Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE54B85CDBF711EFB9BE3E83762E951A.roa
File: FE54B85CDBF711EFB9BE3E83762E951A.roa (raw, json)
Hash identifier: 6h37BVXlrXtqAPTTZ5fYI0PXa3+A2RcEB1cu8FdsHR8=
Subject key identifier: EB:BE:F5:C0:5E:E0:7C:24:E2:48:0F:85:5F:49:3B:2E:CA:E6:A3:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE54B85CDBF711EFB9BE3E83762E951A.roa
Signing time: Sun 26 Jan 2025 15:12:44 +0000
ROA not before: Sun 26 Jan 2025 15:12:40 +0000
ROA not after: Sun 23 Mar 2025 15:12:40 +0000
asID: 63139
IP address blocks: 156.229.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70604 (0x113cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:12:40 2025 GMT
Not After : Mar 23 15:12:40 2025 GMT
Subject: CN=679650ec-5d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:4a:0f:7a:c0:22:12:ae:1f:71:ca:db:c4:
a8:00:41:3a:22:20:cf:22:01:86:01:e4:81:41:82:
ba:bc:a8:63:f4:d4:aa:21:df:37:b9:57:7a:aa:af:
13:7f:36:ca:d5:8f:58:66:4f:03:04:17:0f:6e:b0:
ae:02:c3:8e:19:97:fd:6b:40:bb:79:4c:b7:31:1e:
e6:6b:a4:db:8e:6e:d3:eb:49:62:c9:06:23:87:9d:
9b:dd:e8:4d:27:7a:04:bb:8d:28:5b:e1:f0:7f:46:
86:e6:77:fd:ea:1f:95:dd:63:ba:57:74:f4:15:8b:
44:02:97:53:7a:a7:49:a6:2e:e3:7e:c3:ab:a7:79:
a8:4b:5f:ca:67:ed:25:2b:91:5a:c6:43:df:bb:a3:
de:7d:bb:5f:fb:59:53:a3:89:2f:29:19:71:df:a8:
f0:4e:85:53:d1:a1:3e:55:0f:b0:da:37:29:10:46:
38:ef:a7:b6:5a:9c:c2:86:07:ff:31:d3:32:ff:54:
17:cd:1a:aa:a9:fe:ad:69:73:03:51:1d:a6:76:09:
eb:1a:05:17:7d:1e:e7:79:c7:46:9a:2f:cc:32:42:
7d:9d:ed:5a:28:aa:71:f1:d3:c1:76:fe:c6:c6:1b:
ad:f8:5c:52:5d:2c:33:a7:cb:75:23:f3:3e:38:0c:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BE:F5:C0:5E:E0:7C:24:E2:48:0F:85:5F:49:3B:2E:CA:E6:A3:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE54B85CDBF711EFB9BE3E83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:58:d9:b2:b1:39:4c:4a:d7:9a:cf:60:4c:62:99:02:ba:39:
0a:41:e5:3e:f8:18:fd:3e:f5:c7:30:da:32:b3:30:1f:27:09:
72:b5:03:18:09:2d:91:7f:8e:df:04:54:70:4b:a8:06:74:c8:
68:6a:ec:06:f0:94:e9:e5:9f:da:ab:f3:f7:a2:81:04:73:43:
98:0e:72:64:27:d0:cf:a0:30:e4:20:f1:e8:ae:c7:cd:fa:63:
01:9f:3a:26:78:ac:ac:c8:54:72:91:1d:7f:16:33:72:cd:1b:
b6:9d:e6:da:52:86:44:53:54:b6:fa:a9:8f:a6:46:7b:8e:00:
11:76:79:3c:a6:02:2a:c8:9c:98:a6:cd:52:13:c7:0f:25:49:
45:0d:83:43:23:7c:c6:46:d1:dd:16:6b:16:b0:5f:79:72:11:
36:e9:fd:70:18:73:64:0b:ae:1d:25:cb:af:27:ab:20:4a:bc:
7f:14:7e:81:06:17:fb:94:97:a0:61:51:25:a0:f5:e6:9a:d6:
87:14:2d:ac:ac:ce:67:0d:03:ad:9c:c0:fd:e1:53:1d:6d:f4:
19:0a:18:c1:12:82:34:c6:24:fa:73:b5:a4:1c:0a:dc:4f:4a:
ff:88:9b:72:84:e8:db:78:d8:52:db:ac:b5:69:69:9f:8f:a3:
66:7a:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:24:10 2025 by rpki-client