Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7AC94B0DFFF11EFBE5C97AF762E951A.roa
File: E7AC94B0DFFF11EFBE5C97AF762E951A.roa (raw, json)
Hash identifier: fu44gjkhc7pNPCP4ycjiALz3XBORR/BvV+SisD5x+zQ=
Subject key identifier: 58:31:9D:E2:4C:23:9F:EF:54:18:05:F7:32:C5:37:40:9F:40:FD:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7AC94B0DFFF11EFBE5C97AF762E951A.roa
Signing time: Fri 31 Jan 2025 18:19:27 +0000
ROA not before: Fri 31 Jan 2025 18:19:23 +0000
ROA not after: Tue 04 Mar 2025 18:19:23 +0000
asID: 199052
IP address blocks: 156.229.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71387 (0x116db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 18:19:23 2025 GMT
Not After : Mar 4 18:19:23 2025 GMT
Subject: CN=679d142f-d7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:1f:62:c3:fa:3d:b3:22:a7:1a:64:f6:22:
9e:c7:60:21:38:fb:59:e8:9c:48:0d:b1:db:be:8a:
5e:70:87:41:f9:55:58:bc:c1:b4:54:af:06:4d:6e:
86:fd:b3:d0:79:f0:21:13:8e:23:28:d8:3b:64:43:
78:7c:a7:76:92:a6:04:1a:ff:cd:90:59:42:07:e2:
06:b8:be:4a:1e:bd:37:ea:f1:27:d2:36:a2:a2:bf:
b4:c6:46:8e:70:96:13:b8:d3:8c:ee:42:33:d6:c5:
12:6e:ae:10:6c:68:13:45:42:25:03:63:74:7e:a4:
be:3c:90:95:6a:00:dd:7a:f1:91:0b:16:84:ca:13:
c5:99:72:92:cd:19:c9:51:7a:ee:ac:61:a0:8f:4b:
ea:6f:2a:22:ef:08:9d:68:8e:bb:ff:fb:04:75:89:
d5:07:81:5f:1d:5b:cc:f7:d5:8e:bb:0e:cf:5c:44:
bb:8d:2d:27:ef:66:a3:6f:aa:60:99:f8:bb:55:1c:
5f:47:12:a9:8b:8d:c1:0b:f3:7b:f0:a1:b3:a3:d2:
d2:95:85:47:b9:3f:52:d5:a5:b6:04:34:05:0a:60:
f2:f0:7a:7f:f3:d7:ad:cf:00:b5:a3:6d:93:09:a7:
93:3c:ce:f1:0d:6e:ec:e6:7c:00:66:2b:df:94:b1:
cf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:31:9D:E2:4C:23:9F:EF:54:18:05:F7:32:C5:37:40:9F:40:FD:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7AC94B0DFFF11EFBE5C97AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:0b:7a:1e:70:f8:19:b5:44:92:ea:5c:08:70:d8:64:b1:ce:
a1:ad:8f:15:3c:94:83:63:51:e9:f9:5b:3f:63:63:32:e0:dc:
ac:8a:1e:1e:53:81:eb:61:8d:78:fe:49:f6:cf:4e:19:07:b4:
48:6c:ca:1a:05:56:3d:d0:fe:de:5d:24:e7:98:eb:73:20:e6:
37:72:78:dd:fe:d5:0e:9a:eb:1b:72:82:98:dc:e5:b0:1b:15:
9b:3f:ac:95:66:0e:40:82:07:04:ae:2a:5c:3a:fe:96:7a:00:
bf:9f:84:63:c6:88:2f:84:7a:cc:26:47:12:0f:76:b7:ad:12:
31:8c:7e:cc:dc:89:35:0d:f4:d0:28:97:63:30:2c:10:27:c7:
ae:8e:e1:e4:a4:32:23:f8:4b:e4:2b:dd:2c:95:d5:e9:00:5c:
00:a1:c7:e7:72:b3:6e:8d:e9:97:05:06:f2:df:e4:e8:9d:73:
4e:f7:43:3e:b5:f1:b1:0e:80:0d:60:f4:66:6e:8c:c8:23:f3:
34:76:28:80:51:8b:22:03:fd:13:9b:f4:fb:47:ca:0f:7d:5a:
95:9d:0a:47:f5:55:d5:08:03:77:76:f9:5a:14:29:95:eb:c9:
71:d7:24:42:3b:e5:51:d4:19:ac:07:e6:31:d1:f4:e0:61:b8:
e9:9a:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:10:02 2025 by rpki-client