Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52DAEEE4DA7E11EFAE766A8B762E951A.roa
File: 52DAEEE4DA7E11EFAE766A8B762E951A.roa (raw, json)
Hash identifier: gX8v4jyqhJQbXSPZPckOprqWtJy66xQ5ncM3oGdqVEU=
Subject key identifier: 12:C3:25:FF:D2:3B:45:77:D1:6D:4C:E6:87:5C:01:CB:48:AF:35:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FFE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52DAEEE4DA7E11EFAE766A8B762E951A.roa
Signing time: Fri 24 Jan 2025 18:09:16 +0000
ROA not before: Fri 24 Jan 2025 18:09:12 +0000
ROA not after: Tue 25 Feb 2025 18:09:12 +0000
asID: 44559
IP address blocks: 156.246.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69630 (0x10ffe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:09:12 2025 GMT
Not After : Feb 25 18:09:12 2025 GMT
Subject: CN=6793d74c-3ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:5e:d3:bc:53:fd:3c:ff:e7:aa:cc:41:ee:
ce:ef:7d:19:e5:81:92:3e:05:1b:aa:64:5f:91:36:
11:e3:1a:77:c3:a2:c8:08:42:54:bf:a9:c2:64:44:
62:d1:ac:2b:cc:a0:27:3a:8f:1e:03:50:3d:c1:47:
59:7e:25:68:1f:4a:a3:6b:96:c2:79:01:0f:20:23:
0f:34:9d:ec:05:8b:3d:de:d7:ad:c2:e2:02:16:d1:
9b:da:3f:b9:f8:f4:9c:0e:67:24:c3:47:5a:95:35:
ba:9c:e3:16:60:a6:1d:33:18:6b:03:a5:f9:47:86:
dc:13:4a:c6:73:58:10:29:a0:68:a3:0d:c0:19:45:
b3:11:8d:b1:98:bf:ce:4a:7f:08:70:b0:e8:ef:e6:
40:ae:10:00:63:d3:0c:31:18:be:c2:85:8a:de:ad:
85:2b:15:aa:4c:68:c1:43:31:3f:b3:74:72:55:aa:
8a:e4:20:b9:2b:a6:73:b0:3e:ce:41:78:19:f2:30:
9d:32:5d:40:b4:b2:cc:d2:57:3b:02:5e:1b:ef:6e:
2f:21:4c:8e:58:8f:a0:90:e1:bd:fb:d8:5b:80:ff:
78:32:05:6c:ba:6f:e3:c9:53:07:e8:e1:f9:e4:42:
74:bf:39:3e:fb:fc:ac:87:1d:ce:4f:2b:0c:2b:dc:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C3:25:FF:D2:3B:45:77:D1:6D:4C:E6:87:5C:01:CB:48:AF:35:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52DAEEE4DA7E11EFAE766A8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.156.0/24
Signature Algorithm: sha256WithRSAEncryption
07:23:68:b6:3d:81:02:0e:5e:16:ae:d7:8c:d1:70:0d:f6:c5:
7a:8d:73:26:3c:ae:f5:05:bd:7d:c2:a4:ba:b2:d6:c9:84:3c:
2c:16:aa:3e:d2:e0:be:2e:49:a8:1b:b1:dd:e9:eb:fb:43:9d:
04:c6:99:0a:9c:d0:1b:36:99:30:20:eb:d9:22:70:3a:bb:c3:
d1:16:f0:80:10:d8:9c:6f:db:8e:b3:68:c9:08:17:0f:b8:22:
46:e8:fa:64:56:e9:e6:0d:db:a6:57:21:8b:b5:6f:b8:ec:87:
2e:f6:df:5e:ed:ac:6e:de:dd:7c:78:1d:48:7d:d5:cb:fd:97:
e7:6d:9a:c3:03:aa:0e:b8:45:e8:e7:af:7c:62:cc:99:fb:65:
95:2d:98:93:8b:7f:ad:e5:39:4a:a3:64:9d:0e:47:be:b0:24:
5a:1d:13:ec:33:c2:9e:68:6c:ce:1f:b0:4f:2b:66:cb:9a:b6:
17:84:3e:e3:e2:62:3b:f1:22:c4:36:1a:5d:f5:24:f3:8d:1d:
19:ad:90:69:d7:98:33:bf:61:9c:54:6a:90:73:fe:3c:1d:5c:
04:ed:8b:24:7a:de:88:32:da:f9:71:4d:c9:a6:06:5d:60:44:
9c:27:8d:8f:b8:02:d2:a7:f8:e5:d5:4f:07:2c:fa:49:6b:ba:
35:48:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:01:06 2025 by rpki-client