Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FD3AC92DA8311EF9D6F2BAB762E951A.roa
File: 2FD3AC92DA8311EF9D6F2BAB762E951A.roa (raw, json)
Hash identifier: 0IsiSA2oI5IEOBLryULDfctL7erEDVPc9kg2gSx16Os=
Subject key identifier: 63:00:EC:C9:33:BB:76:08:A0:2F:32:25:88:E5:6A:4D:23:35:4D:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01101E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FD3AC92DA8311EF9D6F2BAB762E951A.roa
Signing time: Fri 24 Jan 2025 18:44:05 +0000
ROA not before: Fri 24 Jan 2025 18:44:02 +0000
ROA not after: Tue 25 Feb 2025 18:44:02 +0000
asID: 44559
IP address blocks: 156.246.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69662 (0x1101e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:44:02 2025 GMT
Not After : Feb 25 18:44:02 2025 GMT
Subject: CN=6793df75-0675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:94:34:ea:86:3b:83:90:ae:74:1a:f4:05:
3f:42:13:3a:fc:ec:b0:33:9f:7b:e3:23:90:a8:dd:
e6:21:31:af:9c:3e:89:c8:01:73:29:cf:f3:39:3f:
3e:b9:90:7a:c1:08:e3:50:d2:9f:d9:9b:ff:9b:a9:
6f:3e:36:d0:0e:69:4f:1e:bb:41:87:52:42:45:08:
e4:8f:76:1f:30:e2:db:b7:17:71:fc:82:39:4c:f3:
27:6e:2e:64:a3:68:5c:1d:14:05:c3:0c:5e:5c:24:
e8:2e:35:e6:f8:3c:af:0b:3b:85:da:56:ab:99:e6:
d6:f4:7d:f7:54:f7:37:8c:be:3a:9d:ec:0a:7c:f3:
f7:95:ae:d7:a8:ad:70:e0:ec:1c:d0:e1:5c:e2:d2:
8a:ef:6a:aa:4a:aa:5a:d3:1a:fa:62:2f:4d:34:f5:
a4:51:2d:ae:47:01:92:91:b9:a5:bf:0d:d9:a8:2e:
9f:71:1a:19:fa:40:a1:1b:af:e0:bd:0c:a2:4d:d5:
93:a2:14:65:50:4b:a8:fa:4a:6d:a6:82:33:a3:0a:
73:ab:c6:d4:c3:c4:cc:6c:ab:5e:f9:02:fe:18:84:
a4:4d:f8:0b:bd:4a:b3:79:54:0c:07:11:34:21:10:
61:ea:82:72:8a:af:bd:22:52:ae:46:1f:48:a3:55:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:00:EC:C9:33:BB:76:08:A0:2F:32:25:88:E5:6A:4D:23:35:4D:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FD3AC92DA8311EF9D6F2BAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.177.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c0:4e:0c:6a:59:25:be:69:7b:d3:8e:ed:0a:f0:9f:75:bf:
4a:c7:7e:dc:84:08:93:da:30:55:72:9a:c0:31:00:0f:39:a9:
c1:6a:3b:f3:ec:ad:26:ec:d6:40:f6:0e:df:ed:85:e9:41:19:
36:fa:a8:27:2f:5a:37:cc:05:8a:d5:f3:30:c8:12:b3:bc:2a:
51:ef:51:16:89:58:1d:71:c1:3f:de:5b:96:e6:00:18:cc:cf:
01:a0:4e:d5:c6:61:2a:51:a9:70:dd:1f:40:49:be:d0:19:9b:
43:c5:08:c8:fc:14:ed:f6:c4:1c:50:54:79:53:9b:8b:cc:aa:
db:a1:1a:54:0c:c8:f9:43:15:7c:f0:1f:8a:a3:4a:5d:a4:38:
df:84:ca:80:36:3a:80:9b:6c:f6:c4:4c:e1:3c:d5:ef:15:03:
4b:8b:70:2d:bf:f6:29:7e:bb:78:90:ab:47:4e:b3:ed:8b:38:
69:5e:91:29:ae:52:c3:89:ee:21:fb:85:34:3c:73:b5:d7:51:
90:26:af:5e:4f:3b:cc:87:5e:48:08:e5:3a:07:bb:ea:3e:65:
bd:61:ec:45:be:e1:87:75:4d:23:66:fc:1d:2e:73:f1:1a:d2:
51:6e:da:58:71:69:20:8a:52:1f:cd:82:ce:9e:14:24:30:a2:
34:62:b9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:58:28 2025 by rpki-client