Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA194A2D7FC11EFB6360F41762E951A.roa
File: 2FA194A2D7FC11EFB6360F41762E951A.roa (raw, json)
Hash identifier: jXwFnV/wsb61Ffa2fNd8dFZWCVjNlH2gAzhu1u+myHQ=
Subject key identifier: CE:80:89:DE:D6:45:72:5A:BE:B5:11:6D:8E:DD:BF:C0:E6:26:10:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA194A2D7FC11EFB6360F41762E951A.roa
Signing time: Tue 21 Jan 2025 13:32:40 +0000
ROA not before: Tue 21 Jan 2025 13:32:36 +0000
ROA not after: Sat 01 Feb 2025 13:32:36 +0000
asID: 48031
IP address blocks: 156.246.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69084 (0x10ddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:32:36 2025 GMT
Not After : Feb 1 13:32:36 2025 GMT
Subject: CN=678fa1f8-8931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:b5:56:0c:5d:3b:4d:ef:e9:12:85:d3:ee:
bf:fe:09:76:fd:82:65:b7:bd:19:cb:2a:63:40:07:
f6:c6:fa:a8:4d:97:37:41:6e:70:2f:3e:fd:eb:b5:
78:55:52:3c:bd:c3:77:8e:e6:1f:c7:bd:04:2f:59:
0a:f1:ac:7f:c1:25:7b:fc:4e:17:18:9a:65:f8:77:
2e:e9:30:c1:44:c8:2d:df:fe:13:71:2a:47:a1:eb:
39:c1:d9:58:2f:23:ba:dd:59:3e:0e:95:0b:77:d4:
fd:1d:c5:50:fb:77:d0:98:4c:32:52:a0:f5:f9:71:
1d:e6:79:05:22:bf:26:18:98:f7:4b:61:b7:02:89:
b6:d7:17:a5:bc:2b:25:33:27:48:06:c7:c7:74:58:
89:8f:7a:6e:b9:4e:d3:79:ad:a3:30:bd:db:81:cc:
9c:5c:6e:46:ab:14:b0:96:9b:32:17:39:b7:4a:32:
0e:a1:93:00:e8:35:c2:e6:31:50:70:1b:13:67:e8:
7a:30:89:d5:e7:10:a4:23:9f:c8:e9:88:22:bb:f7:
f2:4d:a8:dc:b2:d4:b9:47:ad:02:22:8f:4c:e5:34:
1d:a3:68:53:d4:21:d0:b5:e1:1a:81:9f:44:e7:e2:
3a:44:9e:62:2f:16:61:91:cf:03:c0:ec:c9:d0:ac:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:80:89:DE:D6:45:72:5A:BE:B5:11:6D:8E:DD:BF:C0:E6:26:10:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA194A2D7FC11EFB6360F41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.143.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ad:8a:c4:a0:31:08:4f:d0:77:19:2d:af:16:ef:6b:ca:87:
48:12:36:97:39:94:e0:65:13:38:ec:86:f3:f3:23:c8:51:aa:
9e:bd:f1:5e:14:c3:23:08:a7:a1:4c:2d:ed:82:10:8f:51:2f:
19:75:2a:d7:9c:7f:06:1e:9d:a4:97:b9:5c:07:b5:21:d9:38:
70:c2:a3:05:23:e2:5e:7c:de:41:51:06:55:85:26:cf:5c:96:
d5:5e:e7:2a:a3:46:d8:61:83:c7:fb:21:4c:42:13:b9:a0:53:
90:59:b5:fa:93:8b:b6:a4:59:2e:2e:04:ef:fd:c4:cb:80:45:
33:e5:48:f2:ce:2e:bf:06:6e:cc:52:57:77:8d:72:8c:5c:7a:
25:63:88:2f:44:9d:ca:e1:da:7b:79:2b:0f:f7:13:96:29:2d:
bc:0a:59:7b:d9:3e:4b:c3:52:a0:29:d2:7d:23:db:ba:38:99:
b8:86:eb:c1:b7:fc:26:21:ed:75:90:13:47:a1:ee:fd:c3:a3:
a3:45:16:d3:95:3f:11:59:23:a3:c7:62:38:2a:c7:c2:fd:e0:
b8:5e:ab:59:16:1d:33:40:73:4d:66:7f:b0:9b:5c:6c:16:f9:
df:0a:5d:2f:c7:fb:65:7e:0c:eb:04:bd:2a:85:7d:cf:c9:52:
d3:e6:4f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:25:01 2025 by rpki-client