Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57E2E536DC8B11EFB628B168762E951A.roa
File: 57E2E536DC8B11EFB628B168762E951A.roa (raw, json)
Hash identifier: nzvCmF+i0J3pjPAYlhkp85cVjBXQHoHoeh5XrKiil3c=
Subject key identifier: 13:48:BF:6F:0B:03:48:F1:33:9F:DF:71:56:14:B2:38:5B:9D:9D:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57E2E536DC8B11EFB628B168762E951A.roa
Signing time: Mon 27 Jan 2025 08:47:31 +0000
ROA not before: Mon 27 Jan 2025 08:47:27 +0000
ROA not after: Sat 08 Feb 2025 08:47:27 +0000
asID: 5065
IP address blocks: 156.246.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70841 (0x114b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 08:47:27 2025 GMT
Not After : Feb 8 08:47:27 2025 GMT
Subject: CN=67974822-4895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:7b:61:6b:6c:14:83:0b:8a:31:4b:ef:ca:
e9:86:a4:d3:31:6e:20:f5:56:f5:b0:e5:18:69:39:
f2:7e:3f:9e:73:65:72:25:66:dc:b4:bd:54:2d:47:
ab:e6:77:48:e0:81:cf:d8:b8:5f:35:94:31:a9:41:
87:75:83:e8:4c:3f:c6:75:c3:a6:dd:42:eb:e4:5e:
ad:5f:43:3a:63:9f:29:7a:cb:63:c6:35:69:11:fa:
41:0b:22:24:65:c8:49:95:79:e0:1a:43:42:f4:a6:
90:37:f5:ea:50:e7:f1:95:0a:52:79:64:11:da:cf:
ac:52:08:5e:c7:aa:bd:79:29:3d:27:96:27:07:2e:
1f:a6:10:70:c6:8e:a7:be:e8:87:30:db:d1:a5:94:
02:7c:55:e3:c3:2c:05:fc:8f:76:b3:eb:1c:4d:df:
17:38:15:2d:63:b9:d3:d5:c5:33:91:44:b5:8b:49:
08:6e:05:90:a0:34:7a:e9:6b:3d:16:ac:6d:ec:84:
43:8e:85:52:33:16:10:4b:a4:d3:b7:bb:b4:90:ca:
67:d6:a0:87:b1:92:1b:17:a4:30:63:db:73:d6:cd:
ed:1c:01:5b:6d:88:57:08:37:2d:75:b8:da:1b:93:
a5:c5:af:33:db:48:28:82:87:76:d3:e9:50:d6:83:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:48:BF:6F:0B:03:48:F1:33:9F:DF:71:56:14:B2:38:5B:9D:9D:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57E2E536DC8B11EFB628B168762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.100.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9e:0c:7c:24:4d:26:2a:44:4e:43:98:0c:98:ac:61:d5:d2:
c9:06:4f:f0:c6:79:4e:69:eb:9c:79:af:50:d5:15:97:c0:c8:
4c:7a:23:4e:d3:ef:ba:0d:4b:c9:24:9b:de:7f:85:45:81:1c:
80:a6:50:35:a9:ed:83:4f:c6:eb:ef:f8:9e:1d:59:15:5b:ba:
49:e6:09:36:1f:15:8d:d2:89:b3:ed:8f:d0:f4:2d:89:a7:ec:
8a:59:be:c0:40:42:e9:04:4a:4d:9c:4c:d6:ed:13:d3:3d:21:
83:27:71:f2:03:fc:07:46:d3:b2:d6:d8:6d:3c:b6:ad:71:89:
c2:73:c5:94:43:6c:73:63:3e:50:60:bd:3f:ee:89:ac:e1:2a:
79:83:56:15:87:00:2e:74:73:3b:de:f1:a6:f6:4e:ae:9a:79:
aa:40:01:78:3f:13:e6:13:39:c3:94:4a:07:47:c1:0c:89:e9:
8d:8a:24:fb:28:01:75:7e:86:53:76:c6:92:34:90:5e:48:98:
8a:69:be:26:b3:a0:45:3b:46:5f:1f:7c:b7:f2:d0:88:68:5a:
82:06:db:f7:b5:55:7c:76:4c:07:fc:70:32:26:f1:bf:ef:0d:
a2:65:9c:ad:70:09:89:0c:e0:b2:ac:c8:16:8d:e7:91:44:7f:
82:c3:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:14:15 2025 by rpki-client