Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A1D6C7CD51111EF939ACE9A762E951A.roa
File: 4A1D6C7CD51111EF939ACE9A762E951A.roa (raw, json)
Hash identifier: hoJxSl5IBnDL8VlB1OwBNgnnUnN/VjI0n5MMXTvFVp0=
Subject key identifier: DB:B4:3A:EF:F2:6F:D4:0F:AE:45:77:66:67:A6:C7:88:3D:9D:74:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A1D6C7CD51111EF939ACE9A762E951A.roa
Signing time: Fri 17 Jan 2025 20:26:11 +0000
ROA not before: Fri 17 Jan 2025 20:26:07 +0000
ROA not after: Sat 22 Feb 2025 20:26:07 +0000
asID: 141883
IP address blocks: 156.246.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68254 (0x10a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 20:26:07 2025 GMT
Not After : Feb 22 20:26:07 2025 GMT
Subject: CN=678abce3-ceb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:d6:a4:24:37:78:a5:f0:b8:4f:08:91:27:
dd:0e:88:c1:f8:3e:f6:10:10:a3:4f:72:d5:cf:97:
10:38:35:8c:ee:ef:98:8e:ce:ed:fb:14:cc:62:58:
b5:8f:46:4c:eb:e1:db:35:28:45:a2:f7:e4:cd:a9:
d7:47:90:2f:fa:42:e6:06:ad:b6:61:92:6d:8d:8a:
1d:96:c0:e0:f4:5d:e8:24:3f:16:96:89:c1:74:4a:
1b:5d:3a:cd:6a:45:c5:02:53:be:8b:a4:b0:b3:cf:
95:4f:4e:e6:28:3c:37:9e:c0:7d:37:19:10:15:a0:
b2:82:cd:5e:09:2c:63:42:d9:40:47:d0:54:37:fd:
04:81:e7:43:d3:6c:50:ba:93:a1:3b:92:e3:4a:ea:
ad:b9:f5:cd:a4:72:de:4e:d4:d6:f2:8a:c9:54:d9:
c0:63:d1:29:d0:2f:39:a4:77:98:0e:2b:d7:64:ab:
85:d3:48:0a:b2:21:f7:84:fb:e5:b9:5c:9d:da:83:
4f:2a:f4:49:01:ec:02:84:c0:cc:03:7e:c4:be:c4:
39:69:2e:26:33:e7:10:bc:fd:b8:29:c5:ff:e3:96:
cd:3a:ad:a1:13:72:db:df:4e:46:0e:62:5b:c7:37:
74:9a:ad:10:99:d0:77:7b:2e:83:41:82:1a:33:01:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B4:3A:EF:F2:6F:D4:0F:AE:45:77:66:67:A6:C7:88:3D:9D:74:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A1D6C7CD51111EF939ACE9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.0.0/20
Signature Algorithm: sha256WithRSAEncryption
69:18:74:9e:f0:09:86:d9:70:8f:16:ec:45:a5:2d:e8:a7:a5:
c6:ab:03:a7:f8:48:fe:86:94:14:34:74:b1:5f:71:0d:02:26:
2d:97:f2:74:e6:fa:c3:78:f6:b2:9e:6a:69:4a:86:13:93:d8:
c9:f8:a2:df:70:eb:7a:3e:af:39:7f:26:10:0f:d7:10:24:17:
60:6b:d4:35:91:7f:1a:78:4a:e5:eb:73:f6:12:b9:45:c2:d5:
0c:db:d3:ea:6d:4c:a3:77:bf:fb:34:ab:08:c8:ce:b2:c4:a1:
8c:0c:06:f4:de:8c:da:56:b9:58:5a:ed:54:a6:a3:04:7b:68:
6d:b0:0f:56:c7:81:8d:f0:8f:86:d9:19:f5:66:b0:2b:2b:a7:
57:6a:46:e8:97:39:fe:74:13:fd:9a:ef:f6:9d:58:bc:3e:93:
85:e0:57:25:d3:12:9b:a4:a0:03:b8:f5:17:bb:00:5a:03:d8:
d6:b1:0f:84:c1:ec:d2:a5:e4:8b:fd:55:f0:99:dc:55:c6:4c:
99:14:86:03:ae:8e:48:4c:36:df:67:3e:2f:38:4b:1c:99:ed:
8a:60:17:f0:28:7e:e5:bd:47:c2:73:e8:05:f0:60:5a:df:f2:
4f:e2:3c:e1:4b:3a:16:f3:e6:ad:87:33:f5:74:36:05:a8:7c:
3f:d4:1f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:15:42 2025 by rpki-client