951A.roa
File: D5B18920DA9911EFB9A6F040762E951A.roa (raw, json)
Hash identifier: dW4RAd6Z6IPqNbddQWzRGVyh1BNE+vidjWMkXk8Vivc=
Subject key identifier: CB:2E:39:72:55:95:C1:A6:B7:E8:78:96:74:23:98:81:5E:8A:C9:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5B18920DA9911EFB9A6F040762E951A.roa
Signing time: Fri 24 Jan 2025 21:26:12 +0000
ROA not before: Fri 24 Jan 2025 21:26:09 +0000
ROA not after: Tue 25 Feb 2025 21:26:09 +0000
asID: 44559
IP address blocks: 156.246.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69808 (0x110b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:26:09 2025 GMT
Not After : Feb 25 21:26:09 2025 GMT
Subject: CN=67940574-3ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:9f:79:ba:3c:4e:7e:cb:a2:89:f8:86:85:
3e:c1:af:bf:3d:11:94:11:77:33:4b:8c:c8:69:91:
d9:b8:4a:2a:77:06:71:16:9b:17:00:0e:8e:56:40:
28:09:cc:c2:58:33:61:c5:e8:df:f6:ee:32:de:1d:
ab:14:69:fd:c7:b7:9f:2e:dd:04:44:69:0a:f5:da:
a1:05:a1:58:34:d7:21:9e:de:e8:24:a1:ab:e9:ff:
16:f2:8b:22:86:8d:64:9d:db:e0:8a:93:2f:6d:8d:
81:66:49:9a:7b:d6:2d:e0:a7:19:f8:95:f0:21:9e:
84:cd:b2:b5:f0:31:bc:c4:18:d2:7f:c9:9e:a8:23:
68:02:36:b9:6c:9f:b1:44:00:a7:38:dd:5f:fb:da:
f2:f2:d8:99:41:60:db:58:6d:fc:92:1e:3a:d8:ee:
88:8e:73:fe:f5:cf:a8:5d:f8:a6:d5:94:ae:5a:e8:
73:53:d1:72:c4:10:31:d0:c8:79:72:a2:cd:a5:97:
92:26:a4:15:93:f5:e4:29:4f:d7:9c:f9:46:cc:76:
b1:9d:4e:b7:e6:bc:6d:ac:29:c3:0a:18:1d:d2:75:
f7:30:9d:e9:a5:62:eb:4a:14:40:71:fc:3c:4d:8e:
9d:e2:d3:e9:90:54:0d:f1:7a:b4:09:85:47:33:02:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2E:39:72:55:95:C1:A6:B7:E8:78:96:74:23:98:81:5E:8A:C9:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5B18920DA9911EFB9A6F040762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.222.0/24
Signature Algorithm: sha256WithRSAEncryption
72:00:42:72:54:a2:45:74:8e:85:5e:2a:a1:d8:2e:4a:89:f5:
ed:5d:2b:0b:ea:cb:3c:f6:ce:fc:27:18:db:d0:92:c7:aa:2a:
f0:a3:9b:1e:01:99:a9:2c:ec:47:bd:30:b7:60:e1:bf:f7:46:
3b:1e:05:96:89:4d:61:e1:be:21:1c:57:f0:4d:d3:a7:6b:07:
ee:5e:c3:3c:72:c3:2c:b7:52:ea:17:78:75:ee:c4:ba:82:ac:
8b:48:a9:68:e9:47:02:73:72:89:ac:b8:3f:05:8e:cd:75:3f:
46:6b:d0:8e:7d:d6:19:7f:79:01:67:1a:39:40:de:86:85:f5:
a5:77:9c:29:22:03:de:11:82:bc:cb:48:3a:8b:6e:06:49:b1:
e8:f8:ef:fc:2d:06:d8:d7:2b:47:4d:c5:af:23:78:72:0b:ab:
8b:1a:91:21:ce:c2:e1:0f:00:50:f9:8f:fb:24:92:c8:f4:0e:
d4:b5:e3:57:ae:5d:67:70:7c:fd:c0:e7:b3:eb:3f:56:9a:ad:
2b:69:a1:97:3b:5d:0b:35:09:fe:9b:70:18:99:83:cc:79:98:
a9:13:3b:ac:03:db:93:ba:b4:30:a1:40:8c:62:3d:96:40:f6:
27:36:cb:a8:65:7d:ca:4d:4b:e2:aa:3b:c5:f3:7f:d1:13:4b:
e4:8a:6e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:23:41 2025 by rpki-client