Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CF88BACD7EC11EFACA7F458762E951A.roa
File: 3CF88BACD7EC11EFACA7F458762E951A.roa (raw, json)
Hash identifier: v4doRJU5MWCmcDpOVhdLhU99l6tuCnkowbO0qBiGRA4=
Subject key identifier: CC:D8:18:9C:C3:3A:9D:6A:06:05:75:D5:CF:E1:56:23:2D:B3:5F:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CF88BACD7EC11EFACA7F458762E951A.roa
Signing time: Tue 21 Jan 2025 11:38:31 +0000
ROA not before: Tue 21 Jan 2025 11:38:25 +0000
ROA not after: Sat 01 Feb 2025 11:38:25 +0000
asID: 44559
IP address blocks: 156.246.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68980 (0x10d74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 11:38:25 2025 GMT
Not After : Feb 1 11:38:25 2025 GMT
Subject: CN=678f8737-4db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:e7:28:2b:9a:8f:0c:14:c4:51:19:82:9e:
01:71:b6:26:cb:67:8d:f9:fa:0b:e2:69:76:f8:a7:
de:53:36:65:1e:a0:37:f3:8e:46:0b:68:26:fb:85:
3a:37:32:5c:3a:59:58:17:5b:d9:02:a1:11:95:45:
3c:4b:49:e2:9a:88:08:56:6b:12:e1:b4:98:80:a5:
b8:b0:9c:b0:f6:43:b2:9b:40:59:34:e6:c3:df:fb:
ba:26:10:29:09:15:42:43:15:0e:56:2a:56:f0:16:
ce:fa:4e:14:af:8d:b8:a0:33:22:20:b1:df:7c:d4:
dd:43:fc:9c:bb:88:2a:61:1a:ad:4f:ac:65:e9:e0:
e7:5a:4f:35:3c:e7:92:b3:18:04:10:20:94:50:d9:
d7:99:09:e3:fc:91:c9:77:58:57:a5:89:11:50:16:
9d:12:fe:98:54:4b:08:94:90:cc:87:48:ec:fe:ae:
af:64:62:16:42:46:5d:6d:c7:e0:5f:b5:76:c8:5a:
1c:bd:58:fb:6e:a1:c5:4d:17:2b:5d:4e:a5:ee:b1:
c6:12:18:3c:c5:47:11:ce:7d:2b:32:9e:98:76:c2:
41:88:ef:99:c1:7c:fd:2d:fd:6d:f2:2f:26:1b:88:
49:64:d0:d8:b7:5c:5a:8a:ee:dc:91:5b:3a:5a:11:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D8:18:9C:C3:3A:9D:6A:06:05:75:D5:CF:E1:56:23:2D:B3:5F:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CF88BACD7EC11EFACA7F458762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.219.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8b:19:ac:7a:42:12:46:91:5c:49:df:28:cc:dc:c2:63:ab:
83:0d:a5:11:c5:8c:33:8d:27:ec:63:83:e9:fb:d7:43:15:89:
40:b1:e2:4b:16:f4:1c:28:f1:f1:aa:75:9a:29:2d:c8:00:5a:
e5:9c:76:62:45:56:55:22:bd:6c:f1:40:25:3a:5d:3b:41:71:
69:e0:de:80:08:0b:03:0c:d7:54:3d:c1:2a:c4:81:10:42:e2:
fa:f0:59:2b:4c:20:e9:b3:2f:72:cb:4f:83:35:a3:31:b8:ac:
ca:1c:43:da:f5:0b:df:54:99:01:da:b6:4d:c4:8e:fc:e1:54:
7f:2e:a0:cf:63:3b:92:37:65:ea:58:81:bc:8b:8b:f9:fd:24:
29:77:83:32:27:bf:30:0d:c5:bd:ca:4a:4d:e0:48:da:3e:6d:
01:b2:72:33:36:0e:61:5c:f2:15:b8:2d:a3:c2:c1:e9:93:0f:
d7:72:d5:6a:89:77:3e:47:83:fa:3f:6d:cd:e0:72:1d:a2:0b:
8a:27:1e:71:e5:4d:30:cc:c3:d5:ad:8c:95:12:46:50:43:5f:
e4:87:eb:54:ab:49:1e:df:63:67:f9:d9:a4:36:31:c1:5c:91:
36:be:5b:bc:04:96:d7:76:b1:74:10:ea:42:fe:54:f5:6d:d5:
7d:60:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:04 2025 by rpki-client