Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3D488BCCCA311EF993A3D62762E951A.roa
File: E3D488BCCCA311EF993A3D62762E951A.roa (raw, json)
Hash identifier: GmMvgi7WEUyRbWlLDrtvj5ebFuzuYgkp7Z5fHvW2wVs=
Subject key identifier: FE:D8:B4:26:1D:58:40:F3:FA:4A:35:CB:BB:9C:3F:B3:35:8D:40:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F9AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3D488BCCCA311EF993A3D62762E951A.roa
Signing time: Tue 07 Jan 2025 03:02:55 +0000
ROA not before: Tue 07 Jan 2025 03:02:51 +0000
ROA not after: Sat 13 Dec 2025 03:02:51 +0000
asID: 984
IP address blocks: 156.229.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63916 (0xf9ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 03:02:51 2025 GMT
Not After : Dec 13 03:02:51 2025 GMT
Subject: CN=677c995f-abb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:31:de:ba:57:d8:c1:af:b8:98:99:2b:b9:
ed:40:81:96:db:5f:47:0a:39:4e:84:92:11:37:f6:
9c:b5:0d:52:2f:59:dc:ad:a7:15:f8:84:c3:dc:9f:
6d:9a:5d:f4:dd:87:25:ef:42:48:bc:4f:e0:a0:a1:
72:3d:b2:3f:f3:64:d8:cf:c6:89:71:04:89:49:c8:
b6:78:6a:40:99:e5:f2:4b:9f:8c:9c:49:3d:a9:32:
67:cc:ca:d3:c9:0c:d6:e4:ee:e3:41:34:8f:10:52:
d7:46:45:eb:c8:fb:bc:24:99:1a:ca:94:b6:6e:3d:
ed:c8:b8:67:fb:65:73:40:12:42:3f:b0:48:61:ea:
ce:78:04:66:2f:7f:1d:1c:0c:ab:24:97:0d:10:fa:
6f:dd:17:26:5c:8e:2c:20:39:f9:c0:98:bc:88:3d:
a6:e1:a0:dd:8d:97:a4:28:78:25:de:c6:6b:c7:22:
60:ab:92:61:b7:f0:03:bf:7e:77:a0:ee:2e:f5:05:
48:17:d5:2d:b0:81:16:11:2f:87:6f:ce:9d:6a:ce:
2e:fd:63:da:6e:62:90:3e:b9:b4:86:47:17:eb:80:
dd:bb:88:68:46:e4:42:1d:2f:bd:bc:93:1d:78:e0:
1f:00:e3:c6:70:30:90:e6:33:25:d3:8e:71:58:37:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D8:B4:26:1D:58:40:F3:FA:4A:35:CB:BB:9C:3F:B3:35:8D:40:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3D488BCCCA311EF993A3D62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:69:63:ce:3d:92:c1:00:f6:0f:27:2b:7a:ce:0d:4b:dd:ce:
4a:cb:b6:40:82:0e:c8:ed:fc:63:b2:c2:d5:38:03:37:67:d0:
89:31:af:63:62:b2:0d:56:bf:58:28:a8:4c:bc:60:89:ce:9f:
53:ed:c6:4c:8b:30:0a:e4:6a:4d:f1:d9:5d:51:48:8d:75:67:
3a:86:90:cb:71:0d:0a:0e:1e:8e:fd:49:d1:53:31:de:17:7b:
30:d3:d7:d4:3f:20:b3:e9:c9:36:b0:a6:40:32:24:1c:db:d3:
e5:5b:9a:f0:64:6c:7c:a2:39:0f:2b:d2:da:90:78:b9:a1:8e:
26:c5:1f:5d:98:a1:f7:14:58:a8:7c:95:a5:4c:2b:6e:f6:23:
ee:99:5d:c2:43:a5:15:05:02:33:42:b4:66:86:a4:5f:18:57:
f4:6a:dc:e0:2f:fa:61:34:71:54:26:a0:1f:54:8b:f3:c9:b7:
93:40:a0:f4:f1:cc:e4:92:51:41:6a:77:88:f4:8d:91:ec:10:
11:45:bf:82:ea:65:1b:3d:2a:91:2c:d5:4e:18:53:5c:5d:f4:
2d:c3:dd:61:41:16:11:17:7a:72:e2:a1:20:fc:28:db:d1:a5:
cf:a3:c9:af:df:da:ae:05:3a:c3:d4:87:aa:d9:93:db:a9:0f:
c2:ef:c7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:39:34 2025 by rpki-client