Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56601CA8DAEA11EF8A2ADB6E762E951A.roa
File: 56601CA8DAEA11EF8A2ADB6E762E951A.roa (raw, json)
Hash identifier: KO7jhvfaBzDVIEIwjwZvWcegz/bzZLqUNF0v4ovB8xY=
Subject key identifier: 23:42:F2:70:E2:18:C3:7D:26:96:C6:68:0C:AE:FD:C4:00:DA:FF:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56601CA8DAEA11EF8A2ADB6E762E951A.roa
Signing time: Sat 25 Jan 2025 07:02:28 +0000
ROA not before: Sat 25 Jan 2025 07:02:24 +0000
ROA not after: Sun 23 Feb 2025 07:02:24 +0000
asID: 44559
IP address blocks: 156.246.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69875 (0x110f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:02:24 2025 GMT
Not After : Feb 23 07:02:24 2025 GMT
Subject: CN=67948c84-1551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:a6:cb:12:76:61:32:e9:ce:af:03:76:92:
ec:06:ab:5b:38:d6:c0:ee:d7:c8:dd:0f:f4:41:0a:
55:0e:f0:62:63:93:a8:78:79:69:67:31:d0:e0:e7:
ad:af:e9:34:f9:12:15:62:84:54:bd:cd:72:5b:4f:
fc:41:b8:41:6e:86:44:d9:04:08:52:05:19:d2:50:
1c:8e:21:19:03:10:94:1d:38:94:ee:62:66:09:bb:
3f:ce:2c:72:ed:3b:72:60:49:50:5b:43:68:59:5f:
be:fe:c3:aa:52:6b:de:25:23:2b:7b:f1:7e:71:07:
06:a5:db:54:e9:3e:8b:c1:d8:54:b2:f9:77:07:92:
56:27:34:bb:ef:e4:3c:aa:c2:53:34:46:f6:83:bc:
54:f2:d5:ae:d2:bb:53:ef:95:53:87:d1:a1:42:43:
6c:24:bb:ed:b1:a9:dc:85:25:ca:fc:33:ac:68:f2:
5c:87:0a:aa:e4:26:df:dd:46:cc:6e:7a:ec:9a:c4:
47:cc:53:bc:81:88:91:89:14:83:f7:be:1a:af:57:
f0:34:64:c0:e5:c6:2b:82:dc:13:03:3b:4d:7b:1f:
d5:53:b1:ef:c1:77:cd:09:de:8f:0e:eb:78:a4:fc:
da:15:39:ff:98:1f:dc:a7:8c:d8:aa:06:d3:f6:06:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:42:F2:70:E2:18:C3:7D:26:96:C6:68:0C:AE:FD:C4:00:DA:FF:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56601CA8DAEA11EF8A2ADB6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:0e:12:01:63:c9:15:79:1c:af:3e:d1:c5:76:6b:78:8e:01:
3c:ce:1e:92:af:09:08:c2:5f:24:e5:b0:b3:76:0e:30:00:05:
b4:d8:e4:ed:1c:f6:6d:bb:65:b1:cd:37:56:12:1d:00:3f:c5:
a3:1c:03:f3:dc:cb:60:f7:93:ab:9b:81:61:d2:d7:55:11:ef:
36:57:20:a0:f7:bc:39:06:5d:0d:b5:1c:25:6a:bb:f6:5a:61:
f4:e8:37:51:92:c8:25:2a:c6:ba:24:ab:78:0c:d7:27:b2:c8:
6d:f5:dd:a4:b0:c5:24:b8:0e:28:80:2c:f1:c1:7e:a4:5c:1f:
03:51:c6:b9:5b:10:b4:18:3d:88:11:a1:fb:18:ba:46:8f:79:
17:ef:0b:29:91:c2:56:19:b4:21:7e:98:f1:d6:0f:23:e9:9e:
87:a9:a6:8f:89:e7:9b:ae:f9:e7:62:8c:f7:43:74:a7:35:57:
9d:20:46:a0:11:f3:38:81:26:5e:d0:6f:3f:10:1d:e2:87:36:
cc:1c:67:c1:d4:51:47:e8:c5:ba:6a:dc:58:ca:11:6f:49:71:
0f:b7:01:2a:e0:df:1d:41:2b:10:ea:ba:c2:8c:34:4d:ed:b1:
84:aa:5b:dd:f0:d1:59:37:82:9e:90:71:e6:bc:c4:56:fa:b9:
46:20:43:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:14:45 2025 by rpki-client