Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5739242C28711EFA0B2FBA3762E951A.roa
File: E5739242C28711EFA0B2FBA3762E951A.roa (raw, json)
Hash identifier: dAFu3iLbWT5PwZh/nTj/rOcQZee4iOhCRWYMqVbYmJ4=
Subject key identifier: 8F:06:3D:A5:3B:79:7B:33:A4:1D:9C:09:28:A8:BB:E1:A1:5D:7A:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E93D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5739242C28711EFA0B2FBA3762E951A.roa
Signing time: Wed 25 Dec 2024 06:17:20 +0000
ROA not before: Wed 25 Dec 2024 06:17:16 +0000
ROA not after: Wed 10 Dec 2025 06:17:16 +0000
asID: 984
IP address blocks: 156.228.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59709 (0xe93d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 25 06:17:16 2024 GMT
Not After : Dec 10 06:17:16 2025 GMT
Subject: CN=676ba370-06d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:94:b4:a5:ea:26:ef:79:08:b8:3e:f8:12:
6d:7f:a6:07:1f:ee:e6:29:2c:cb:e8:20:87:c2:09:
0f:3b:ce:2f:ed:17:99:32:59:de:e2:84:54:2c:2f:
78:c7:6f:27:69:12:62:78:a4:fa:3c:74:b5:ca:af:
4d:d6:48:7d:4c:5c:ed:81:42:80:47:d5:86:97:d7:
69:8b:1d:f5:c2:f9:f8:ae:9a:48:24:9c:49:db:92:
45:1b:50:fc:d7:18:da:5b:b2:4a:1d:19:e3:1c:f5:
69:ed:5c:f1:a7:b7:4f:11:51:2f:4e:55:ed:7a:58:
54:ba:90:ca:b3:ca:d6:39:70:85:73:3e:21:f4:85:
58:d3:1c:fb:eb:80:99:b0:a0:2a:6e:86:fc:52:91:
11:53:75:e5:91:d4:e8:1a:d7:e4:b0:b7:7f:2c:5a:
e1:a1:61:67:8c:49:a5:d4:2d:49:4c:7e:ba:d8:8d:
42:45:07:cb:18:96:f6:86:05:75:27:3a:4b:f4:26:
94:52:b7:4f:ee:01:9e:fe:88:5a:89:3e:65:4d:b0:
16:70:84:d2:59:29:ec:40:9f:ff:ca:e1:9a:0e:09:
49:26:b1:80:8f:7a:6b:2c:b2:1e:41:45:8e:e0:fa:
e8:e9:c3:ae:0e:fc:d7:82:0e:f8:fe:d5:23:c4:de:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:06:3D:A5:3B:79:7B:33:A4:1D:9C:09:28:A8:BB:E1:A1:5D:7A:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5739242C28711EFA0B2FBA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.63.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:80:50:24:a6:71:52:00:52:6c:c0:fb:ec:0b:c7:13:ee:7f:
79:34:e1:8d:fd:ac:a2:be:5e:9b:52:62:2b:ff:af:69:8d:21:
93:9a:6b:d1:f6:7c:77:fd:b8:4a:34:a5:30:c2:b9:e1:7d:dd:
ab:9e:d1:ea:21:f7:2a:49:00:f7:1f:b5:5b:06:b2:64:fd:88:
d4:f0:fc:6d:8a:d3:39:b2:2a:1c:ec:bb:bb:11:03:e2:b0:91:
b9:a3:ad:7a:57:c5:8c:1f:a5:86:6c:cf:a9:e4:24:21:28:55:
a0:f2:51:39:89:7f:8d:06:cb:9e:7d:f9:50:fd:29:29:50:2c:
0f:0b:f7:c5:7d:c3:1e:6e:3c:8a:20:13:85:54:5d:03:ff:08:
33:e4:05:f7:fd:9c:f8:9c:b5:0c:75:65:06:98:5c:ef:b6:d6:
af:4c:15:5a:e1:1d:2e:93:00:cb:52:c2:e0:57:dd:c2:84:22:
0b:83:4c:38:1b:b4:8a:6b:66:fe:e5:d2:6f:4d:6d:21:c8:29:
85:d2:b0:c2:7e:f3:20:00:e0:fb:9b:47:83:c0:96:51:17:76:
3d:8a:a0:17:05:0c:5e:d2:51:ef:fc:9a:44:ff:e4:7b:c2:02:
bb:58:7d:47:b2:22:c0:ff:c2:24:cd:d1:bd:d5:7f:78:f1:df:
cf:ed:74:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:51 2025 by rpki-client