Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28BF1B18D80C11EF8C0FF3A6762E951A.roa
File: 28BF1B18D80C11EF8C0FF3A6762E951A.roa (raw, json)
Hash identifier: 1MJcBdpf3Y3+8ouz8lUSnF41/bwGQDhWAygqdo8nico=
Subject key identifier: 05:39:54:86:C6:D5:38:65:BC:F3:63:90:C9:A1:A6:F9:71:A8:66:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28BF1B18D80C11EF8C0FF3A6762E951A.roa
Signing time: Tue 21 Jan 2025 15:27:01 +0000
ROA not before: Tue 21 Jan 2025 15:26:57 +0000
ROA not after: Sat 01 Feb 2025 15:26:57 +0000
asID: 202656
IP address blocks: 156.246.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69190 (0x10e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:26:57 2025 GMT
Not After : Feb 1 15:26:57 2025 GMT
Subject: CN=678fbcc5-81cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:7c:aa:d0:15:8b:1b:f7:bc:7b:da:36:57:
b4:5e:f2:4b:38:6f:75:c0:64:88:8a:d9:ed:7e:02:
e8:e1:bd:62:13:0f:be:3a:72:64:aa:91:a7:17:29:
57:37:8f:d6:ef:0d:de:e0:4a:6d:ac:0c:2d:12:3d:
e1:cf:87:a5:e3:5f:6f:99:a3:0a:7a:ef:72:f1:0b:
c7:91:89:00:bf:25:dc:8e:23:f6:5f:0d:4b:59:f6:
dc:7f:15:b7:18:e0:b5:38:d8:c9:09:af:3b:d9:b8:
8f:de:eb:84:2c:8d:f7:ba:f0:4d:36:51:af:e8:95:
e1:a5:c3:d9:75:8c:c2:97:0c:3f:4e:5e:0d:ff:b3:
77:36:82:99:15:9c:75:71:2b:9e:9b:5e:da:88:c2:
52:a5:18:e6:97:18:e0:42:cd:95:ac:17:82:e9:45:
58:1b:b7:38:9c:89:b1:11:af:b8:87:0f:42:8c:13:
46:1f:02:e9:4c:7d:3d:69:bd:27:e1:59:48:d5:f3:
68:37:76:f3:01:ce:c0:79:85:e3:74:8f:bb:15:0e:
6e:3e:24:0d:10:77:05:68:52:11:79:95:6f:b6:06:
c7:e3:15:ec:92:17:dd:aa:91:2c:dc:e3:ca:53:c8:
6a:4d:eb:80:c6:48:a3:99:39:36:6c:79:59:09:61:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:39:54:86:C6:D5:38:65:BC:F3:63:90:C9:A1:A6:F9:71:A8:66:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28BF1B18D80C11EF8C0FF3A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.164.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:06:5e:16:36:5e:d0:c7:98:e3:9c:d6:52:60:02:d3:0d:b4:
f5:eb:cc:a6:15:3d:cb:a8:aa:33:3b:17:e5:b6:d2:5a:dc:1f:
e2:3c:70:e8:e2:90:01:06:bd:bf:78:62:36:2f:53:84:be:58:
0f:ef:8e:4a:fb:23:53:0d:8e:3b:b0:4c:48:bf:db:67:b5:f8:
40:22:63:42:70:50:ac:6d:bd:64:42:da:ae:2a:ac:73:db:c7:
e8:86:f3:ab:9d:a7:d1:bb:ea:1d:45:e4:32:c0:cc:47:e3:e2:
b1:65:72:90:5e:01:e0:f7:4e:2a:62:c0:04:26:02:88:0f:d6:
bc:0b:5f:5f:94:39:41:39:13:5a:6d:0d:74:48:79:27:4c:78:
cf:f6:df:0a:66:db:7b:41:2d:9d:ed:12:71:2e:af:e5:ae:5a:
fa:36:b0:f3:b7:72:1c:4e:1a:dd:ea:fc:55:1d:a6:ea:87:15:
ca:45:7e:bc:21:66:72:e5:69:21:8b:20:4d:55:43:16:d7:73:
2f:46:14:37:dd:1a:65:0e:4a:f3:37:31:f7:31:4d:f1:ca:47:
c9:ab:83:54:22:98:e4:4a:5d:32:6e:f4:e7:10:23:69:5b:02:
20:7b:66:68:74:3d:b2:3c:6e:04:7e:ab:89:ae:05:2f:b8:95:
02:98:be:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:45:47 2025 by rpki-client