Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55631200D71C11EFB4A73A86762E951A.roa
File: 55631200D71C11EFB4A73A86762E951A.roa (raw, json)
Hash identifier: vkRIvuMrGZJOpF8YoXZXc+esRBhDZyWnzp526Bm5oKM=
Subject key identifier: A9:07:CE:79:4E:BA:F4:51:D3:3A:A9:94:29:2A:0B:5E:7E:80:4A:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C1D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55631200D71C11EFB4A73A86762E951A.roa
Signing time: Mon 20 Jan 2025 10:50:16 +0000
ROA not before: Mon 20 Jan 2025 10:50:13 +0000
ROA not after: Sat 01 Feb 2025 10:50:13 +0000
asID: 48031
IP address blocks: 156.246.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68637 (0x10c1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 10:50:13 2025 GMT
Not After : Feb 1 10:50:13 2025 GMT
Subject: CN=678e2a68-7d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:e7:92:b2:a3:c3:58:4a:bb:32:3c:e4:b4:
ac:c6:90:59:38:92:63:7d:34:11:0a:f9:d6:a0:0b:
3b:ce:3d:39:f8:1e:13:e7:bc:6e:9f:10:48:f2:51:
6d:dd:42:14:14:31:7b:de:79:09:d2:16:a7:b2:cc:
3e:76:2d:ea:15:1f:f1:50:b8:6f:0a:94:1e:c4:79:
13:b5:e7:d0:1d:7b:e6:c6:a0:d9:41:44:d0:6c:7d:
e4:92:54:c9:9c:89:10:52:01:b1:c7:e2:97:71:d1:
07:b5:2d:61:d1:47:5f:1e:ab:6c:24:62:35:4a:28:
35:f6:97:89:63:01:e7:86:49:1e:ae:91:21:10:80:
c0:9d:7a:dd:7c:d2:3d:ca:c3:85:b8:bb:d4:b3:a7:
64:c5:7f:bf:b1:85:3d:b9:de:bd:86:14:72:61:c3:
29:bd:05:b1:14:e5:35:72:2a:0e:96:15:7b:ac:25:
9b:10:1e:b1:f3:78:34:1a:46:8e:27:cd:0c:7a:0e:
12:fb:de:fd:12:f4:96:f6:88:82:19:97:5c:3d:66:
1d:25:31:64:16:46:c4:85:c9:e8:29:6f:5e:78:48:
2a:a5:bd:eb:23:e0:aa:79:07:f2:07:36:ce:8e:51:
8c:4a:65:0e:3c:d4:cf:14:6a:0a:29:5d:fb:84:8c:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:07:CE:79:4E:BA:F4:51:D3:3A:A9:94:29:2A:0B:5E:7E:80:4A:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55631200D71C11EFB4A73A86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.144.0/23
Signature Algorithm: sha256WithRSAEncryption
19:44:bf:69:80:fb:b0:d5:f4:7e:30:0f:92:a0:8d:c8:af:87:
cb:f1:9f:66:8d:e8:91:c2:98:b0:0c:ee:f6:22:4f:22:ae:70:
01:fe:fc:1c:b2:a4:86:7c:3c:70:ad:1d:91:a6:c2:a7:e8:85:
2c:53:22:d4:4b:fa:60:9e:03:1f:51:9a:e8:b6:ad:08:0a:a3:
55:9e:cc:0b:3e:f9:65:81:74:8e:41:9a:32:3d:41:42:5f:5a:
dc:a2:96:f5:2b:6d:39:09:c5:ee:b4:6d:d8:d0:bc:fa:9a:bf:
79:10:cc:92:94:22:ac:23:03:2a:08:a2:dd:ae:a5:cc:3e:b1:
75:33:2d:c1:af:c0:9f:47:34:4e:ba:43:67:03:a9:4a:0a:d4:
ae:0c:31:60:4e:98:7c:9b:a8:70:6f:c3:be:6a:43:d8:7a:5e:
22:44:02:05:23:fd:9c:51:48:db:23:fa:ff:56:44:ca:43:3a:
b3:11:d9:70:ba:d6:2d:eb:6f:a9:86:e5:14:6f:a4:a0:05:b2:
bf:81:63:46:1b:95:3e:2b:7c:9a:0c:66:d7:2e:3c:04:d9:b5:
8d:cc:88:fc:35:90:40:57:49:95:b6:4d:9d:b5:f0:cb:03:37:
99:7c:ed:f7:7f:f0:b7:ea:fb:4b:7a:5c:8c:b5:96:ac:59:2c:
5c:c1:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:08 2025 by rpki-client