Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAA396E2DFDF11EFB6AA3359762E951A.roa
File: FAA396E2DFDF11EFB6AA3359762E951A.roa (raw, json)
Hash identifier: i69K/mjlQxFXcHDMPdX4jleA8No3vknajnJJ016Z/iw=
Subject key identifier: 67:44:B4:32:22:F5:E0:9A:74:9C:18:A0:F8:8C:5D:54:84:0D:9C:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011600
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAA396E2DFDF11EFB6AA3359762E951A.roa
Signing time: Fri 31 Jan 2025 14:30:55 +0000
ROA not before: Fri 31 Jan 2025 14:30:51 +0000
ROA not after: Fri 07 Feb 2025 14:30:51 +0000
asID: 63199
IP address blocks: 156.230.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71168 (0x11600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 14:30:51 2025 GMT
Not After : Feb 7 14:30:51 2025 GMT
Subject: CN=679cde9f-13e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8d:b2:a4:25:a0:00:69:68:02:f3:48:e9:4b:
d3:8d:75:00:a5:81:b0:d3:c8:6e:bf:18:9c:67:a9:
0b:30:83:12:b3:76:18:a9:a2:07:fd:16:71:20:73:
f8:ec:5e:4d:ed:30:3b:3f:c3:80:92:7c:64:db:2c:
84:fe:b0:73:b8:01:76:58:fc:89:1c:a0:03:cf:df:
9f:be:d3:a0:cd:f1:89:1c:c4:4d:19:d6:97:73:63:
fa:30:7c:34:7f:64:68:4c:ed:be:c0:6f:ae:a8:f6:
0b:d6:e4:a7:7e:5f:3a:7e:83:46:fc:ed:15:6b:af:
1d:3b:cd:c4:37:58:3b:bc:88:b7:d8:f2:a3:b0:af:
56:12:f8:41:2c:1d:aa:53:bb:b4:cd:74:5c:eb:bb:
e3:a9:a0:57:3c:8e:89:95:b3:68:2a:69:ea:36:40:
6e:b8:48:c0:d6:3a:21:d2:34:86:0f:6e:1f:c9:ae:
7e:a8:30:2b:5b:5b:ef:cb:05:2f:05:9c:68:a0:8d:
d3:06:f5:bf:bd:ed:83:b1:20:ff:66:08:98:1a:b4:
d5:e4:c0:fb:c1:a3:49:4a:d3:67:99:29:49:3f:85:
a2:bd:62:32:c7:c4:03:3a:d2:3b:41:9b:4b:81:83:
69:30:25:d6:8d:57:41:6b:9c:0c:e5:40:76:ca:f2:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:44:B4:32:22:F5:E0:9A:74:9C:18:A0:F8:8C:5D:54:84:0D:9C:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAA396E2DFDF11EFB6AA3359762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.48.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a0:12:90:63:a0:c8:b9:b8:d6:28:3f:7c:f7:c8:67:81:2d:
15:ea:5e:25:33:82:78:f3:3d:08:fa:78:2c:57:02:e8:40:fd:
ff:38:f4:2d:e0:ae:f7:fc:f2:e4:76:77:4c:db:2a:60:65:8b:
3f:7f:82:4c:0b:13:e0:3d:20:dd:7f:4e:bf:a4:08:57:31:51:
ec:7e:84:e8:11:45:7e:0c:02:8e:26:54:56:8c:37:9d:f9:25:
f8:f9:75:8a:c4:46:42:a9:35:ef:bc:6a:4a:4c:44:4c:e9:d7:
74:a0:ed:26:79:c3:97:5b:e6:d1:8e:b2:8b:55:c6:7a:59:9d:
28:2b:40:e7:4d:37:6c:ce:10:21:43:1c:24:e0:e0:2e:ea:20:
e9:d2:47:e6:57:27:07:cb:8e:2b:ff:63:04:2d:13:b2:07:a7:
a4:56:b5:6d:36:9d:b1:f5:30:2e:03:6f:76:18:ff:d9:9a:d4:
f5:6d:1a:d4:d9:e2:7d:e7:a2:d8:e7:72:f1:86:84:3c:11:bb:
3a:05:0b:cb:c5:11:82:59:56:c9:3b:d1:de:7b:70:80:67:10:
97:7d:2c:09:0e:25:71:e6:75:30:ad:d4:52:b0:a0:fb:5f:02:
02:46:f5:82:42:13:7f:dc:4b:fe:4f:18:b6:68:d9:2f:86:e5:
02:d0:46:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:48:27 2025 by rpki-client