Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3548A9F8D7E411EFBCEA14A2762E951A.roa
File: 3548A9F8D7E411EFBCEA14A2762E951A.roa (raw, json)
Hash identifier: vJbgq/LmN5+VC5fo+gN2bs50MayUqMwNHUWoWFUDogo=
Subject key identifier: DB:6D:F7:D6:29:39:37:16:F9:21:8E:C6:06:B5:3E:24:B9:5C:49:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D3E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3548A9F8D7E411EFBCEA14A2762E951A.roa
Signing time: Tue 21 Jan 2025 10:41:02 +0000
ROA not before: Tue 21 Jan 2025 10:40:57 +0000
ROA not after: Sat 01 Feb 2025 10:40:57 +0000
asID: 44559
IP address blocks: 156.246.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68926 (0x10d3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 10:40:57 2025 GMT
Not After : Feb 1 10:40:57 2025 GMT
Subject: CN=678f79be-a511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:98:b4:44:c8:6e:d8:fc:03:d2:1b:53:c6:
2c:75:ce:17:42:8c:fb:f4:c0:c6:2b:2f:56:32:cb:
4b:63:5b:fb:04:66:86:c0:59:c0:bb:01:4d:7f:98:
df:8e:3b:42:b4:8b:9f:44:22:b7:9e:99:62:f9:0d:
e9:8c:0b:55:f6:cc:b2:89:65:24:1b:75:08:0d:57:
2c:65:0e:bd:27:d7:dc:f2:0c:ce:4a:ad:cd:2b:57:
2d:b9:c4:63:14:2a:04:ef:ff:20:fa:e9:7d:1e:06:
0f:f3:86:8a:eb:ea:fd:88:1f:b9:02:1b:1f:41:b7:
31:13:a1:8c:77:66:35:93:63:72:5e:dd:1e:d1:6c:
f3:f9:97:cd:00:d6:a3:41:5d:ec:11:0a:b1:a6:26:
a4:33:4b:6f:91:06:d9:a9:7f:53:2d:be:46:df:2a:
eb:da:06:a4:b2:62:01:85:42:c5:2a:23:5c:5f:73:
9a:ba:f9:65:97:3e:27:87:1e:f5:6a:c1:da:6f:54:
36:97:aa:58:a0:a5:f4:f2:71:44:0a:89:75:cd:9e:
a3:71:4c:e4:9e:a0:09:fd:33:74:17:d8:ca:de:bb:
a3:13:72:49:0e:0a:6d:2f:27:8b:ad:96:43:43:c1:
86:c1:ab:bb:74:78:20:1f:a4:7c:08:65:84:77:5f:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6D:F7:D6:29:39:37:16:F9:21:8E:C6:06:B5:3E:24:B9:5C:49:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3548A9F8D7E411EFBCEA14A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.192.0/24
Signature Algorithm: sha256WithRSAEncryption
21:71:cd:d5:a2:bd:bd:f9:de:56:d6:80:95:01:6d:f2:f1:5a:
0f:65:6b:8f:0e:fa:05:c0:02:a0:ea:cf:0f:e7:83:b9:47:b9:
ef:73:ec:cf:7a:5c:8c:22:e5:f2:db:c4:a3:52:51:96:9e:62:
43:65:80:28:f0:d8:1a:fc:c1:d6:cc:a8:41:0d:8b:c5:cb:97:
be:59:f2:0b:4f:7c:47:f9:31:6c:3e:40:a9:63:43:37:4f:48:
da:b5:9f:77:1b:18:38:a7:ab:f5:89:fe:76:98:b0:c9:fb:38:
21:da:21:14:e5:04:14:2c:ad:07:60:de:d9:8f:8b:62:d5:77:
28:c1:04:55:17:49:42:81:bf:05:d7:83:74:13:fd:4b:ff:02:
60:f8:b4:a6:78:5b:e7:bc:9a:34:4e:42:56:ad:1b:96:84:0b:
c9:84:3c:25:42:68:2b:f5:5e:7d:bf:96:48:bc:2e:1c:60:3b:
b1:53:d6:9d:10:b4:c3:e5:0b:d6:5b:66:dd:c4:37:17:e8:ba:
7b:cc:d7:c9:11:9a:e2:6d:bd:f8:a8:45:ff:52:4d:7d:5b:de:
35:b1:11:61:a6:65:c9:91:6f:17:6f:d8:1b:2a:32:05:fd:cf:
af:23:3f:6b:af:f4:80:95:bc:96:a1:ac:b7:7b:d4:8b:5f:e1:
e9:94:46:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:25:02 2025 by rpki-client