Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/159CAA5AD7EE11EF9C6E1C64762E951A.roa
File: 159CAA5AD7EE11EF9C6E1C64762E951A.roa (raw, json)
Hash identifier: 5lqcDcHAW1FEcbAvCKT2ufrq1B2TO1W8Tsd3+KbNX8Y=
Subject key identifier: 2D:DE:4E:B3:7B:F9:BC:BD:DE:40:7E:F5:12:2C:46:AE:75:7F:47:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/159CAA5AD7EE11EF9C6E1C64762E951A.roa
Signing time: Tue 21 Jan 2025 11:51:44 +0000
ROA not before: Tue 21 Jan 2025 11:51:40 +0000
ROA not after: Sat 01 Feb 2025 11:51:40 +0000
asID: 44559
IP address blocks: 156.246.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68992 (0x10d80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 11:51:40 2025 GMT
Not After : Feb 1 11:51:40 2025 GMT
Subject: CN=678f8a50-6edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:e2:82:ab:56:02:28:b2:0a:d1:7e:00:fb:
73:ff:b9:d9:b0:82:0f:da:99:58:87:9b:f8:d4:a4:
e0:ec:ba:50:f0:67:3f:45:2d:5f:8e:9e:be:18:9a:
64:9a:31:93:6a:5a:68:ca:39:1d:d0:09:bf:e6:88:
23:dc:4e:c5:a6:5d:09:c4:c7:9f:41:93:dc:77:22:
8e:45:d3:94:92:60:09:24:47:f3:d3:90:6c:51:0d:
b4:6d:ae:06:81:c6:e4:7f:53:2c:2b:e7:b5:19:95:
78:3d:29:13:de:f3:ea:6f:51:ac:97:52:5b:24:f0:
50:fb:5e:76:0f:2b:c6:9e:09:75:37:e1:c6:ec:f3:
06:fb:5c:a5:70:e5:f0:19:20:22:7c:e1:62:2d:31:
df:ed:8c:36:c7:81:05:62:fd:21:82:89:a3:09:43:
51:4d:13:a8:c4:e3:f0:36:9e:4b:67:17:5b:b0:bc:
9e:23:8c:aa:bc:86:50:63:08:12:de:f5:76:e4:1f:
a1:12:f3:02:b1:7f:2d:ca:18:f6:40:fc:be:92:5e:
36:3c:0b:53:7f:7e:78:22:eb:37:20:b0:59:5b:8d:
85:24:26:0f:4d:d5:5a:f3:db:33:f6:77:90:de:4d:
52:87:68:e7:37:c3:e6:67:a8:13:73:85:48:96:e1:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DE:4E:B3:7B:F9:BC:BD:DE:40:7E:F5:12:2C:46:AE:75:7F:47:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/159CAA5AD7EE11EF9C6E1C64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.225.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c0:f0:a6:40:4e:c1:87:4b:18:fa:d8:dc:c3:49:39:56:84:
25:57:16:00:3a:91:ca:78:d6:89:0e:d7:8c:a3:e3:a7:a0:8a:
fe:36:e4:28:59:c7:59:fd:5d:1c:4a:16:d7:81:09:55:59:ba:
25:d7:2d:e3:07:2d:11:c0:71:f4:44:ff:78:7f:ab:92:2d:bb:
1a:c0:c5:21:7d:3d:39:49:8b:3a:80:b3:5a:ef:f3:75:93:3e:
40:7d:09:30:2b:ac:a8:60:cb:c9:2a:d3:1c:d5:60:9d:bb:6c:
28:c0:34:9c:c7:8d:1d:b2:46:b0:e2:8f:c1:ea:0a:22:7e:98:
22:ed:4c:27:59:3f:2f:fd:22:7b:fb:f3:5c:d3:25:23:51:ce:
03:2f:02:a3:94:8c:b4:e1:2f:f2:8c:19:70:b9:35:37:ec:42:
b1:f3:31:9d:6a:cd:23:57:d6:ab:d3:75:ea:5d:fe:9f:85:2f:
2f:49:2f:7b:13:93:6a:f9:ab:60:7a:64:d1:2a:f2:76:f0:75:
0b:af:c8:ed:54:1d:47:08:e8:ad:70:04:1c:aa:1d:d2:cf:0c:
ae:12:bc:a2:95:6d:cb:c4:0c:c7:f6:55:c9:3b:53:ab:e5:f2:
7e:78:ab:0d:d4:72:64:26:1b:24:c7:5f:35:8e:c0:81:e0:69:
b6:c6:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:03 2025 by rpki-client