Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48F820A2DA8A11EF88A15B5A762E951A.roa
File: 48F820A2DA8A11EF88A15B5A762E951A.roa (raw, json)
Hash identifier: yCbvC6cKRtJO6k1J3Y9Vs8rw6k9DFkPvPYxz3BS27cU=
Subject key identifier: 80:CD:28:6B:A6:69:F3:AB:13:6C:74:A3:8F:78:63:A3:20:73:AA:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01104C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48F820A2DA8A11EF88A15B5A762E951A.roa
Signing time: Fri 24 Jan 2025 19:34:54 +0000
ROA not before: Fri 24 Jan 2025 19:34:50 +0000
ROA not after: Tue 25 Feb 2025 19:34:50 +0000
asID: 44559
IP address blocks: 156.246.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69708 (0x1104c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 19:34:50 2025 GMT
Not After : Feb 25 19:34:50 2025 GMT
Subject: CN=6793eb5d-6d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:b2:bf:f2:6b:67:2d:57:e4:7a:d9:49:32:
42:64:e6:13:78:52:4e:5a:57:89:26:4e:1d:b4:bc:
ea:be:ef:ed:a0:0c:87:6c:9f:88:57:2a:1c:ad:80:
18:83:1f:ab:c5:58:05:bb:51:79:61:31:09:f3:f5:
bb:66:e3:0f:82:9c:dc:ad:12:da:94:6e:05:38:6c:
9a:0b:5f:8f:95:69:f4:d0:c5:73:13:87:65:0a:51:
4c:6a:e3:75:bf:de:58:7e:52:f2:ed:20:33:65:83:
63:a6:d1:c2:dc:02:92:fc:5f:79:11:a8:f9:a9:f6:
8c:9e:99:aa:82:2f:80:b1:64:51:8e:7a:e1:6c:d6:
d6:3b:1e:a2:93:bf:45:2f:b2:e7:8a:9c:69:06:ce:
60:3b:0b:05:50:81:6a:b9:48:88:d5:a1:7d:79:cc:
35:8a:3f:74:dc:b6:c6:ba:2c:bf:a6:32:03:68:53:
b0:07:e6:ed:28:1b:d4:9d:1d:fb:7d:89:45:bd:88:
b5:e3:88:ab:0f:e2:47:8d:43:99:ec:9a:7a:f6:ca:
3c:49:1c:dc:98:51:2e:a2:2c:0c:27:41:a0:09:ff:
31:8d:c3:29:fb:4c:ad:ca:58:9d:ca:c7:c5:b4:9d:
21:92:45:bc:c7:77:0b:7a:a6:7f:67:0a:bf:94:77:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CD:28:6B:A6:69:F3:AB:13:6C:74:A3:8F:78:63:A3:20:73:AA:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48F820A2DA8A11EF88A15B5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.204.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:5d:b5:0a:8c:38:ab:4f:e1:fc:47:d2:4a:1c:57:7b:2a:c4:
1a:8f:08:0c:27:6f:cb:a8:04:bc:be:5e:0e:48:32:35:e4:52:
d7:31:d0:8b:33:c9:7d:b0:cf:46:5c:7d:e2:d0:fe:04:a5:d5:
d2:44:1a:c3:ec:65:dd:56:9c:ec:93:03:e8:b9:8b:f2:52:0d:
9e:5b:73:43:c1:09:fb:4e:ee:f0:15:29:43:07:f9:dd:12:b6:
7a:95:4e:8b:81:cf:f9:59:54:89:ee:95:46:ee:a7:4e:fa:22:
63:87:fa:a3:d0:0b:7b:a8:c7:4d:6c:cb:e9:98:9a:0d:7e:3a:
54:48:2f:c3:88:be:6a:c3:39:7c:1a:c0:c1:45:3d:f2:b1:43:
4c:a2:2a:98:7b:1c:e7:82:6a:fa:ad:10:04:67:0a:5d:54:e1:
27:18:19:df:a3:7d:79:41:9e:59:1b:15:41:9e:4c:13:92:d7:
49:13:2b:44:f5:6f:39:fa:18:ba:a2:72:02:c6:8f:f1:14:4b:
cd:45:e1:7c:0e:bc:fe:b6:3d:ec:f1:44:a8:af:92:bc:8b:8e:
ca:07:28:ad:88:95:1d:d6:26:03:c3:8b:61:e9:49:bc:4b:ff:
0a:c6:c6:18:d2:d2:eb:d9:22:f8:1a:b8:88:31:70:06:35:ab:
aa:4d:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:36 2025 by rpki-client