Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27993DF6D7E711EF8FFFD4B5762E951A.roa
File: 27993DF6D7E711EF8FFFD4B5762E951A.roa (raw, json)
Hash identifier: 4BnX53ZH4UTzj1Yr/zyY9nhKU81/ma+8PsiPiFjTpnU=
Subject key identifier: 89:5E:7D:01:BC:F6:25:A7:F5:65:80:F6:30:2D:74:CA:EE:C6:CB:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27993DF6D7E711EF8FFFD4B5762E951A.roa
Signing time: Tue 21 Jan 2025 11:02:07 +0000
ROA not before: Tue 21 Jan 2025 11:02:03 +0000
ROA not after: Sat 01 Feb 2025 11:02:03 +0000
asID: 44559
IP address blocks: 156.246.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68946 (0x10d52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 11:02:03 2025 GMT
Not After : Feb 1 11:02:03 2025 GMT
Subject: CN=678f7eaf-6a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:03:8d:92:9a:4f:98:1a:42:09:20:90:6c:
57:5f:b2:e4:b1:76:d7:66:eb:9f:55:5a:8c:2f:f1:
53:af:47:39:44:a9:a3:a5:9f:80:ef:ca:0c:af:5d:
14:fb:15:3e:6a:33:35:04:78:09:e8:3d:1c:d3:dd:
85:39:a1:2d:0f:d4:dd:07:26:a6:48:77:38:2b:98:
66:a8:6a:68:7c:93:73:fb:bc:61:b7:5d:5b:90:46:
87:dd:c4:86:62:03:18:8e:bd:47:4e:c5:54:ca:f6:
c9:0a:8f:7b:73:37:8b:b6:0a:ec:8e:e3:7b:54:48:
02:33:a6:bd:ec:33:be:1f:2b:98:af:6c:77:2d:9d:
bc:e4:24:58:13:73:b5:0e:5d:7e:c0:c9:cb:60:4e:
30:99:d0:cd:b3:d8:84:ac:64:1e:7b:86:6a:16:f3:
ba:93:76:50:b6:6e:28:27:bf:3d:43:9f:90:8c:f6:
43:a8:72:19:a7:ed:3d:75:e7:f5:02:b8:31:f0:52:
0a:a9:6d:91:89:88:d1:a4:07:7d:1e:7f:cb:f2:9b:
9b:de:4b:d6:68:e1:c6:ab:4e:36:83:af:2a:fc:3b:
d0:50:56:61:42:32:39:d7:41:10:be:d3:9b:c6:8e:
bc:ca:6f:ec:33:7d:96:d1:27:1e:4e:54:5a:21:c0:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5E:7D:01:BC:F6:25:A7:F5:65:80:F6:30:2D:74:CA:EE:C6:CB:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27993DF6D7E711EF8FFFD4B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.202.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:90:76:4f:1f:b8:50:e2:c9:8c:47:a8:87:c7:3e:d4:2f:ca:
e6:d8:ad:89:b5:9b:4b:45:dd:1b:73:02:0d:e7:40:82:6c:72:
be:0a:69:1c:10:f8:74:12:32:d7:ea:c4:d8:67:7f:73:9e:e5:
76:f2:02:de:db:29:ea:87:a9:8e:c1:8c:44:c7:0e:3a:8e:8e:
87:df:1c:d4:f7:cd:d0:b6:a6:59:53:e8:96:0c:25:d3:bb:db:
cc:27:1d:36:bf:c1:f1:22:1b:1d:85:f1:f7:64:8d:b6:06:35:
af:18:96:fa:7d:3e:eb:0b:aa:3a:95:12:8e:c2:1c:2f:7e:67:
2a:67:fa:fa:a6:82:cb:40:b3:da:82:2c:49:e8:14:01:96:b9:
5a:92:f0:35:60:e3:71:b0:f0:27:67:f5:18:0d:d5:69:56:dc:
21:f8:9e:b6:98:9c:47:fb:44:23:88:d4:4a:0a:e0:50:2f:8c:
eb:b0:b0:3c:d4:28:a0:52:6f:2c:75:b4:1d:a6:88:82:92:6e:
42:9d:c6:68:65:84:f0:d7:42:32:9f:14:3c:3b:fa:ac:17:54:
d9:64:12:1b:7a:a5:d5:8f:d2:83:28:74:1e:f7:dd:e2:1e:f8:
db:6e:5f:a5:64:d0:19:54:82:cd:97:27:dd:03:5f:2a:ba:38:
68:c2:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:38 2025 by rpki-client