Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4664B81ADA6611EFBC03CB6B762E951A.roa
File: 4664B81ADA6611EFBC03CB6B762E951A.roa (raw, json)
Hash identifier: YCWIS5np0pAsMYPYwtvFGU48lFSkjKMSwVyaf1cYRkc=
Subject key identifier: F3:96:F1:06:05:7C:AE:06:0F:77:A1:16:28:5B:02:BA:3E:51:34:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4664B81ADA6611EFBC03CB6B762E951A.roa
Signing time: Fri 24 Jan 2025 15:17:07 +0000
ROA not before: Fri 24 Jan 2025 15:17:04 +0000
ROA not after: Sat 01 Mar 2025 15:17:04 +0000
asID: 61112
IP address blocks: 156.243.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69510 (0x10f86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 15:17:04 2025 GMT
Not After : Mar 1 15:17:04 2025 GMT
Subject: CN=6793aef3-a54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:d5:12:c5:c1:e8:2e:01:4e:f4:36:31:31:
43:3c:52:f6:6d:b8:1d:95:2a:8f:70:05:b0:5d:9c:
9c:80:61:c9:a7:40:0c:40:fc:2c:5a:73:af:4a:f1:
bf:96:8a:59:a3:b8:cc:12:48:96:08:6c:4f:4b:b6:
ff:20:1b:4a:6b:49:c1:d0:2a:45:ee:33:f1:4e:64:
d2:4a:5f:ad:bc:1e:21:f5:cc:74:1d:58:d7:ef:05:
3a:42:51:2a:8f:18:fd:50:57:f2:3c:c0:9d:56:d7:
f8:f7:ae:82:77:43:b3:4c:a6:72:d1:30:16:db:00:
17:d1:9e:f5:56:a7:80:c5:a5:51:ee:75:04:60:52:
a7:c8:5b:d1:5f:e5:72:7a:31:7a:e3:67:a7:93:c8:
d2:39:c7:5c:e6:57:ed:c6:c0:0f:24:61:9f:61:60:
70:eb:a2:d3:93:64:9c:81:82:cb:50:d6:0d:35:9a:
19:5a:63:29:d3:a4:29:92:f6:98:4b:c2:79:10:f0:
64:ce:1a:04:3b:4a:b3:f8:d6:6f:96:f4:c8:53:ce:
48:ee:f8:bd:17:d1:ab:d3:31:be:ec:2a:29:01:51:
b4:cd:bc:08:12:a1:36:3b:ae:10:98:59:c9:3a:9d:
96:a7:c9:ec:2d:52:fc:ad:db:27:59:8c:5a:12:ae:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:F1:06:05:7C:AE:06:0F:77:A1:16:28:5B:02:BA:3E:51:34:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4664B81ADA6611EFBC03CB6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:2b:c7:7f:27:70:3a:e5:0f:47:8c:a7:2b:2a:a3:d8:8e:c3:
57:4d:22:14:6c:58:c4:e5:e6:ec:05:4d:d2:93:f8:f6:5a:d6:
d6:24:cf:a2:08:6a:e0:18:66:68:36:43:9b:ac:64:9d:a2:f7:
cd:66:df:b2:5d:eb:df:57:27:c7:1f:75:88:22:4c:53:81:1e:
44:b2:ac:b2:a3:15:74:68:14:50:ce:2c:9f:0a:ee:83:54:bf:
81:24:fe:7b:35:99:11:3e:36:0b:41:20:e7:de:f4:ac:96:71:
de:ae:17:09:b2:60:2c:f3:87:2a:ef:62:93:49:bd:b6:e3:0c:
f2:ce:3d:53:34:32:ea:22:dc:f7:17:e0:b4:db:06:ad:45:24:
63:9e:c0:af:76:69:83:ff:e6:a0:3b:74:81:f0:49:58:2a:aa:
e8:11:8f:0f:9a:00:9f:37:1b:66:a6:9e:94:a2:2b:c3:e8:01:
be:e1:7e:6f:e1:b9:94:29:48:e7:90:ed:dd:12:f1:c4:36:8a:
e7:ce:80:49:1d:69:e0:42:bb:4f:31:e9:69:83:45:44:70:fa:
36:98:10:ca:a2:b7:43:0e:6d:08:79:0e:9d:a7:bc:e9:25:9c:
f7:2b:8b:37:17:0b:94:28:49:4c:15:b6:eb:20:d8:7f:90:84:
c6:79:6e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:35 2025 by rpki-client