Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8512D0DA6711EF97C91B77762E951A.roa
File: FA8512D0DA6711EF97C91B77762E951A.roa (raw, json)
Hash identifier: jowfUo8qI969GtDlf6nuu5gnrmuQIaiOL+LR9N86gLY=
Subject key identifier: EA:8A:E5:00:6E:73:10:B5:D3:49:D7:19:5F:8F:8B:BF:9B:37:90:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8512D0DA6711EF97C91B77762E951A.roa
Signing time: Fri 24 Jan 2025 15:29:19 +0000
ROA not before: Fri 24 Jan 2025 15:29:15 +0000
ROA not after: Sat 01 Mar 2025 15:29:15 +0000
asID: 61112
IP address blocks: 156.229.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69520 (0x10f90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 15:29:15 2025 GMT
Not After : Mar 1 15:29:15 2025 GMT
Subject: CN=6793b1cf-6e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:a0:35:3d:be:9b:bd:4b:c8:70:b4:ea:9d:
84:10:f7:31:80:e9:e9:ee:2f:0d:f2:26:0a:38:a3:
5f:28:61:d9:32:4e:d4:01:65:4d:30:ac:46:ad:1b:
9e:dd:ab:94:36:82:99:1f:85:79:05:bc:25:1e:92:
ed:01:47:57:67:a6:1c:08:8a:88:84:11:47:95:83:
7d:03:4c:2d:b4:26:86:ee:a8:7c:ce:89:92:1f:7c:
8a:27:59:d0:f9:68:bb:92:df:aa:89:52:00:fa:e3:
d4:20:0a:4a:19:fb:5b:79:83:ac:6f:3c:9e:d5:1e:
03:ec:06:61:ee:b8:73:f9:2d:42:23:43:fa:b7:ae:
1a:08:7c:1b:e2:4d:ea:5d:4a:e3:4b:ff:4a:c3:5e:
9a:66:0c:39:b9:67:b6:28:30:32:af:4e:6c:2e:21:
ef:b0:b6:87:c6:58:aa:95:6f:d2:03:62:e0:30:d7:
26:3e:fa:fe:5f:af:a7:5e:0a:3c:c9:9e:f5:70:49:
00:c6:35:98:f6:5f:99:38:78:97:39:9a:a7:a2:65:
f4:07:5b:37:24:f1:d0:03:a4:77:15:1c:7b:54:fc:
6f:d8:a7:9c:dc:7e:2e:ef:dd:d1:a8:f4:d6:ef:a5:
06:23:6b:4f:0d:60:8f:42:92:82:92:03:b3:e1:a1:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8A:E5:00:6E:73:10:B5:D3:49:D7:19:5F:8F:8B:BF:9B:37:90:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8512D0DA6711EF97C91B77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.160.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:59:2d:75:82:42:8b:a1:95:15:86:12:10:74:3e:af:9e:82:
32:fa:5e:ac:23:77:41:72:02:dd:fd:39:87:25:f9:f5:4d:cd:
a7:5d:47:c9:0f:b3:d4:04:2d:f8:4a:86:9d:a3:4f:86:46:e6:
ad:a8:f0:3b:04:31:26:8a:8f:0a:10:4a:a1:a1:bd:0b:4c:dd:
1c:a2:a1:a0:37:ea:0a:db:b8:b2:98:65:ca:0a:3a:02:69:5e:
d0:83:5c:02:21:58:c3:4b:8b:4f:a8:27:de:9f:40:45:2d:82:
da:43:69:32:64:98:7b:ee:14:ef:01:af:d2:d2:d6:31:46:c5:
9c:0b:d9:46:96:be:4b:1c:f3:ee:f2:07:a6:33:4a:58:ea:db:
bd:56:cb:22:30:ab:90:71:8f:48:0f:25:de:86:b7:c0:b7:59:
72:96:a9:fa:0e:83:fe:4e:b0:fb:14:d0:a7:6d:bc:19:08:1e:
51:a1:c7:54:c9:11:a3:4e:7c:92:1b:fd:41:52:d4:c9:fc:f0:
a6:47:0d:77:9e:00:29:16:03:c0:1f:aa:eb:ea:83:28:7b:49:
60:53:57:32:c3:0c:5b:70:33:2c:10:ec:ca:86:43:be:c6:c2:
62:74:08:1c:eb:20:2e:8e:01:ca:5c:42:55:c5:ff:64:c5:bb:
57:67:47:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:01:54 2025 by rpki-client