Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06B3CA70D97211EF93696A7A762E951A.roa
File: 06B3CA70D97211EF93696A7A762E951A.roa (raw, json)
Hash identifier: eW8GRTqHGt51Bw+/iF85FAIb1XIcPPePwxk98eNJGwU=
Subject key identifier: 5C:78:17:A3:D8:52:FA:45:EC:95:03:A0:ED:85:E3:5F:B9:A8:C6:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06B3CA70D97211EF93696A7A762E951A.roa
Signing time: Thu 23 Jan 2025 10:08:43 +0000
ROA not before: Thu 23 Jan 2025 10:08:40 +0000
ROA not after: Sat 15 Mar 2025 10:08:40 +0000
asID: 138915
IP address blocks: 156.244.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69382 (0x10f06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 10:08:40 2025 GMT
Not After : Mar 15 10:08:40 2025 GMT
Subject: CN=6792152b-92d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:3e:04:b0:10:bf:e4:8b:f8:f5:e2:b9:ff:
9e:16:a7:87:a6:d6:13:d1:dc:47:3c:14:e9:48:94:
64:40:d3:18:1b:9f:f3:80:f5:fd:da:16:68:2c:bd:
a4:61:59:80:0f:32:04:af:1c:c3:ef:f2:70:f8:d2:
1a:2c:58:5c:db:a9:a6:57:8c:32:fd:64:32:19:00:
bf:45:0f:64:f6:39:b0:78:a8:7b:f3:60:41:73:c0:
1b:05:d9:54:b7:67:35:c5:4e:bd:55:d8:ce:8e:d4:
02:5e:fe:ac:42:92:36:d8:39:cd:de:a8:c4:34:4d:
4a:74:e3:a1:0b:d7:e6:9a:26:7f:59:3e:87:1f:91:
58:df:c6:51:93:a0:12:02:77:e2:55:d5:3a:c1:7a:
79:a5:6c:1e:b3:3d:4b:46:f0:4f:a0:7f:af:1c:81:
20:c9:11:d1:54:f0:71:c5:76:a9:03:3a:11:55:9e:
d7:f1:bd:4a:5a:0e:78:d0:ce:8a:91:78:56:f5:44:
c9:ec:dd:ff:7b:13:95:8e:a2:70:a4:5e:87:cc:01:
b9:70:8f:c2:6d:cf:18:e1:2a:7c:9d:cb:3e:92:d9:
79:ea:f2:7e:1a:3c:ea:46:57:65:d9:b7:1f:9c:eb:
23:b3:1d:43:79:db:ee:d8:68:ed:81:e5:78:3a:aa:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:78:17:A3:D8:52:FA:45:EC:95:03:A0:ED:85:E3:5F:B9:A8:C6:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06B3CA70D97211EF93696A7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.8.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b7:65:b5:82:c1:4f:30:f5:ec:63:d2:57:d8:f7:ba:df:61:
86:b6:1a:f1:db:5f:56:10:61:14:62:f7:75:24:be:b4:32:f2:
42:c5:12:ca:0d:0c:4d:12:8e:4f:39:23:ad:22:d1:96:91:ba:
7c:40:f2:2b:ce:0c:9d:65:93:2a:fb:80:87:bf:f4:fa:bb:97:
95:f0:70:1f:fb:b9:f7:2e:25:6c:1f:a4:a1:c5:fb:cc:95:5d:
0d:6e:33:cf:2f:0e:03:32:80:c2:b5:10:45:73:5e:72:e0:c4:
73:71:72:b3:bf:f4:69:03:88:59:99:3c:70:54:a3:78:ba:a4:
70:96:5b:70:01:99:36:d6:39:d7:1e:9b:1a:37:1f:d1:ec:92:
fb:8f:28:4a:2e:67:20:62:60:b3:b0:2f:89:0c:57:cf:d9:60:
36:01:23:b7:13:e2:f4:f3:b7:62:1d:8c:00:e6:1f:a7:e6:da:
90:dd:11:a4:37:f6:ac:88:01:51:8b:6c:96:48:50:b1:4d:f3:
7c:d0:04:05:be:f6:db:4e:08:b2:3d:29:38:37:1b:e3:e9:9a:
61:87:59:16:3a:cc:6a:c1:b1:38:d0:56:f1:fa:8c:37:17:31:
13:c3:3b:2a:ee:3d:47:f5:09:1a:33:81:02:26:a3:9a:15:40:
47:39:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:56:33 2025 by rpki-client