Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0836033AD7E311EF9F1A4E9B762E951A.roa
File: 0836033AD7E311EF9F1A4E9B762E951A.roa (raw, json)
Hash identifier: fbsQPy0cexQcxhsTkFNMscsa1UfMnher24q8oSA9beQ=
Subject key identifier: D4:4C:98:B4:55:31:5B:69:BF:07:A0:BA:E1:BF:A4:84:B1:87:F3:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0836033AD7E311EF9F1A4E9B762E951A.roa
Signing time: Tue 21 Jan 2025 10:32:37 +0000
ROA not before: Tue 21 Jan 2025 10:32:33 +0000
ROA not after: Sat 01 Feb 2025 10:32:33 +0000
asID: 44559
IP address blocks: 156.246.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68918 (0x10d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 10:32:33 2025 GMT
Not After : Feb 1 10:32:33 2025 GMT
Subject: CN=678f77c5-7c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:be:07:01:5b:14:78:fd:a3:53:a5:54:87:
53:71:1a:bf:94:af:7d:c1:d4:87:7b:42:09:0c:f7:
39:e0:d7:99:a1:3c:dd:ab:07:87:8b:52:a3:1d:b3:
68:37:87:ca:9a:cf:8d:90:74:d4:7f:4d:50:17:ed:
af:a6:d9:c9:69:d9:64:6a:b6:77:ae:ca:22:be:24:
d3:2e:2a:ef:2e:2a:0c:14:77:dc:98:dc:ac:2f:fa:
39:94:9b:30:45:1c:12:69:45:0b:a5:39:ca:8c:ec:
16:67:ab:93:38:a9:09:c4:af:20:73:9e:a3:59:b7:
ad:d0:17:bc:15:98:f4:05:5e:cb:16:e4:29:5e:bf:
3a:7a:31:d1:95:15:f9:86:60:cc:c8:18:6b:88:26:
6b:36:ee:b1:12:5f:c6:d4:f4:82:11:c5:a8:85:5d:
97:15:50:9a:d9:87:68:06:4d:5d:84:7b:27:8b:57:
01:ee:cb:2d:d0:a0:59:4f:dd:89:43:36:dd:6d:ea:
c2:75:e4:c4:a1:f5:bc:86:ed:72:8b:95:3f:79:87:
74:94:c7:87:a4:45:3e:d3:df:f6:12:1e:8a:ef:cb:
aa:81:81:a8:ff:8e:4c:a6:d7:e3:4c:15:61:3a:be:
6a:1c:4a:51:a9:b3:b0:d0:8f:5e:40:80:a5:2b:85:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4C:98:B4:55:31:5B:69:BF:07:A0:BA:E1:BF:A4:84:B1:87:F3:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0836033AD7E311EF9F1A4E9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.182.0/24
Signature Algorithm: sha256WithRSAEncryption
26:57:12:2c:1f:01:5d:ba:b5:5b:28:0d:51:83:30:70:52:fd:
b9:f0:1d:8c:3e:09:83:ae:cb:ab:c1:29:8a:cb:0e:71:3d:1b:
7f:88:84:20:e2:2d:01:0e:6e:c0:ab:07:79:0e:63:2e:7c:c6:
8e:62:8a:54:7a:31:c0:23:c0:0a:8c:ec:37:28:47:50:d1:40:
62:f1:f0:6f:56:c6:e4:27:c6:2c:e9:51:09:74:6e:fb:79:89:
c0:28:4e:c9:c4:e4:40:ed:15:87:ce:f2:f3:4c:8f:3b:1c:8b:
91:a0:14:92:d2:a7:ab:00:93:11:8e:3e:75:53:81:fa:04:ce:
37:24:f6:a4:e2:3d:be:07:40:f6:d9:3f:f2:11:ec:0f:1c:af:
cf:bf:e8:a5:b9:91:fa:b3:54:f8:b4:b7:f8:8c:d8:8a:7b:1f:
fa:0f:dd:38:97:17:26:f6:53:41:01:0b:88:93:46:20:4b:5b:
21:e2:49:32:9a:80:a1:89:12:65:ca:99:9d:cc:00:b5:17:32:
2e:e3:6a:66:52:7a:12:4f:d9:07:a6:75:96:69:89:d9:43:c9:
cd:09:8d:33:df:62:8f:7c:8c:40:63:79:41:e3:79:07:fd:73:
d5:9a:57:66:b5:59:ae:05:cb:0a:f4:ee:2c:3e:e3:b6:30:8d:
e0:b1:45:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:32 2025 by rpki-client