Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FAE0814DAF611EF9A3D04BD762E951A.roa
File: 4FAE0814DAF611EF9A3D04BD762E951A.roa (raw, json)
Hash identifier: dVVStV59AT2pz3GEruDnnpZwJGbsBvobHoL9+jfRVR4=
Subject key identifier: 34:AA:83:7A:DC:BC:93:80:8D:56:B6:EA:40:E7:E9:B3:AD:7A:24:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01117D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FAE0814DAF611EF9A3D04BD762E951A.roa
Signing time: Sat 25 Jan 2025 08:28:11 +0000
ROA not before: Sat 25 Jan 2025 08:28:07 +0000
ROA not after: Sun 23 Feb 2025 08:28:07 +0000
asID: 44559
IP address blocks: 156.246.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70013 (0x1117d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:28:07 2025 GMT
Not After : Feb 23 08:28:07 2025 GMT
Subject: CN=6794a09a-2b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:44:b4:a2:68:fe:cb:d4:1b:31:4c:d3:02:
69:61:91:b8:50:f2:25:70:22:15:c4:87:98:dc:9f:
cd:98:71:b8:42:34:9f:6b:e1:03:ca:14:2e:78:f6:
23:f7:c2:c2:c5:7b:2f:9a:49:3e:83:2a:9a:84:24:
10:f3:8e:11:47:57:82:12:c5:35:01:48:56:44:e8:
0c:26:9e:08:f1:07:ab:cf:13:23:6d:19:c9:b1:d4:
ea:6b:82:d0:b4:ab:43:92:3f:1b:34:e7:bb:e5:d8:
a5:17:74:59:b7:79:ac:70:87:1e:77:b9:53:d4:5b:
50:42:7b:75:46:cc:c6:b5:2a:71:a9:34:cc:c7:08:
c2:b7:dc:3f:e4:c8:3b:5c:75:33:35:5c:7f:85:34:
42:58:c7:c5:16:7e:8a:5e:08:4a:c9:f6:25:f4:38:
d1:19:90:bf:bf:40:1c:7b:1c:91:f0:63:f9:c7:f0:
19:2c:73:3a:e0:13:63:96:e9:ff:ce:c8:cc:ae:c1:
22:68:bf:9f:6b:95:3e:be:43:59:00:9b:d8:fe:5a:
e3:c6:87:bc:ca:ae:4a:d6:19:41:31:80:07:38:fc:
86:32:f9:c1:b3:9c:8f:cb:ce:d2:00:e3:cb:ef:e1:
d0:04:af:87:46:d5:bf:40:2c:71:54:e9:ba:da:cd:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AA:83:7A:DC:BC:93:80:8D:56:B6:EA:40:E7:E9:B3:AD:7A:24:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FAE0814DAF611EF9A3D04BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:be:80:80:fa:34:6a:db:d6:28:c4:14:9b:af:dd:b8:b7:dd:
e3:aa:fc:03:78:ad:8f:43:fb:ae:24:12:70:9d:d2:6c:73:43:
11:4c:15:a3:87:af:16:69:77:23:39:51:32:9c:01:b0:48:d3:
86:ad:52:0a:c5:6e:72:e6:9e:52:2c:cd:48:ee:ca:ea:bb:78:
ff:59:bf:91:68:92:85:ba:6d:bd:05:dd:bf:69:32:e3:9b:cb:
cc:37:c5:25:39:24:2c:b4:a6:5d:a1:e3:1f:ca:52:1a:34:0d:
be:c7:35:03:95:21:db:3b:e3:45:76:cf:fb:7d:07:b3:66:95:
d8:da:c0:01:66:38:b2:99:77:b0:2b:52:ee:10:65:8f:ce:12:
31:f6:cc:2c:5b:21:1e:8d:d5:15:dc:14:f4:1f:90:c4:58:16:
bb:e0:00:e5:9b:95:de:26:94:4a:a1:5c:9f:ff:6c:b0:f9:7c:
8d:7a:a3:71:d0:86:f3:c9:7f:25:3a:9d:6f:e6:90:90:d0:cb:
a6:93:81:90:cf:4c:61:ae:73:18:3a:11:37:b8:50:36:71:0c:
0f:22:51:d3:2e:3d:ff:bc:dc:7d:ed:b2:d3:fe:38:db:f5:b6:
45:5d:b6:04:4d:eb:8e:01:04:42:3c:e8:3e:be:44:d6:c0:de:
d9:6f:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:22:21 2025 by rpki-client