Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BB5E998DAF911EF9CFE5251762E951A.roa
File: 1BB5E998DAF911EF9CFE5251762E951A.roa (raw, json)
Hash identifier: mZu/NzUjFdlOWnHvjCcqglxqb0O5oi09wdNcabj4bRU=
Subject key identifier: C4:CB:08:F3:2F:04:02:97:09:E5:26:25:A1:12:A1:38:B0:F9:FB:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01118F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BB5E998DAF911EF9CFE5251762E951A.roa
Signing time: Sat 25 Jan 2025 08:48:12 +0000
ROA not before: Sat 25 Jan 2025 08:48:08 +0000
ROA not after: Sun 23 Feb 2025 08:48:08 +0000
asID: 44559
IP address blocks: 156.246.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70031 (0x1118f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:48:08 2025 GMT
Not After : Feb 23 08:48:08 2025 GMT
Subject: CN=6794a54c-25da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:49:53:df:88:5a:89:37:84:bf:87:ed:e0:
f7:ea:be:60:de:9e:4f:41:c2:75:f2:f9:0e:ef:3b:
88:4b:d9:98:ef:41:74:fe:f8:3f:83:d9:c9:3d:0d:
bb:03:5f:1e:03:66:3a:c4:0f:f4:43:49:91:f3:eb:
7d:81:4b:64:fd:19:48:c0:3c:a3:f3:7b:55:a5:0d:
4b:d7:fb:2e:73:ce:7d:f5:59:a2:48:2f:cd:1a:35:
79:14:88:f4:c0:57:64:6a:79:0c:36:99:ef:d3:84:
68:99:54:77:21:26:14:93:79:f9:f3:3f:ba:e6:35:
55:28:46:48:38:b7:d4:4d:5a:b0:68:8f:90:6d:89:
30:df:9b:ca:e9:74:02:a1:f5:0d:85:fc:82:31:9b:
f8:ec:97:77:17:77:7b:ab:11:99:8d:d6:53:4d:59:
60:0e:72:ea:84:1d:3c:48:1b:59:3e:d1:7c:10:9e:
7b:dd:a1:19:68:f4:e4:c8:2c:01:fa:0e:0b:22:b3:
58:ee:69:1f:6e:37:4c:2a:a9:c9:5d:78:c5:d6:5e:
81:01:0a:e9:91:e9:63:84:87:15:b0:c4:32:2c:37:
eb:cf:68:ce:2c:a0:ac:ae:89:84:57:b6:91:47:74:
75:cf:5c:4e:e6:d6:bc:c1:df:87:26:c3:7e:c5:cc:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CB:08:F3:2F:04:02:97:09:E5:26:25:A1:12:A1:38:B0:F9:FB:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BB5E998DAF911EF9CFE5251762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.250.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a2:8a:0d:27:56:83:a1:7f:23:eb:6e:ca:f6:c6:d2:91:93:
7a:f8:1e:42:c3:e8:23:e6:2a:cc:89:d4:a3:8b:b7:81:bd:31:
02:96:e0:5f:9a:7b:9b:cf:8a:a1:3d:db:6e:73:2d:55:69:f0:
df:de:9e:39:69:08:08:41:1f:c5:bc:86:8f:5a:3a:6e:42:77:
2f:ba:da:02:ec:27:f4:31:e4:f6:32:0b:93:db:53:79:41:bd:
7c:83:53:35:3b:4d:f9:5e:6e:bd:c4:c0:40:73:09:b3:2e:c4:
f6:ae:a5:a1:3d:84:4f:2d:1c:4a:c5:c2:eb:99:68:1a:07:88:
d4:02:99:61:6f:34:4c:2e:e4:a9:16:ee:8b:53:a6:ee:19:f1:
65:c1:ef:1f:f6:87:69:00:b9:6b:6a:e3:29:2b:5a:78:49:76:
25:68:90:ab:7c:9d:31:a5:97:06:d4:28:a2:85:d1:74:97:2c:
3e:61:2b:cb:48:20:67:2c:a0:0b:fb:ad:3e:6c:76:86:40:2a:
11:3a:0e:e2:72:24:ec:3c:83:08:b9:72:b6:54:9f:35:9f:4f:
84:af:64:17:81:00:16:0d:5d:a3:af:57:9b:19:87:f0:00:70:
97:5e:5b:a2:09:fa:d3:ec:0c:a6:28:fa:c9:fa:98:bd:0b:df:
b1:f1:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:25 2025 by rpki-client