Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BE4755EDB1A11EFBB7C70AB762E951A.roa
File: 0BE4755EDB1A11EFBB7C70AB762E951A.roa (raw, json)
Hash identifier: h/vj/NTAyoL1/LcsiaJKMe79kh3efd43nQJ6dP4AzlE=
Subject key identifier: 1B:A8:6A:A8:C2:72:0A:D3:6F:C1:50:C0:05:1D:B6:3E:FE:D1:24:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011251
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BE4755EDB1A11EFBB7C70AB762E951A.roa
Signing time: Sat 25 Jan 2025 12:43:59 +0000
ROA not before: Sat 25 Jan 2025 12:43:55 +0000
ROA not after: Sat 01 Feb 2025 12:43:55 +0000
asID: 137547
IP address blocks: 156.245.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70225 (0x11251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 12:43:55 2025 GMT
Not After : Feb 1 12:43:55 2025 GMT
Subject: CN=6794dc8f-2d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:b7:3e:f5:2d:b2:4a:0a:ed:47:b4:6e:f1:
d6:4b:f7:c3:5b:86:e4:60:17:d4:d7:16:61:a3:95:
d0:16:8b:f2:ff:83:1d:aa:27:2c:22:c7:d8:c6:94:
a7:24:3c:31:cd:3f:88:eb:99:35:6a:ec:10:a5:63:
cd:9b:57:aa:49:f1:e9:e4:67:d1:4a:34:dd:98:cc:
a8:2e:9a:ad:dc:47:7e:e0:fd:36:de:33:fa:fc:bf:
a2:eb:ba:90:3b:1f:70:6e:c4:87:a2:a7:58:db:dc:
bf:43:fc:6c:e4:3b:17:0a:51:f8:ba:8f:7f:10:3b:
d4:cb:b6:0a:16:5d:b1:80:1a:38:72:5f:ab:fe:d6:
c6:70:77:6d:98:9a:4e:00:51:84:dc:fd:bc:51:aa:
a5:50:30:ac:ca:df:5c:74:b7:b4:00:0a:22:2a:75:
6c:d1:35:ef:ea:17:ed:36:fe:5b:e6:62:fc:d4:9e:
7d:e5:d7:02:a5:b1:3a:77:48:61:f8:d1:34:81:35:
f8:ee:9c:0e:a4:0f:16:a5:d6:6c:85:8b:3e:99:70:
5a:c5:12:81:69:54:41:ff:b9:96:c6:40:b8:c4:bb:
47:26:b5:59:9c:02:b2:53:c3:75:f7:9d:6b:36:bb:
72:86:e3:1b:d5:a3:d7:ce:a3:4e:e3:e0:7c:00:6f:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:6A:A8:C2:72:0A:D3:6F:C1:50:C0:05:1D:B6:3E:FE:D1:24:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BE4755EDB1A11EFBB7C70AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.210.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:57:65:d8:43:e8:59:7f:45:9e:fa:11:d0:a7:5d:f9:dd:68:
06:74:19:a1:93:0e:62:c9:25:96:0c:67:3b:5a:0d:57:71:ce:
d5:79:ba:8b:1f:46:85:fb:4d:1d:d5:bb:c8:4d:3a:b1:63:03:
71:8e:1f:de:38:7a:5e:86:6b:7c:81:ec:7e:00:28:61:f8:28:
c5:42:81:e0:2e:03:e3:99:27:e9:4f:0e:d0:3e:c4:0b:a9:0b:
6c:c2:95:cd:e4:88:43:ae:28:28:b9:82:7c:67:50:77:e1:fc:
75:9d:33:60:13:b7:13:d9:0c:ce:99:45:cb:06:6a:a6:14:62:
3b:70:21:e0:a9:7c:76:cf:d6:78:b7:5f:c4:96:06:bf:2d:fb:
d1:2c:27:ae:f6:e4:97:04:a5:80:6f:44:05:1b:17:47:bc:e2:
e5:6e:82:9a:13:66:8b:78:b4:59:3a:b6:c3:c8:36:fc:62:f7:
93:fe:a4:4e:a4:fc:8f:a4:a6:0c:86:cc:23:f8:bc:25:02:0b:
39:ca:0a:fc:98:37:90:b8:ca:a2:c0:26:2a:b7:bf:9f:31:ba:
1b:3d:54:a2:e3:31:78:fb:0e:dd:4b:d0:83:d3:a7:b6:a7:88:
99:94:a0:40:96:9b:09:52:1a:f0:e0:1d:77:67:81:eb:77:1b:
10:5e:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:53:33 2025 by rpki-client