Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D2DC34D7CC11EFB26FAE88762E951A.roa
File: 40D2DC34D7CC11EFB26FAE88762E951A.roa (raw, json)
Hash identifier: Gd3XO9H+OXE7obEOZ35iLl+rctBKWSjqZm13kZg2txQ=
Subject key identifier: B3:1F:5F:60:CE:1F:9D:BA:FB:D2:D9:8F:BC:09:9A:23:09:F3:BA:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D2DC34D7CC11EFB26FAE88762E951A.roa
Signing time: Tue 21 Jan 2025 07:49:33 +0000
ROA not before: Tue 21 Jan 2025 07:49:30 +0000
ROA not after: Sat 01 Feb 2025 07:49:30 +0000
asID: 44559
IP address blocks: 156.246.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68824 (0x10cd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:49:30 2025 GMT
Not After : Feb 1 07:49:30 2025 GMT
Subject: CN=678f518d-0c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:a9:4d:3c:33:00:d5:11:56:b1:5d:a0:05:
19:09:2c:94:3b:4d:bd:3d:13:4b:21:09:e8:d1:ab:
8f:f1:56:67:7e:51:5c:57:87:42:8b:94:d2:98:b0:
0e:3f:f7:97:b4:49:00:53:51:dc:71:d3:34:c0:04:
ce:84:23:7c:e8:00:6c:88:0c:e3:3f:2d:ec:e3:33:
fe:22:26:d1:64:e8:7a:4f:cb:40:25:c7:ce:5b:4c:
ff:2d:bd:c9:7b:af:97:9a:b9:e7:bb:e2:73:6e:ff:
5e:52:1f:3e:1e:55:5f:88:81:19:5e:47:8d:82:98:
17:72:87:2a:c3:22:c7:f0:27:2c:d5:06:0b:87:52:
e3:3d:21:a5:73:6e:42:b6:d7:a0:e9:67:ed:1d:94:
02:d4:3c:25:1f:e5:06:8b:e7:ed:7c:b4:59:03:77:
63:52:8f:eb:67:61:88:45:ac:05:68:45:94:32:f9:
d6:92:f8:bb:be:5c:ef:ec:19:30:d6:82:cf:00:ee:
15:f1:39:29:98:8d:99:57:41:bb:22:e4:c5:7f:6c:
81:b1:32:9b:a6:51:52:dd:0e:5d:45:e4:16:9f:51:
22:ae:b7:d0:28:bb:ca:25:b7:c7:2b:3f:43:c0:28:
c9:3e:ab:5d:98:bf:49:86:bd:20:f2:2d:e5:b9:a5:
7b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1F:5F:60:CE:1F:9D:BA:FB:D2:D9:8F:BC:09:9A:23:09:F3:BA:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D2DC34D7CC11EFB26FAE88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.187.0/24
Signature Algorithm: sha256WithRSAEncryption
86:62:2b:ea:b3:fa:88:9c:7f:3f:75:03:36:74:85:83:0e:3a:
1e:64:7b:6c:f1:b0:91:70:93:99:7f:5f:df:3d:da:ed:43:a6:
92:e4:48:68:3e:4b:7f:60:f0:05:a6:2c:ba:cc:90:99:e4:fb:
99:09:71:4c:b9:7d:96:5b:a5:2e:c2:82:dd:97:b4:90:ad:78:
a4:8e:6e:12:35:5e:3a:8a:ad:5d:51:58:03:b5:bd:39:df:77:
cd:58:06:7b:cf:20:93:32:a0:93:26:69:2b:4e:96:dd:fc:d3:
a9:04:5b:2e:9a:69:8d:fe:34:14:e1:54:5d:a4:1f:5e:76:21:
d2:96:7b:fb:af:f9:f1:90:6f:87:9e:a5:b3:2a:ba:4a:73:70:
09:cb:95:ad:02:25:e5:42:e1:fc:7b:85:76:ff:0c:b5:64:82:
57:f3:89:4c:d4:69:a4:2f:87:f3:b6:5d:5d:92:b8:30:e9:66:
db:04:34:9b:70:8c:1f:a7:46:78:31:f4:c6:0f:ee:82:5a:44:
f7:df:ac:00:a9:89:c7:a7:3b:57:3e:23:64:f4:28:f9:8d:d1:
82:75:5f:c8:00:d7:ff:17:11:6f:3e:65:ec:f7:fa:c3:2c:64:
ec:22:58:a1:30:9d:ee:36:a9:be:5f:2e:29:7d:8b:f8:af:fc:
e8:8d:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:19:55 2025 by rpki-client