Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/599AF814D7F411EF86990A8D762E951A.roa
File: 599AF814D7F411EF86990A8D762E951A.roa (raw, json)
Hash identifier: seMWyNbyl4AuwMDKdE1fq1/9QuyyYndSER+lY3wa4VI=
Subject key identifier: 3E:A1:40:B0:9D:DE:65:C1:49:1C:3D:7E:FB:14:85:37:83:B8:52:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/599AF814D7F411EF86990A8D762E951A.roa
Signing time: Tue 21 Jan 2025 12:36:35 +0000
ROA not before: Tue 21 Jan 2025 12:36:31 +0000
ROA not after: Sat 01 Feb 2025 12:36:31 +0000
asID: 44559
IP address blocks: 156.246.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69032 (0x10da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:36:31 2025 GMT
Not After : Feb 1 12:36:31 2025 GMT
Subject: CN=678f94d3-4299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:c6:43:72:32:30:11:48:ba:6f:8f:e0:f9:
7b:dc:11:c7:60:21:7b:a3:df:65:af:7a:7f:5c:0a:
35:3a:bf:63:35:ef:40:ff:9a:a1:f6:46:a7:50:b3:
74:7b:45:a9:25:87:58:64:c7:8c:6d:1c:73:2d:eb:
24:fa:14:39:cf:b8:94:bb:9b:98:e6:8e:12:13:9c:
0c:17:14:f2:d5:ba:17:77:c8:c3:b2:b5:aa:37:81:
6a:7b:3a:58:bf:60:d3:14:c4:17:b0:49:76:02:d3:
27:c1:38:84:d1:8a:17:bc:b1:96:31:6c:5c:a3:79:
20:c3:a4:4a:89:bc:53:46:ad:c7:36:2d:f4:64:7a:
36:0a:d3:63:35:26:4b:d1:ab:60:1b:2d:03:bb:ae:
57:d7:81:17:aa:e3:2d:44:03:e5:aa:18:ec:80:93:
ec:42:dc:49:9b:4c:05:07:4f:ac:e1:08:13:4e:c2:
7b:92:0e:4e:ed:16:e7:50:91:ca:21:ae:4a:65:dd:
ff:87:f1:11:75:b5:90:6f:e9:c9:0d:d0:95:a7:d6:
cc:c6:cb:a4:22:05:7e:39:4c:12:a6:bd:83:8f:84:
7f:12:71:79:6a:27:03:c6:08:65:1e:4a:45:3d:3e:
45:0c:ae:a2:d2:6f:d1:57:01:3d:c4:13:f1:f7:8d:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:40:B0:9D:DE:65:C1:49:1C:3D:7E:FB:14:85:37:83:B8:52:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/599AF814D7F411EF86990A8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b3:b7:76:33:72:6e:ee:5b:d0:cc:80:f1:e5:b6:5e:1f:46:
f9:df:51:01:51:f7:11:15:cd:29:2a:ba:80:76:3d:15:dd:52:
75:b1:cb:fa:d0:8a:ea:6a:25:4c:3a:e5:01:7d:06:d2:67:c6:
ad:9c:e8:fb:3d:dc:e3:37:d8:34:dc:aa:9a:77:c2:06:a8:77:
2e:9f:07:fb:24:9d:5d:70:ab:bb:0e:55:b6:07:0f:44:c2:c6:
49:63:d8:0e:27:01:e6:8e:f7:8d:82:5c:80:f1:08:55:6d:7d:
c1:a6:cb:d8:49:ec:65:44:90:21:69:20:16:71:47:f5:6e:10:
ea:4d:50:39:e9:6d:63:c6:e1:09:49:79:c9:a5:15:99:0f:ed:
98:2f:6d:79:73:df:bf:24:5f:de:c7:04:fa:af:d4:8d:7f:55:
6d:a7:5d:73:10:df:74:71:8e:10:67:3a:48:78:9d:02:df:ac:
c2:26:04:b1:e4:b3:69:0e:dc:c4:0f:ac:e0:11:69:6b:1a:c6:
53:9e:ba:c8:a1:01:ed:e8:a0:90:e8:e8:e3:25:2e:bc:c4:83:
69:65:ac:c9:b4:c0:e8:1b:1d:c4:a5:ae:d6:2b:57:65:27:86:
f8:35:c2:e5:cb:83:a9:a4:fe:47:a3:30:89:bd:ff:4c:b8:95:
f3:1d:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:35 2025 by rpki-client