Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9D21912DA9D11EFB2B74E5C762E951A.roa
File: D9D21912DA9D11EFB2B74E5C762E951A.roa (raw, json)
Hash identifier: ModUGQfYJZBvFcS/zWB2PuYGYn3p5yiAjzXJ8WKBUWk=
Subject key identifier: C2:AD:AA:82:94:12:CF:83:04:41:DD:C0:B2:87:64:0E:E7:DD:C2:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9D21912DA9D11EFB2B74E5C762E951A.roa
Signing time: Fri 24 Jan 2025 21:54:57 +0000
ROA not before: Fri 24 Jan 2025 21:54:54 +0000
ROA not after: Tue 25 Feb 2025 21:54:54 +0000
asID: 44559
IP address blocks: 156.246.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69834 (0x110ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:54:54 2025 GMT
Not After : Feb 25 21:54:54 2025 GMT
Subject: CN=67940c31-e3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:76:b3:10:8c:32:5f:f6:75:75:52:5d:85:
21:ee:9e:20:90:8c:b7:6f:ab:c3:08:8e:de:9d:e8:
2f:ab:41:d0:e4:21:90:14:72:b9:18:07:ea:17:3d:
4e:a3:34:fc:68:5f:43:6e:68:da:91:5c:29:5a:d8:
56:42:25:8b:93:f2:d1:74:49:38:25:2a:a3:de:69:
9f:78:35:7b:55:48:cd:d2:0f:33:9a:f1:b4:56:e5:
80:33:53:a9:4d:bd:6b:67:83:53:6e:33:cf:ab:20:
f9:2d:2d:f6:39:73:cd:dc:25:17:8b:8a:c6:bd:a2:
28:6e:bd:f6:53:0a:32:6c:9a:e0:07:ad:95:52:ac:
a9:3a:53:d3:5b:96:4f:36:06:2a:8a:8d:9a:75:47:
51:e5:c7:8f:07:b3:d1:dd:c1:37:17:0e:89:79:f4:
89:d9:0b:7f:19:9e:af:15:2e:71:17:63:32:66:a7:
1e:09:e7:ff:53:12:be:75:ad:3b:95:ee:65:0a:d0:
09:a7:9b:d5:e9:36:51:56:9c:f8:04:0d:be:81:36:
29:47:b5:15:ff:85:28:73:f4:6f:8f:7c:88:19:6e:
59:55:11:61:94:e7:c6:14:70:9f:95:f1:19:e4:05:
c6:6d:77:71:05:15:68:4a:fe:07:a5:02:9c:f4:44:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AD:AA:82:94:12:CF:83:04:41:DD:C0:B2:87:64:0E:E7:DD:C2:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9D21912DA9D11EFB2B74E5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.226.0/24
Signature Algorithm: sha256WithRSAEncryption
20:24:c4:67:3d:2a:08:6d:65:08:ec:a3:0b:53:fe:c0:56:87:
b0:bd:9e:60:3e:e4:b9:a2:6f:01:79:85:6b:b8:93:ae:52:36:
a0:f4:4a:d5:67:dc:62:c1:21:3d:46:de:d6:51:c9:fa:44:33:
52:59:64:01:65:e2:01:e7:c5:8d:71:84:b8:5c:79:97:54:61:
99:59:20:f7:14:cc:f3:79:28:c1:23:c9:f4:6c:3d:ae:51:b6:
c1:42:31:7b:ba:51:41:b9:c7:6b:b9:81:49:88:0e:ab:69:d7:
86:f6:e6:dc:88:9a:8a:1d:4a:07:14:b3:37:42:b1:18:31:59:
17:2c:20:d9:14:3d:f2:5d:b0:68:a9:22:77:65:64:32:b1:71:
13:9e:bb:ff:3b:2e:3e:48:12:cb:58:f1:0f:2b:76:fc:1e:89:
d7:90:eb:24:59:24:d8:eb:47:bd:b8:94:02:0a:54:fa:a1:f3:
3d:47:cc:b2:f3:2f:b9:7b:02:e2:8c:40:8a:84:7c:0e:56:da:
c2:b0:26:be:73:b0:74:ae:01:95:46:56:10:d7:bc:c8:a9:91:
62:78:fb:72:0b:84:9d:e2:5c:b7:db:e9:3d:b1:a9:9c:32:e6:
84:ad:74:51:ca:fa:35:f6:f4:58:b2:ae:4d:88:b3:bb:55:ca:
6f:b1:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:24 2025 by rpki-client