Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5985F8DAD7E811EFB23FF5BC762E951A.roa
File: 5985F8DAD7E811EFB23FF5BC762E951A.roa (raw, json)
Hash identifier: LOR11kxFkbkbDZ53GIuJ6jixj8cL8EcaEsvyFmcst3w=
Subject key identifier: 29:E2:9D:11:5E:F7:F7:D0:A9:EA:68:E5:38:5D:CB:21:2C:18:E4:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D5A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5985F8DAD7E811EFB23FF5BC762E951A.roa
Signing time: Tue 21 Jan 2025 11:10:41 +0000
ROA not before: Tue 21 Jan 2025 11:10:36 +0000
ROA not after: Sat 01 Feb 2025 11:10:36 +0000
asID: 44559
IP address blocks: 156.246.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68954 (0x10d5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 11:10:36 2025 GMT
Not After : Feb 1 11:10:36 2025 GMT
Subject: CN=678f80b1-f930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:33:e2:fe:76:c2:4d:72:c2:e6:f0:65:ff:
fe:16:a8:20:0d:18:cf:f7:a2:2d:9c:bb:66:c8:87:
6a:73:54:b0:d0:c0:8f:6c:ab:5f:85:f5:82:ce:b3:
9e:2f:60:a3:6d:e3:8c:49:f7:a5:4d:f8:26:90:e5:
aa:fb:35:21:b6:00:52:ad:50:89:bf:c8:8b:30:e9:
d4:50:4d:62:b8:09:77:c1:76:ba:e9:df:69:8c:d7:
3a:9c:34:45:7d:be:48:9c:a2:1e:2d:63:43:aa:27:
e2:c7:d8:85:b7:8b:a9:2d:4c:31:94:f8:58:ad:9f:
77:57:3b:cd:df:b3:45:87:36:a2:b5:52:70:a1:2d:
99:e0:ee:55:53:49:7d:82:42:c6:3a:a1:8a:58:7c:
96:5b:18:01:36:5f:cf:06:fb:d5:c3:37:6d:2a:02:
b8:8f:c5:3f:57:02:d0:59:ec:51:53:e6:65:ea:78:
03:03:38:30:21:45:d3:8a:00:91:d6:04:2f:ca:9c:
40:02:14:5b:f1:ad:3f:0d:13:a8:10:6e:ec:a3:f7:
39:b9:39:25:c7:45:e0:21:18:71:15:b7:50:c3:d0:
4a:6a:cb:d3:a2:54:50:44:b3:b4:eb:6d:5c:c6:e2:
c4:40:9d:cd:40:26:06:27:eb:8b:da:ad:d7:33:0f:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E2:9D:11:5E:F7:F7:D0:A9:EA:68:E5:38:5D:CB:21:2C:18:E4:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5985F8DAD7E811EFB23FF5BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.206.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a3:fa:98:2f:0b:ce:a1:5d:ec:82:f5:18:b1:d4:39:06:68:
f1:19:53:10:86:fb:97:e9:54:9c:d5:68:73:ff:d1:c9:f8:a5:
fe:8f:5a:84:d2:16:51:59:26:09:0f:8a:22:52:10:db:65:85:
9a:2a:13:a8:6c:67:76:98:ab:60:81:df:7c:7c:d0:fe:89:0e:
bf:f2:ce:71:ed:82:1d:82:0c:ad:be:ac:46:35:9b:f1:6c:9d:
83:2f:02:a7:67:69:fe:23:74:ab:3e:12:f4:82:18:32:b5:aa:
4c:c8:c5:31:1b:d8:d5:e4:e5:83:27:f7:8b:06:e7:b5:e1:ac:
87:6b:06:76:81:5f:57:50:f6:95:fc:05:ac:02:de:01:eb:01:
4c:16:c1:2d:a8:cb:7d:9d:5a:44:f5:bc:45:c4:95:92:a4:ee:
91:cc:b2:b1:7b:00:7f:e8:d6:c2:6b:6e:54:4d:03:e0:16:e8:
54:4f:a1:d3:ef:e0:9f:c3:ba:67:f2:67:73:a8:cf:b3:0d:ce:
c0:42:87:f6:d8:ff:cc:2b:71:ae:37:fa:39:8f:a4:46:eb:5f:
9a:a5:ba:b2:9c:61:4b:1e:1d:6a:97:5c:78:2a:26:98:8d:59:
4c:e5:83:14:79:a3:fb:76:a3:6e:1c:7c:0c:db:7d:30:7f:33:
72:cb:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:00 2025 by rpki-client