Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/010484EED51611EF8D0D65B9762E951A.roa
File: 010484EED51611EF8D0D65B9762E951A.roa (raw, json)
Hash identifier: BPwNlQbHMuboTp/yKQDgj33GlELDbl/2kJNUKAW5OUY=
Subject key identifier: 15:69:47:6F:69:B8:11:97:EB:0B:FA:84:31:F3:B3:84:7E:AE:66:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AB0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/010484EED51611EF8D0D65B9762E951A.roa
Signing time: Fri 17 Jan 2025 20:59:55 +0000
ROA not before: Fri 17 Jan 2025 20:59:52 +0000
ROA not after: Sat 22 Feb 2025 20:59:52 +0000
asID: 139646
IP address blocks: 156.240.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68272 (0x10ab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 20:59:52 2025 GMT
Not After : Feb 22 20:59:52 2025 GMT
Subject: CN=678ac4cb-0774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:12:59:9b:ba:fa:bc:a5:01:f0:eb:40:73:dd:
d2:b0:37:59:7a:36:63:17:8e:7e:de:18:59:57:74:
fe:51:3a:a1:67:e5:46:e5:f6:25:cb:ab:f8:82:a5:
d3:19:58:3c:57:bf:d7:50:74:5b:06:68:47:a2:e5:
61:b1:d9:1e:96:66:a1:5d:90:1e:fd:ee:91:22:09:
6d:de:0f:d1:86:56:01:42:99:fc:a5:4f:ed:22:5c:
11:ed:0f:e7:7e:55:f0:ce:db:99:11:04:42:d8:a5:
b9:7b:5f:65:09:75:5a:2a:61:8c:fd:03:3b:3c:7d:
ef:5b:86:ba:7e:c2:39:25:fe:95:61:f5:55:18:f3:
5c:83:8f:5a:67:40:13:ff:51:6a:4d:e0:81:45:d1:
25:c7:30:df:c9:42:68:36:4f:d3:e4:cc:0c:c2:41:
8c:71:ba:81:5f:c4:f4:fd:f1:76:2b:e7:8b:28:67:
b6:e1:8a:96:f0:47:d8:9d:9e:41:b9:96:11:03:20:
7c:62:e5:78:a7:4a:82:d2:eb:c3:5f:94:97:82:32:
16:7b:e8:3e:81:72:2d:66:3e:60:89:5f:9a:6b:4c:
bc:bc:a6:1b:10:75:8c:13:47:0a:c8:48:1c:1f:6c:
27:40:4d:2c:6c:f8:a8:70:9c:a4:32:80:f5:91:1c:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:47:6F:69:B8:11:97:EB:0B:FA:84:31:F3:B3:84:7E:AE:66:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/010484EED51611EF8D0D65B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.48.0/21
Signature Algorithm: sha256WithRSAEncryption
45:6b:bb:ae:a4:ea:6e:b2:81:1a:32:96:3e:8b:b7:46:aa:0c:
b0:ff:b4:9b:1d:2c:5c:f5:2f:8d:74:2d:13:26:c0:05:18:4e:
c5:a1:9c:07:fb:aa:fe:cc:14:fd:36:eb:78:ea:0e:b5:22:b7:
74:3e:ce:f7:0a:e7:a6:cf:f4:30:d6:f3:21:26:7d:99:93:08:
de:69:af:5b:b7:52:5a:be:00:9d:f8:95:f7:50:3f:23:2c:03:
f1:14:99:28:a2:6b:2d:f9:b4:9b:9a:25:49:98:4a:a8:bc:f2:
fc:f4:a1:48:67:ba:51:78:48:d7:87:41:b9:1a:0e:bd:dc:95:
39:03:b1:c2:d1:7c:e8:ff:f5:8f:5b:ed:46:01:41:15:95:0a:
98:c8:27:91:8f:af:82:9b:bc:49:e0:8c:41:11:e8:db:66:24:
27:75:bb:49:b9:57:a3:53:9c:46:d3:23:23:85:12:b7:f6:a1:
17:67:a0:33:d8:49:8e:88:e3:71:9e:c6:c9:e5:7f:81:8c:8a:
98:52:2b:03:92:87:37:72:ff:39:3c:24:49:fa:60:f5:03:9c:
c4:39:6f:14:b6:de:b8:3f:78:85:9c:36:87:66:a6:cd:c2:ec:
9d:f3:67:b6:93:3e:54:71:0d:d8:fa:45:05:cf:48:df:c5:1c:
05:97:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:12 2025 by rpki-client