Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6E8F97CE00011EFA0F36BB6762E951A.roa
File: F6E8F97CE00011EFA0F36BB6762E951A.roa (raw, json)
Hash identifier: 7y7s/PrtpOJUCdZb7vcRpQoRleqAoZ1OxseT83WuJRY=
Subject key identifier: 17:08:12:35:C9:98:33:95:7A:5C:B1:5E:60:1F:2A:62:B7:BC:F4:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6E8F97CE00011EFA0F36BB6762E951A.roa
Signing time: Fri 31 Jan 2025 18:27:02 +0000
ROA not before: Fri 31 Jan 2025 18:26:58 +0000
ROA not after: Tue 04 Mar 2025 18:26:58 +0000
asID: 49434
IP address blocks: 156.229.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71399 (0x116e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 18:26:58 2025 GMT
Not After : Mar 4 18:26:58 2025 GMT
Subject: CN=679d15f6-df23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:ad:78:02:d0:b5:65:8a:e6:e1:2e:b3:d1:
ea:e4:2e:b8:4d:c6:7f:96:e9:ca:14:4c:0e:0b:84:
a8:4f:2b:d3:21:4e:de:e9:ff:56:05:b5:c7:85:e5:
d4:70:e0:40:ac:ba:3e:bf:25:74:4c:73:49:6e:b1:
51:2f:9f:c8:60:89:47:18:34:3d:b3:dc:50:35:3a:
e4:15:60:15:34:b4:5f:1f:64:95:a7:05:b9:db:21:
6c:0f:ae:6b:30:ce:58:13:5b:82:11:09:76:9e:28:
13:1d:d6:df:83:d4:65:58:9c:aa:97:cb:2f:25:ab:
9a:4b:26:5e:d6:74:41:6e:0a:08:da:d6:a4:0e:71:
7f:c9:e3:cb:34:0d:bf:fe:ae:a8:59:df:3d:6b:d5:
2e:2a:bd:85:1f:a7:6a:f2:70:73:11:1e:10:28:3b:
69:a8:66:91:58:10:c2:88:44:b6:9b:c1:57:80:31:
b8:04:43:4b:94:37:da:3a:bf:83:68:fb:af:9b:29:
c3:b3:1f:4c:ba:63:f4:ed:28:e1:51:99:8f:18:29:
7b:34:6b:0f:04:59:16:eb:32:17:a3:a8:88:cb:71:
78:54:7c:56:7b:be:2c:50:3b:a7:97:47:ff:d6:a6:
fc:44:a9:77:e2:60:49:a4:8e:73:d8:b9:71:2b:8a:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:08:12:35:C9:98:33:95:7A:5C:B1:5E:60:1F:2A:62:B7:BC:F4:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6E8F97CE00011EFA0F36BB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:c9:05:7b:8a:7b:d1:77:e8:62:6d:77:9b:11:c4:7b:64:97:
bf:43:6e:ed:4c:3b:36:a5:07:d5:50:a3:15:f4:ea:09:d7:72:
67:73:db:b0:59:80:0c:39:be:c9:06:4b:46:1d:37:61:de:a7:
6a:c0:83:6f:ec:7b:9c:71:ee:7a:05:97:16:26:3a:32:b9:7d:
d9:3b:24:a5:f1:c2:61:7d:b4:b1:7e:76:ae:34:f0:02:f4:84:
5c:68:45:56:a7:22:5d:50:3b:9a:c6:c2:22:8d:af:b3:24:19:
62:0d:bd:06:51:70:0c:ae:4e:f8:e4:24:55:f5:d8:d4:b8:76:
93:27:b7:00:b6:67:35:cd:df:45:0b:52:55:ba:85:c2:f4:1c:
88:c4:76:da:e4:5d:eb:38:f6:47:39:fc:f6:67:42:da:30:a1:
0a:67:16:5a:b2:43:c0:dd:9e:bc:ee:2b:dd:17:56:c2:61:0c:
92:4c:07:a3:c8:30:f0:d8:9f:02:84:66:d6:b9:87:85:1f:7b:
58:33:98:90:e5:66:0d:1b:fa:03:e2:55:37:cf:14:89:70:17:
e3:42:67:01:ad:3a:62:b0:b5:05:6d:99:4e:cd:eb:e9:06:73:
86:5e:cf:e5:7e:91:fc:f0:ec:f5:55:bb:3f:b4:bc:27:79:61:
ef:ee:79:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:09 2025 by rpki-client