Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18F181CED7CD11EFA834918D762E951A.roa
File: 18F181CED7CD11EFA834918D762E951A.roa (raw, json)
Hash identifier: 1bAvXQeLBbRvo6MITcKXQYuFaEu2FRj5RSSBRBZlrl4=
Subject key identifier: 35:0A:A4:04:B2:DB:E3:A0:D4:E3:BF:E9:25:43:FC:79:A3:7C:60:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18F181CED7CD11EFA834918D762E951A.roa
Signing time: Tue 21 Jan 2025 07:55:36 +0000
ROA not before: Tue 21 Jan 2025 07:55:32 +0000
ROA not after: Sat 01 Feb 2025 07:55:32 +0000
asID: 44559
IP address blocks: 156.246.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68830 (0x10cde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:55:32 2025 GMT
Not After : Feb 1 07:55:32 2025 GMT
Subject: CN=678f52f8-a5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:50:27:93:a6:a5:c7:d7:a8:e9:a3:bd:3c:
65:4f:8d:ac:7f:79:f6:ea:de:fa:03:20:bb:f1:97:
27:bb:31:2e:1f:e6:1b:67:46:4e:cd:50:9d:0e:ea:
e7:0e:b2:84:8d:6c:bc:af:34:a4:6f:51:91:33:87:
a5:6c:92:0e:15:31:64:06:6d:63:c9:ae:e8:5f:57:
41:38:47:33:ab:cf:6d:04:7f:55:5a:fc:4d:45:2b:
37:84:51:7b:5e:72:a0:6a:3e:da:c6:43:4d:43:65:
f2:cc:05:cc:22:f8:e0:bf:62:d3:2f:ac:56:6b:91:
8c:2b:4a:fa:5c:e7:d6:71:31:72:86:ab:22:13:bf:
d9:ae:ef:85:4d:2d:06:b9:d7:fa:80:01:90:7b:52:
c2:75:de:f4:ad:5e:16:23:6e:e5:56:28:25:44:4d:
20:70:5b:bb:6c:44:66:37:57:4a:d1:04:ee:db:75:
3e:ae:a9:6a:3a:5b:cd:76:40:6d:19:82:b3:0e:14:
6a:19:3c:d9:cc:68:80:37:f2:3e:19:0f:3a:ae:76:
c6:39:90:fd:25:dc:d6:96:cf:76:bc:7e:d2:af:ab:
d0:58:e7:0e:75:db:7e:7a:bc:27:08:a8:d2:a8:53:
79:a0:e9:46:ae:87:9c:1f:da:b1:65:d2:c8:af:8e:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:A4:04:B2:DB:E3:A0:D4:E3:BF:E9:25:43:FC:79:A3:7C:60:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18F181CED7CD11EFA834918D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.186.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:07:83:50:84:cb:73:09:ac:a0:54:8c:65:a0:7f:c7:4a:27:
4d:7c:95:c7:17:ab:d0:c8:c4:49:d8:7c:b2:5e:ee:f6:c3:f8:
44:bd:00:4e:55:9b:e2:04:04:d9:04:dd:ca:e6:78:4d:6e:b7:
b3:d6:62:77:34:f4:54:d2:bf:68:99:b8:3e:cd:23:b3:9d:f3:
51:7d:a1:21:84:cc:a0:4a:84:3e:00:8c:63:29:82:49:4a:f3:
86:ca:9a:b5:9a:6d:88:9f:60:88:ac:a7:71:88:54:ed:a7:21:
39:e1:61:3a:bc:73:72:a5:70:bb:45:04:aa:82:f2:15:cd:03:
2d:fc:76:be:dc:99:87:94:91:99:85:3b:23:fb:42:0c:4d:4e:
d4:8b:b3:1f:0f:d4:6e:12:7c:02:43:32:cc:6b:36:10:16:11:
8c:fa:3e:cf:49:16:80:25:cc:c7:49:70:4c:e7:c4:80:10:b6:
4d:1a:10:55:e5:4e:28:c8:4b:8a:a1:a2:f0:8f:4d:7f:0a:49:
c7:5c:6a:fe:6d:01:1a:b9:e9:21:6a:59:de:fe:67:5c:d6:88:
c1:f4:24:85:0b:a8:9c:ba:93:d3:7b:f4:0c:b2:a1:d2:0d:fc:
89:85:e1:c1:d5:49:a7:a2:fd:45:6d:4a:47:75:2f:60:f3:57:
92:bb:56:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:23:39 2025 by rpki-client