Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29554D82EC8D11EF8D7F9CA1762E951A.roa
File: 29554D82EC8D11EF8D7F9CA1762E951A.roa (raw, json)
Hash identifier: Gn40fll68gBTfYeMk7H654FVz1odHfsIQuZqmiVXxOc=
Subject key identifier: 4B:59:B4:AB:40:71:D7:99:A2:EE:29:39:69:65:55:90:F5:C1:88:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012454
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29554D82EC8D11EF8D7F9CA1762E951A.roa
Signing time: Sun 16 Feb 2025 17:40:50 +0000
ROA not before: Sun 16 Feb 2025 17:40:46 +0000
ROA not after: Mon 13 Dec 2027 17:40:46 +0000
asID: 17561
IP address blocks: 156.230.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74836 (0x12454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 16 17:40:46 2025 GMT
Not After : Dec 13 17:40:46 2027 GMT
Subject: CN=67b22322-2861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:01:55:5d:d3:ee:0b:0b:d5:fc:7f:6c:0f:
61:ac:4b:b4:8a:69:90:32:55:0d:c4:8a:66:0d:90:
e2:c7:d9:25:65:8b:d0:75:55:6c:a2:51:e4:30:c0:
41:07:07:ca:cb:8b:ef:b2:ca:87:9e:2f:cd:02:36:
ce:73:d1:2c:75:cd:4b:6e:de:1f:0a:04:5d:15:c4:
dd:4e:6e:47:7c:1e:ff:03:a0:15:cd:77:ac:30:19:
ed:40:50:34:37:40:5b:96:63:79:a8:06:d9:e3:4f:
b7:9a:de:de:11:83:03:1e:91:88:1e:f6:d7:f4:24:
a4:e8:e4:80:b5:31:96:d9:73:b5:88:53:b8:32:97:
b8:0e:2e:bb:eb:0d:d6:b4:2d:76:c6:3b:6b:39:2e:
a0:2a:36:e1:75:06:b3:c8:cb:df:ed:d9:e5:82:90:
22:1b:cc:32:6b:06:de:fa:71:e9:f8:d2:cb:57:ef:
58:e0:0d:f7:01:4c:2b:d6:96:51:f1:6f:07:ae:db:
45:9e:be:d7:27:15:7b:30:b0:29:46:7d:f8:c7:65:
7d:63:51:21:c7:b1:e6:95:f9:87:b4:5f:34:9f:c8:
41:49:31:ea:9a:1e:12:27:66:af:44:62:07:a2:d4:
d9:a0:00:ad:5e:f1:79:db:85:f7:71:3a:6a:5d:ef:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:59:B4:AB:40:71:D7:99:A2:EE:29:39:69:65:55:90:F5:C1:88:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29554D82EC8D11EF8D7F9CA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.146.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:07:2a:97:69:9f:fc:e5:e7:04:f4:9a:91:58:49:5e:2a:d7:
0d:61:cc:de:b8:68:4f:0f:fa:77:14:40:f3:36:a8:34:53:84:
4c:2f:9c:81:6d:7e:9f:66:09:08:64:1b:8b:45:cb:53:c5:b9:
29:a6:d4:c5:b4:d0:ca:fd:3d:38:ae:86:4f:1c:cf:19:89:3b:
e5:28:52:46:8b:7d:38:fe:ea:30:a8:28:d6:30:a8:2c:8f:9d:
1a:51:b5:1e:01:73:f4:32:0a:f2:3e:c7:03:47:0a:81:1d:70:
7e:97:5e:51:73:5f:a0:3f:b2:bb:a1:ad:cb:ee:22:86:ad:bc:
c9:0c:a8:4e:28:4d:3d:94:e4:bf:95:2c:e7:0b:d4:d9:20:04:
6c:d3:bd:83:df:69:cd:18:c3:ed:76:44:03:ae:dd:21:fe:0b:
82:ad:af:63:83:08:8d:6b:07:28:a8:cd:48:7a:20:ea:65:c4:
1f:56:18:2e:2f:23:21:46:d2:0c:b7:39:d7:6c:1c:41:ca:db:
de:7f:d8:b4:75:7c:d2:21:c3:82:37:fa:ed:2c:9c:9a:ff:0a:
59:58:02:61:b1:34:8d:40:7c:3b:50:0e:dc:5f:c0:8c:fb:62:
14:2c:7e:71:33:ed:d7:0b:ac:f8:3e:e6:dd:ce:a2:44:79:2d:
c5:15:b0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:41 2025 by rpki-client