Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C2BF18CDA8D11EFB117856D762E951A.roa
File: 0C2BF18CDA8D11EFB117856D762E951A.roa (raw, json)
Hash identifier: ubudnbssdWt2MWW5yO6ToADTLF59ucPdZU2dgjH4N2c=
Subject key identifier: 76:90:55:D0:B7:10:91:3E:AB:07:36:DA:56:20:4B:0B:86:4B:35:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01105E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C2BF18CDA8D11EFB117856D762E951A.roa
Signing time: Fri 24 Jan 2025 19:54:40 +0000
ROA not before: Fri 24 Jan 2025 19:54:37 +0000
ROA not after: Tue 25 Feb 2025 19:54:37 +0000
asID: 44559
IP address blocks: 156.246.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69726 (0x1105e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 19:54:37 2025 GMT
Not After : Feb 25 19:54:37 2025 GMT
Subject: CN=6793f000-c92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:6c:f5:cb:18:0b:11:0e:af:87:5a:04:83:
2c:89:2a:e5:11:76:e2:c9:b6:a6:c9:d0:6d:9b:a7:
bc:fa:ca:23:c6:d2:ae:d4:6d:40:34:72:21:7e:5d:
88:1f:73:c7:0d:b6:26:78:25:e7:9c:09:f2:39:df:
f6:47:6c:3c:1b:7e:ae:89:6b:3d:31:4f:c3:c9:b0:
a8:8b:20:0a:2f:0a:0c:86:b4:cb:81:25:97:55:1b:
96:60:e3:41:aa:8f:60:42:58:d1:98:34:41:67:46:
7a:0f:14:2f:e6:f9:49:aa:23:f1:d3:55:80:e2:41:
7d:28:1b:35:b9:db:2e:c3:4a:a0:18:d6:0b:7a:58:
fb:2a:16:ab:c7:e4:d9:43:3b:c7:21:42:db:76:2f:
4d:5c:12:79:a3:4b:ad:24:3c:4f:30:86:cf:40:fc:
1c:3b:bf:9c:ac:8d:3a:38:19:53:31:9c:8b:86:93:
24:d1:a6:58:68:3b:f9:f5:c3:7e:52:92:b0:c1:39:
f1:f5:4a:e9:56:a2:75:cd:3b:19:8c:b2:97:0f:08:
f7:6f:74:24:13:d2:ed:24:38:7a:1e:b1:4a:74:7f:
cc:3c:a9:47:76:b6:b5:a4:28:49:db:a7:9e:5f:4f:
05:a5:04:24:bb:ab:60:0d:19:78:e7:27:d3:73:b5:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:90:55:D0:B7:10:91:3E:AB:07:36:DA:56:20:4B:0B:86:4B:35:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C2BF18CDA8D11EFB117856D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:eb:12:de:30:86:c0:ae:0e:81:8f:90:83:3f:d1:48:7a:86:
4a:02:94:ae:e2:3f:a4:58:9e:f2:23:bf:76:4f:8a:21:75:8f:
61:2e:13:b1:a3:60:b1:d0:d7:8d:88:31:46:55:20:5f:4b:09:
fe:2d:20:02:fe:ea:41:7c:7f:fe:f9:00:da:c2:c9:7d:3f:c1:
6f:d8:9c:d9:f6:2c:af:fd:90:9b:65:e8:27:19:81:1e:25:97:
42:22:1d:31:25:70:92:41:dc:19:86:98:51:b8:de:5d:df:42:
12:8d:35:33:e7:46:da:3f:ca:49:9f:35:47:df:9f:3a:61:1a:
15:f7:a6:9d:43:a9:37:89:2c:2e:15:78:fb:9c:4f:91:82:d0:
03:58:3f:3e:39:3a:9d:f4:ff:9c:73:46:61:80:e1:36:f0:d9:
c1:6d:63:7c:7a:c5:a6:73:3d:0a:dc:33:56:f8:b1:b3:23:b3:
9b:f4:cc:5c:3d:7e:f4:67:6c:e1:76:4d:53:6d:ea:f3:f1:09:
a2:72:1f:70:64:a5:03:2b:3e:11:e1:25:5e:dc:23:de:d5:91:
1c:0d:8b:14:26:87:37:6c:6f:da:37:e5:18:4b:1f:a7:2e:58:
5b:1c:25:3a:d1:87:5f:e1:7a:73:a6:96:a0:de:78:d1:38:2b:
d1:d7:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:23:48 2025 by rpki-client