Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/382CDBBADA9D11EF99663858762E951A.roa
File: 382CDBBADA9D11EF99663858762E951A.roa (raw, json)
Hash identifier: myt92GXrDLmZe9aX07rHpPVRSJWuCvOJbkPp3X41RTY=
Subject key identifier: B1:AB:BD:9A:10:78:28:74:20:31:98:63:FA:4C:88:F3:B9:E8:0E:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/382CDBBADA9D11EF99663858762E951A.roa
Signing time: Fri 24 Jan 2025 21:50:26 +0000
ROA not before: Fri 24 Jan 2025 21:50:22 +0000
ROA not after: Tue 25 Feb 2025 21:50:22 +0000
asID: 44559
IP address blocks: 156.246.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69830 (0x110c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:50:22 2025 GMT
Not After : Feb 25 21:50:22 2025 GMT
Subject: CN=67940b22-b38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:d3:68:78:e5:be:db:ca:00:09:de:65:03:
f0:e5:a0:25:1c:92:74:37:ef:28:39:24:41:3e:f8:
a5:27:89:2c:7c:ef:38:9a:6b:6b:c5:50:b6:df:07:
cb:1e:da:6d:d0:96:2d:94:cc:47:3e:5b:f4:a9:c5:
ce:20:b3:ea:59:d9:e7:3f:da:59:ff:3e:42:41:eb:
a1:b8:bd:f9:ad:ea:3e:4d:f6:b0:f2:a2:9e:e7:b5:
23:0c:97:6d:b9:8f:66:22:79:f4:d7:a0:35:0a:fc:
7b:8a:ec:99:ca:f1:63:26:af:9f:24:fd:80:92:7c:
48:7a:d2:1b:02:15:45:a2:59:4d:6c:b5:26:4f:0f:
31:82:3f:b2:20:24:cd:68:4c:93:84:22:1d:e2:8f:
2f:05:d3:3c:cb:0d:99:bc:1d:94:a7:80:01:38:7e:
96:19:a0:8f:d0:b9:78:ef:90:2a:68:e3:13:bd:a1:
8a:d5:3d:ca:74:31:a6:f8:2e:0d:dc:e5:ad:56:38:
6e:0b:2b:ed:3d:a7:37:d9:84:ca:96:9e:5e:8e:40:
be:da:0b:10:27:6b:25:e0:45:2c:9c:31:c9:2f:1b:
2c:a9:fa:e5:72:47:5c:2c:6f:48:58:6d:03:0e:a6:
cc:10:10:8f:33:dd:5c:1a:97:60:84:ab:2a:7e:a5:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AB:BD:9A:10:78:28:74:20:31:98:63:FA:4C:88:F3:B9:E8:0E:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/382CDBBADA9D11EF99663858762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.225.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c6:8c:c9:54:be:39:b6:29:50:8e:77:06:c7:0b:46:07:46:
d4:82:cd:0f:94:68:67:0a:15:ff:f9:e2:28:cb:03:eb:12:70:
67:3f:91:15:9f:4c:fb:96:d1:fc:fc:19:1f:e4:4b:2f:e1:9d:
45:4d:c3:d4:54:53:94:09:2d:b7:22:d2:d7:98:36:a7:d0:dc:
0d:98:71:f2:65:9c:37:f2:32:3d:74:56:64:59:07:4f:f4:48:
cb:0c:2b:c1:88:4c:3d:1b:91:9e:19:98:39:13:4f:2d:33:88:
5e:79:27:31:07:b2:a5:c3:21:b1:7f:68:41:a7:79:03:f5:e0:
7b:aa:98:64:cc:12:89:31:cf:7d:63:bc:f9:78:fc:e4:7c:ab:
6a:23:c3:84:4b:c6:da:f0:1e:2b:7a:14:2d:54:ee:ce:9b:7a:
c1:3b:9f:fd:e5:0b:cb:d0:0d:e5:b3:0b:f0:fd:6e:4b:3c:da:
2f:75:e3:23:6f:b2:24:c7:f6:f6:6d:8d:b0:48:f8:a4:ca:ff:
ae:a1:96:da:87:16:39:9e:e7:43:0c:a3:6e:9f:cc:32:44:b7:
7e:e7:2f:f7:59:36:bc:2b:05:a4:66:6d:91:80:79:41:75:22:
3e:09:00:59:1f:49:26:1a:6d:ef:fc:20:87:76:ef:46:3f:f8:
f1:a4:38:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:41 2025 by rpki-client