Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE5B4986D3E011EF91D6075D762E951A.roa
File: DE5B4986D3E011EF91D6075D762E951A.roa (raw, json)
Hash identifier: Og51ZeYktAD06JGgK+nwaWeCJl13f/UKVROmxeByju4=
Subject key identifier: C8:12:62:14:10:39:1D:98:09:F6:F0:C8:E1:B6:5A:BD:ED:AE:91:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE5B4986D3E011EF91D6075D762E951A.roa
Signing time: Thu 16 Jan 2025 08:07:03 +0000
ROA not before: Thu 16 Jan 2025 08:06:59 +0000
ROA not after: Sat 01 Mar 2025 08:06:59 +0000
asID: 398478
IP address blocks: 156.229.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67822 (0x108ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 08:06:59 2025 GMT
Not After : Mar 1 08:06:59 2025 GMT
Subject: CN=6788be27-8669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:68:10:cd:99:72:22:64:1b:40:76:09:bd:
39:da:ce:95:2d:9d:57:c4:8a:c0:8e:41:97:4b:79:
76:c8:2a:61:b9:69:9d:e9:11:df:0b:17:b5:fc:83:
7b:e8:e7:16:81:19:20:70:c7:d8:09:d1:e9:17:bb:
da:76:75:a0:35:2d:c7:b4:17:18:df:db:c9:4e:2f:
7b:3c:27:af:09:49:10:12:21:da:b0:5e:b0:1b:84:
96:cc:76:0a:c1:b2:13:16:e7:72:ef:fd:4d:f2:7d:
73:8c:92:8e:be:06:fd:53:5f:63:42:ff:7f:67:ec:
83:4e:21:30:a4:d4:29:8d:ae:07:2f:5f:0c:27:ac:
06:c9:49:08:62:78:74:ad:f1:4e:08:95:fb:5e:97:
d2:b2:3a:1a:76:05:5d:e8:af:9b:79:0c:68:c0:c3:
bc:18:9d:2f:56:88:bf:ce:30:df:65:ca:3e:8f:41:
50:d6:b1:4d:65:d5:31:79:b9:53:bb:3b:67:29:e7:
6b:21:29:a0:d9:c8:8e:30:fc:60:6f:c2:3f:d9:80:
14:60:35:44:d0:57:c5:30:52:16:e1:45:c3:0b:d6:
97:6a:df:a2:ab:83:c0:43:a0:c1:c7:6c:e3:c8:6d:
b4:3c:a1:b5:5a:8f:fe:4b:74:43:40:51:bd:49:a5:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:12:62:14:10:39:1D:98:09:F6:F0:C8:E1:B6:5A:BD:ED:AE:91:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE5B4986D3E011EF91D6075D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.176.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:24:a1:59:c2:a2:2e:da:06:62:a4:1d:b0:a0:22:0b:66:3d:
78:b7:f4:4b:04:c0:72:67:bc:cd:fc:a5:01:d0:47:6f:cc:f7:
f7:90:40:96:32:a8:6d:82:19:ce:b0:24:c9:f7:0f:ae:96:32:
5d:12:29:16:58:1e:53:fd:5a:41:60:0b:ae:50:62:f1:86:ab:
93:6e:bc:8c:75:24:a3:62:72:35:a7:1a:aa:7b:6f:6f:b6:67:
4a:b8:48:10:05:ca:98:8e:26:be:4e:3a:45:79:b6:5e:a1:37:
97:9b:aa:a6:74:60:14:86:24:06:63:b9:05:4b:47:96:15:9e:
4e:9c:d4:2c:d9:cb:84:71:8e:0d:09:fa:46:38:e5:25:5b:55:
cb:d8:8a:bf:1d:dd:3c:fb:5a:6c:e3:f7:91:6f:4d:97:ed:26:
2a:a8:f4:de:e9:dc:72:63:0a:ad:43:57:72:ad:59:80:19:c3:
8b:08:0d:1e:74:1f:a0:4d:ff:4b:56:4e:c4:b9:16:0b:a2:b4:
c4:aa:2f:4c:2d:1b:59:90:9b:a5:8d:19:f9:fd:b9:71:6a:7a:
46:05:b2:e7:b0:0f:f9:bd:8f:96:cd:50:36:df:58:8d:87:4d:
e3:8a:2a:32:1f:20:2b:d8:2f:27:4b:43:0a:82:7d:f9:1d:7a:
34:a5:35:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:09:05 2025 by rpki-client