Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/560CD52CDAFC11EFA7BA6164762E951A.roa
File: 560CD52CDAFC11EFA7BA6164762E951A.roa (raw, json)
Hash identifier: YmDEP2CuGR5I0lvBdDs//I/pghrLAOJFiTlV2LUE+/k=
Subject key identifier: 9C:EA:C0:3D:9D:47:20:31:8A:8F:1B:B4:12:DA:65:9D:EE:9A:86:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/560CD52CDAFC11EFA7BA6164762E951A.roa
Signing time: Sat 25 Jan 2025 09:11:18 +0000
ROA not before: Sat 25 Jan 2025 09:11:15 +0000
ROA not after: Sun 23 Feb 2025 09:11:15 +0000
asID: 48031
IP address blocks: 156.246.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70055 (0x111a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:11:15 2025 GMT
Not After : Feb 23 09:11:15 2025 GMT
Subject: CN=6794aab6-80de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:38:39:1e:75:8b:06:5d:f0:28:6d:c3:35:1a:
f7:73:92:91:93:d6:78:c8:9b:1e:ee:76:87:60:af:
45:4c:9f:d4:a0:69:b0:64:be:96:69:0c:d7:25:99:
49:1f:7d:63:62:44:86:ce:39:99:39:3f:55:9a:2d:
f6:ce:76:59:2b:3b:c6:65:ac:ef:aa:34:1c:c0:c8:
13:0e:3b:ab:cb:ab:14:5c:a2:17:31:1f:79:4a:a6:
5a:c3:29:b4:97:2b:ce:f2:3d:89:dd:79:72:65:02:
74:24:47:f9:0f:4c:86:1f:95:e2:8e:82:8c:d0:eb:
ba:11:fe:84:4a:58:ed:d3:f2:40:cb:5f:27:b6:6f:
77:7c:cf:3c:42:a5:bd:29:eb:c6:90:d6:ba:db:aa:
cf:0e:8e:cd:53:70:3a:ba:30:04:ce:b1:02:2c:ad:
76:6f:5e:ec:f3:10:9a:4a:de:f7:4e:ef:4b:92:7e:
60:96:0e:41:a8:3a:55:cf:71:ec:47:cc:b5:be:92:
84:a4:bf:49:55:3a:11:7f:01:30:ea:56:e9:95:10:
83:75:2f:0e:ce:8c:a9:4c:7c:06:4b:bf:8f:9b:d0:
a2:74:e2:72:67:94:8d:f9:97:f6:74:1f:fd:4b:d2:
1b:77:82:d5:bb:33:1b:42:28:49:c3:b9:4d:b5:cd:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:C0:3D:9D:47:20:31:8A:8F:1B:B4:12:DA:65:9D:EE:9A:86:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/560CD52CDAFC11EFA7BA6164762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e0:7c:29:1a:27:1e:ae:cd:86:18:54:61:ab:3c:fb:24:7c:
3e:c7:4b:91:5e:3b:16:2d:d9:2b:6c:35:0f:57:21:ca:57:c6:
78:cf:14:9c:0a:06:f9:5c:46:5e:58:a8:66:2c:97:ad:6d:c8:
7b:1a:7b:ab:37:6d:b5:9f:69:59:c9:1a:e7:2d:8a:05:8b:02:
9e:ce:5d:f5:6f:d5:46:68:45:a5:4e:90:19:01:9a:93:0e:a1:
72:cb:d3:a7:00:8c:a2:df:9d:af:88:4c:17:36:6e:76:81:8e:
22:02:75:67:2c:18:cb:1c:8d:d5:e5:d0:8a:01:53:f0:8f:0e:
ec:53:70:9f:6b:4d:9f:b8:09:3f:d8:1a:1e:1b:1d:20:38:51:
1a:c3:c1:aa:ef:58:f9:14:7a:6a:2c:45:50:4a:45:ac:eb:b4:
19:69:6a:55:89:95:dc:55:bd:99:23:b1:20:04:48:8a:9d:fe:
8a:2e:f0:3c:2e:6c:23:48:55:32:52:cf:4e:8a:3d:28:61:54:
85:a5:ff:a8:56:38:2a:19:bb:07:c9:94:81:82:cd:8f:a4:21:
1a:26:e6:48:d3:cd:83:a2:84:78:c5:75:9f:2b:88:81:ce:6c:
e7:1d:9a:f6:a5:b4:c9:3c:00:e9:e8:0f:bb:96:86:9d:5b:be:
02:12:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:42 2025 by rpki-client