Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BF7ADD6D80011EFB187875A762E951A.roa
File: 4BF7ADD6D80011EFB187875A762E951A.roa (raw, json)
Hash identifier: tQg0kBvFR6Zdvcb7yQpdmpmCIu4zGqvz08Xw3dvvPEo=
Subject key identifier: 7E:8C:7F:3D:44:49:B4:BA:F7:7E:4E:84:2A:67:F3:3F:21:F2:96:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DF8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BF7ADD6D80011EFB187875A762E951A.roa
Signing time: Tue 21 Jan 2025 14:02:06 +0000
ROA not before: Tue 21 Jan 2025 14:02:02 +0000
ROA not after: Sat 01 Feb 2025 14:02:02 +0000
asID: 48031
IP address blocks: 156.246.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69112 (0x10df8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:02:02 2025 GMT
Not After : Feb 1 14:02:02 2025 GMT
Subject: CN=678fa8de-d59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:56:99:a8:da:15:3c:12:ff:7f:4b:c5:bb:
d3:0b:41:9c:90:17:9e:a8:41:19:d0:ae:55:8b:e6:
23:6b:fa:0c:8b:00:26:a2:0d:1a:ef:88:56:2d:1a:
01:6c:38:6f:84:9f:dc:b2:73:db:39:41:d3:75:64:
68:62:cd:dd:44:11:e9:71:0b:01:fc:3f:bc:4c:ae:
11:79:05:34:4b:f8:f9:fa:27:10:89:0f:04:3f:4e:
36:65:28:74:6f:88:97:de:3b:80:18:16:3d:55:34:
2c:f2:e4:74:3d:9b:cb:2b:6f:ae:49:24:0c:da:03:
d2:c8:ed:c1:6e:c6:c6:f0:14:d6:a0:f2:cc:ad:ac:
11:fc:3b:f7:1d:22:52:6f:17:81:bd:c3:b2:20:0b:
8d:cd:d5:6c:0b:f1:a4:4c:b0:b3:a5:27:d3:4b:bf:
10:dc:f0:0c:da:61:82:2d:72:cb:19:18:9f:98:1d:
87:df:e6:9b:f1:19:06:b6:29:0d:29:ac:97:18:f5:
3e:36:67:2f:10:3a:8c:ee:13:40:b9:35:97:1c:88:
7f:fd:97:88:38:e8:d1:de:66:8a:cb:7f:37:74:2b:
c1:30:3c:cc:16:2c:de:88:b5:25:e5:c2:7a:75:71:
72:4e:10:aa:04:1e:a2:a4:98:47:5e:65:3c:0e:4b:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:7F:3D:44:49:B4:BA:F7:7E:4E:84:2A:67:F3:3F:21:F2:96:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BF7ADD6D80011EFB187875A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.149.0/24
Signature Algorithm: sha256WithRSAEncryption
68:52:df:5b:bf:82:9b:45:61:80:a5:7e:45:2f:f7:d5:7d:e0:
81:a5:29:41:da:8a:e5:a2:75:fb:7e:a4:3d:3c:c3:f2:32:7f:
44:15:7e:74:4c:28:8d:9e:8a:6d:7a:76:30:78:2f:73:19:7a:
88:be:7c:ff:ce:44:49:45:ad:52:12:e4:4a:8e:4d:47:60:07:
23:51:81:26:52:d8:3f:d7:88:32:8f:f9:d3:9e:29:fe:ce:0d:
d7:20:3a:28:d4:68:6d:ae:6f:96:37:c6:ff:8b:f9:23:ae:cb:
51:b6:78:d8:d3:b4:e2:88:cd:d4:41:b1:a2:92:1e:68:17:3f:
15:1c:1b:17:ae:fb:ee:da:58:1e:3f:0c:e0:20:d4:18:36:67:
60:ca:97:02:a6:e5:36:cb:83:4a:9a:ec:8e:1b:b2:98:01:d6:
a4:71:3c:e4:c1:41:d0:b6:00:3b:21:e2:8d:31:b1:c3:6a:d1:
e8:0e:1e:3a:a4:2c:44:5a:7d:a6:62:cb:35:3a:b4:c2:8d:16:
9d:6b:78:73:13:30:13:01:d0:6e:31:7d:6e:2e:6d:6c:e8:19:
cd:7a:58:42:6f:ee:6d:66:16:34:3b:a2:2b:4c:31:3f:7a:23:
30:15:0d:6c:2a:56:f2:39:c1:77:9d:a9:77:91:db:d2:e2:ac:
b6:2c:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:58:07 2025 by rpki-client