Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F24F76A2D3DF11EFAF1C8158762E951A.roa
File: F24F76A2D3DF11EFAF1C8158762E951A.roa (raw, json)
Hash identifier: xSmAUDm77OK4lvljAFNC760Ann0/5+vEb+ugFTSkogk=
Subject key identifier: DA:D7:AD:94:34:75:B4:6B:99:14:2E:F8:98:FB:97:3B:0A:EC:AE:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F24F76A2D3DF11EFAF1C8158762E951A.roa
Signing time: Thu 16 Jan 2025 08:00:27 +0000
ROA not before: Thu 16 Jan 2025 08:00:23 +0000
ROA not after: Sat 01 Mar 2025 08:00:23 +0000
asID: 399195
IP address blocks: 156.229.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67816 (0x108e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 08:00:23 2025 GMT
Not After : Mar 1 08:00:23 2025 GMT
Subject: CN=6788bc9b-9a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:24:1d:a5:67:5d:84:77:26:d5:5c:8e:4e:1e:
a4:c8:62:f8:9d:9f:95:09:c8:ff:39:0a:22:03:c6:
88:26:4e:d4:23:0b:67:d7:91:8d:67:25:0b:51:85:
b7:08:f7:9e:33:9c:a2:b3:c2:1b:db:62:bf:e8:17:
5f:4f:7c:79:b7:21:8a:e1:a8:75:26:fa:28:08:de:
ce:85:7d:5b:35:04:48:91:57:b4:d5:5b:7c:85:46:
c0:67:ab:7d:c5:90:eb:e4:54:cb:bc:68:5a:e8:8c:
ef:91:ea:a3:de:42:30:2f:50:6c:98:0c:59:c2:a4:
9c:56:17:14:7a:65:a7:e0:85:54:4c:0f:b0:1b:f2:
3b:1c:a8:f2:0a:78:87:c7:c6:21:9e:1a:ce:d5:75:
90:c0:0c:5d:28:28:94:fd:85:43:48:b5:6d:e3:e3:
b4:bb:5c:af:80:87:3f:14:90:48:e2:2f:93:47:2d:
3b:0b:d5:bb:91:e5:4e:1a:c8:85:69:df:a7:7c:3d:
0d:8b:61:db:30:12:84:1d:ce:7a:aa:71:8d:51:11:
38:41:74:de:0b:b2:76:51:e4:ee:21:ed:c9:74:cb:
36:a1:93:e3:86:b5:f5:af:46:4c:c4:9a:28:be:79:
65:5e:81:ea:e3:3c:b4:1b:ea:1c:6e:ee:78:7f:cc:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:AD:94:34:75:B4:6B:99:14:2E:F8:98:FB:97:3B:0A:EC:AE:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F24F76A2D3DF11EFAF1C8158762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.192.0/19
Signature Algorithm: sha256WithRSAEncryption
16:8b:02:f0:35:19:46:a6:37:56:82:3f:b4:28:ed:f2:3e:97:
bb:11:d8:6e:29:d0:9e:e6:58:e0:15:c9:6d:ff:5c:c5:0b:ce:
10:ea:b1:94:17:4c:32:94:92:99:a7:9e:04:4b:9f:5a:37:5d:
3b:cd:44:28:48:f0:fe:8d:df:99:ff:5b:42:32:17:1a:65:c4:
60:a2:c6:98:1b:e1:90:80:50:78:e5:98:b0:7a:d9:ef:5a:ac:
c0:fe:c8:cb:85:d5:46:0f:4b:d1:27:81:e5:eb:b1:70:8a:30:
79:aa:6b:a5:7e:ed:b5:e8:ba:a8:8f:99:e6:69:d9:ea:2f:5d:
67:bb:78:6e:3a:4e:79:bb:61:0f:89:68:2f:17:31:36:d2:1a:
d7:94:2f:73:c3:a4:33:1b:4b:76:d2:49:48:0a:56:bd:d7:cf:
9c:d4:ee:be:7b:e4:18:03:46:f8:78:71:56:82:cd:cd:ef:cd:
19:d9:44:ab:04:d8:82:3b:42:70:5f:84:f8:5e:de:90:1e:9d:
6f:82:fe:22:7b:fb:34:13:a4:5f:76:3f:91:29:88:3c:37:f2:
ee:10:e9:4e:0e:18:7d:e0:89:92:de:56:80:20:36:f6:2a:43:
28:2b:04:3f:ad:2d:a2:c8:db:98:ca:3d:66:d0:8d:fd:9d:96:
c0:d6:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:18 2025 by rpki-client