Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58E2E8C2DA9311EF9F956A96762E951A.roa
File: 58E2E8C2DA9311EF9F956A96762E951A.roa (raw, json)
Hash identifier: r9oBcUmM77pYW7Ja1yWfeV1FBUEI3V5EI2SD9OjzYv4=
Subject key identifier: 1B:CD:E6:AE:38:A5:96:08:A3:BB:91:4E:D4:AA:9B:9C:19:75:52:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011086
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58E2E8C2DA9311EF9F956A96762E951A.roa
Signing time: Fri 24 Jan 2025 20:39:46 +0000
ROA not before: Fri 24 Jan 2025 20:39:41 +0000
ROA not after: Tue 25 Feb 2025 20:39:41 +0000
asID: 44559
IP address blocks: 156.246.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69766 (0x11086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:39:41 2025 GMT
Not After : Feb 25 20:39:41 2025 GMT
Subject: CN=6793fa92-3432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:56:3b:2e:83:16:f4:9a:aa:6a:54:47:e5:
9c:e2:20:e6:7d:c4:cb:35:dc:ec:d3:d7:4f:09:9c:
7b:f4:6f:12:9f:bc:14:96:3a:ff:87:a3:65:4d:57:
8f:a3:b1:f8:88:91:79:62:f4:19:cd:6d:32:2b:5b:
f5:a7:c7:c6:48:ef:45:73:7d:76:2d:e8:7d:2d:d1:
98:73:6b:19:7f:18:77:09:73:2b:f6:a3:dc:4f:bf:
bb:f9:63:a7:1d:50:48:3a:99:fe:2d:6b:a8:dd:11:
7c:3b:10:eb:19:13:c0:b6:14:61:a3:5a:f6:06:f7:
d4:df:f8:3c:b8:1c:6a:a6:5c:f6:fc:98:59:20:72:
f1:18:fe:9d:6a:80:c3:08:d6:7a:d8:0a:39:64:18:
aa:ae:b1:ca:67:2e:7f:bf:41:93:5e:89:7f:b4:43:
cc:ce:40:3e:31:f3:1c:b3:fe:50:6d:74:9a:6e:10:
e8:28:12:55:e4:f6:08:5b:29:72:d4:4e:3a:82:1d:
c4:a4:84:b3:aa:83:16:d3:4d:83:23:b8:50:bf:66:
b4:c7:b5:b8:47:ce:30:7d:f3:ac:8c:eb:87:ec:e7:
78:42:95:00:f5:94:c5:17:f9:e6:df:31:1e:63:81:
47:4b:ed:96:d1:a5:6b:44:78:1d:9f:4b:0b:4e:a9:
76:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CD:E6:AE:38:A5:96:08:A3:BB:91:4E:D4:AA:9B:9C:19:75:52:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58E2E8C2DA9311EF9F956A96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.219.0/24
Signature Algorithm: sha256WithRSAEncryption
52:4b:68:0c:cd:5a:06:17:bd:b4:80:cf:ff:22:ec:14:e8:6c:
8f:33:70:2c:c7:75:e7:17:78:36:44:16:37:28:5f:60:4e:ff:
4a:33:4c:08:a6:f6:da:75:3a:4f:ac:c4:10:57:84:1e:be:cb:
21:30:6e:9e:a8:84:8f:f6:fd:0c:71:af:32:ca:33:df:da:24:
55:cf:72:ae:86:84:18:63:2e:ae:c5:f3:67:4b:e0:29:ec:f5:
ed:aa:9b:c9:c0:08:40:db:14:85:ce:89:16:71:e9:cc:4f:c0:
a6:00:55:cd:4e:de:b8:31:37:91:73:d5:49:47:b8:29:d0:6d:
a7:97:68:26:6e:c2:b8:e4:38:81:dd:ba:b6:25:ba:1f:ce:13:
2b:ec:a9:a0:75:45:84:80:b0:86:76:bb:e2:f8:13:36:52:75:
ae:ee:e9:91:6d:e9:94:d5:83:17:c3:bb:01:bf:cc:fd:3c:1e:
ed:29:73:ec:bf:50:9f:ba:03:0b:14:52:df:d6:2f:dd:8a:23:
f3:88:d9:12:4d:3f:f0:37:48:4e:0d:57:e1:e9:24:45:47:c0:
6b:20:5f:2a:66:65:64:f0:cf:95:c5:57:f6:0c:20:71:62:c5:
56:0c:c2:3c:8e:84:29:86:27:0a:3e:d2:ba:bb:8e:ea:85:ed:
ec:d9:80:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:38:33 2025 by rpki-client