Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C4FB5CAD7FA11EFBD178CB2762E951A.roa
File: 1C4FB5CAD7FA11EFBD178CB2762E951A.roa (raw, json)
Hash identifier: cK2+GVq6TBZkylGVvKFqwTWR9gYBvdAQFWCmgeBBlgY=
Subject key identifier: 5F:49:4D:4B:60:8D:AE:03:38:26:FE:2E:5D:49:6A:E4:F5:80:04:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DCE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C4FB5CAD7FA11EFBD178CB2762E951A.roa
Signing time: Tue 21 Jan 2025 13:17:49 +0000
ROA not before: Tue 21 Jan 2025 13:17:44 +0000
ROA not after: Sat 01 Feb 2025 13:17:44 +0000
asID: 48031
IP address blocks: 156.246.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69070 (0x10dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:17:44 2025 GMT
Not After : Feb 1 13:17:44 2025 GMT
Subject: CN=678f9e7d-4f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:5a:79:b3:ae:af:f2:f1:2e:5e:fe:9d:de:
11:62:30:f5:dd:70:8f:c2:d0:e4:5e:47:65:99:9e:
b0:4f:22:e4:a4:13:ac:7f:79:26:e0:e8:01:fa:e8:
ec:9a:14:52:e1:bd:44:56:da:ab:72:6c:e7:c2:b7:
11:70:e7:2a:49:a5:ba:d8:88:79:87:98:17:6c:44:
36:90:7f:db:1a:9a:49:3a:18:a9:78:fd:1a:44:22:
01:87:10:50:0c:26:ea:03:17:4b:88:33:2f:fd:88:
22:c6:96:10:98:b6:f3:d7:9a:03:d3:02:82:93:02:
b7:09:c0:8d:ba:47:5d:15:83:14:0f:d3:10:f6:50:
3c:ec:21:f7:84:be:a8:f4:90:12:7d:88:6d:d9:e3:
0c:53:99:a3:61:fb:aa:7e:ae:31:9d:32:2c:e8:f7:
d8:46:4a:48:63:f3:4d:8f:4a:5b:6f:58:1c:cd:bb:
2a:2c:73:7e:02:2e:05:3e:4c:6e:9b:f6:d7:73:69:
0d:7f:bd:51:d5:31:90:8a:a0:59:bf:0d:a4:74:1d:
00:23:53:d7:80:8e:5b:4c:0e:41:fc:31:5b:bf:c2:
d3:35:d6:1a:a1:d1:3d:e1:e4:64:8e:57:45:8a:1e:
ca:89:c6:d2:02:76:ce:3e:c5:6f:4b:52:b2:bc:f5:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:49:4D:4B:60:8D:AE:03:38:26:FE:2E:5D:49:6A:E4:F5:80:04:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C4FB5CAD7FA11EFBD178CB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a0:c7:52:54:f6:46:e0:1e:76:5d:99:28:13:b0:48:2a:11:
5f:d5:30:0c:c7:26:b5:1e:e6:6e:97:61:e9:4e:b7:e1:97:a0:
42:8e:18:8b:d4:2e:8d:c9:17:c3:13:60:8a:01:14:45:1d:01:
95:1d:d7:09:1b:6d:c1:7b:4f:8c:a1:75:1a:ee:29:b6:bf:f9:
d6:70:e8:c5:db:a3:2d:27:96:94:e0:15:72:9a:df:ee:a6:1b:
26:7c:da:e0:7a:ce:0e:92:36:bc:5f:74:6b:43:71:1f:5c:9f:
19:2a:63:f5:3c:04:df:b9:1c:29:88:36:5f:c2:ce:cb:79:ae:
3a:cd:03:45:32:fc:05:4d:68:d1:e0:fa:fc:3f:67:81:de:b4:
7b:1a:96:5f:2c:c1:0e:06:9a:b0:73:51:93:50:b8:ec:52:23:
36:27:3a:ab:ee:df:f2:9d:08:98:b7:d9:b4:26:cc:eb:fc:d0:
7b:56:36:dc:e3:61:17:03:78:03:f1:39:f8:d8:6e:d8:4e:c5:
fb:78:94:40:a8:11:ce:fb:5e:96:a0:f3:56:29:36:ef:be:c7:
61:f4:da:69:7b:a6:3d:a3:65:93:48:7c:89:32:c9:60:81:50:
3d:c2:0d:27:1b:3a:5b:af:c9:62:47:e6:ea:76:18:7f:41:36:
cd:f5:ab:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:55:21 2025 by rpki-client