Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ACE5324D7F311EFBCD14E86762E951A.roa
File: 2ACE5324D7F311EFBCD14E86762E951A.roa (raw, json)
Hash identifier: LZWP+c+LH6RMkRW2qBiaICwEosSvHcbiO0Mhz7+0rOo=
Subject key identifier: 15:23:E6:7C:69:E1:D4:86:E5:56:AE:5B:8A:84:F5:51:97:02:96:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ACE5324D7F311EFBCD14E86762E951A.roa
Signing time: Tue 21 Jan 2025 12:28:07 +0000
ROA not before: Tue 21 Jan 2025 12:28:03 +0000
ROA not after: Sat 01 Feb 2025 12:28:03 +0000
asID: 44559
IP address blocks: 156.246.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69024 (0x10da0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:28:03 2025 GMT
Not After : Feb 1 12:28:03 2025 GMT
Subject: CN=678f92d7-a175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3e:18:4a:e3:95:b6:4a:07:0b:5f:c9:ad:e2:
3a:91:a3:52:17:67:31:bc:f7:ae:8f:48:c0:84:74:
26:a9:1c:d4:de:47:96:2e:a2:98:ee:ab:7e:b6:bc:
3f:a1:a4:8e:55:67:98:ec:1a:71:70:eb:a1:7c:33:
7e:f4:eb:1a:df:2b:c0:2c:50:1b:46:bc:84:12:be:
44:6e:42:9a:e2:61:70:f8:fa:b8:93:a3:69:04:ba:
c7:75:f3:7f:af:06:8f:45:28:a7:c0:f7:01:65:4a:
57:13:5d:b3:81:93:a2:9c:c3:f3:61:5e:41:9c:37:
05:1b:c6:57:7e:66:04:a9:5a:34:ea:fa:df:99:ff:
cb:87:8d:ed:fd:42:0a:c1:85:c6:1b:87:f3:30:a6:
f0:76:8a:11:04:18:61:c5:17:72:9d:2a:1e:45:b2:
d5:3e:a6:a5:bf:80:d9:7f:cb:1a:57:b2:fc:28:7c:
d2:a2:18:12:33:3c:e0:eb:24:0d:10:7c:b3:79:ae:
d8:84:0b:80:02:23:c4:90:45:10:54:08:7d:4c:44:
87:a0:6d:01:c9:86:20:3a:ff:7b:f7:df:84:26:b3:
ea:48:ae:aa:34:f9:5a:1b:37:59:10:4f:dd:d7:9e:
98:a9:b8:99:5b:f2:46:72:be:03:8e:1d:d9:aa:ff:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:23:E6:7C:69:E1:D4:86:E5:56:AE:5B:8A:84:F5:51:97:02:96:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ACE5324D7F311EFBCD14E86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.241.0/24
Signature Algorithm: sha256WithRSAEncryption
02:92:e4:d1:9c:8e:b9:1d:70:68:16:ec:90:90:e1:99:55:6b:
63:df:e6:95:cc:12:14:c8:5c:5c:d8:0a:37:2a:bf:b2:ca:95:
ea:a5:4d:56:05:7a:00:a1:11:35:38:2e:7f:03:d7:76:87:fd:
34:13:52:48:19:8f:6f:8a:ab:85:2d:b6:fe:7a:1c:aa:09:f0:
3b:98:1e:1e:4e:a0:8f:46:db:f0:42:ad:b3:0b:98:63:04:cb:
ca:e3:44:79:28:1c:3b:9d:7c:65:bc:66:ba:d4:bf:86:57:83:
1a:50:ac:77:67:41:44:a7:56:41:77:50:41:19:a9:f7:e0:79:
5f:0a:b9:a3:98:ff:53:ca:69:b6:dd:bc:e9:f9:09:92:d8:8f:
d8:56:39:b0:c7:2f:90:69:79:ac:ae:eb:b6:e7:d6:92:5a:22:
4b:82:75:17:94:f8:69:62:2e:f0:e2:cd:cd:1a:52:ce:2f:27:
6e:15:9f:49:dc:89:f3:92:64:53:fb:29:0e:3a:63:fe:88:10:
30:18:4b:20:90:02:b9:da:51:5f:7a:69:f2:db:60:63:d9:10:
c4:e5:d9:48:c0:de:24:4a:f9:2b:3d:b1:ca:a3:23:22:1a:2f:
21:ab:a4:ad:81:f4:26:eb:98:4a:2f:6f:b4:13:02:db:d4:f0:
52:17:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:02 2025 by rpki-client