Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59B14208DA8911EF9010CD55762E951A.roa
File: 59B14208DA8911EF9010CD55762E951A.roa (raw, json)
Hash identifier: nwDgPp9lmPSebD3xskWy3MLxIDtNZIgGpsiCds9Iy4M=
Subject key identifier: E8:B3:7C:B1:09:5B:EF:14:18:7C:58:EB:91:BA:34:82:38:C0:B3:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011046
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59B14208DA8911EF9010CD55762E951A.roa
Signing time: Fri 24 Jan 2025 19:28:12 +0000
ROA not before: Fri 24 Jan 2025 19:28:08 +0000
ROA not after: Tue 25 Feb 2025 19:28:08 +0000
asID: 44559
IP address blocks: 156.246.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69702 (0x11046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 19:28:08 2025 GMT
Not After : Feb 25 19:28:08 2025 GMT
Subject: CN=6793e9cc-6781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:ed:5e:c3:20:15:b4:85:18:a4:a0:cc:59:
b3:41:ca:5b:3f:14:28:90:1e:fb:0e:09:2b:dc:dd:
43:9e:a3:04:ef:16:29:4c:e3:e6:ca:5b:14:9a:26:
d5:b5:25:5c:87:8f:c6:82:94:e5:fe:b8:97:22:f4:
25:5e:4d:58:8c:0b:b9:81:c0:8e:45:fb:8d:6c:cc:
d7:25:d2:5d:94:09:d5:58:a3:30:0d:89:27:a2:f9:
01:e7:2a:a9:8d:d3:99:9d:61:bc:9b:8e:8e:17:1e:
e8:c4:a3:1d:df:38:f6:96:50:45:3c:74:a3:ff:c8:
49:e6:fc:1e:d1:75:a6:60:6e:10:e8:34:fd:45:c1:
00:d9:46:c1:1f:fd:db:58:62:30:ac:1e:f1:3c:28:
e8:ff:6c:56:aa:dc:d6:1b:91:2a:de:de:8b:cf:90:
b3:62:3f:07:11:40:fc:d9:45:f5:a0:c9:5f:26:e1:
54:48:2c:5e:a6:82:2b:c5:85:ab:fc:7d:25:66:eb:
fb:43:a0:84:8a:9c:94:c9:fe:eb:ab:9e:92:e9:b0:
6d:ef:4e:c6:9c:e0:c3:73:71:bf:e3:5c:f7:32:e0:
84:61:e8:5c:92:fd:52:eb:1f:b6:d6:d4:1b:b0:82:
75:35:9d:68:f0:10:c2:05:b2:5f:4a:47:86:53:35:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B3:7C:B1:09:5B:EF:14:18:7C:58:EB:91:BA:34:82:38:C0:B3:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59B14208DA8911EF9010CD55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.201.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fc:35:09:c7:83:da:3f:df:82:28:dd:77:96:48:c7:61:e1:
0f:e1:30:63:7e:a6:e7:42:32:f1:71:61:0c:14:b3:ca:0d:29:
7c:5d:4e:99:8c:e2:d3:a8:2e:d9:33:1a:a2:78:9d:c7:53:02:
9d:e6:a7:07:6a:e0:d2:2e:42:0a:2b:b7:a8:d5:06:a5:0d:3a:
af:c6:a7:02:3e:d7:fa:56:5a:c5:9b:4b:80:f5:07:8b:9c:8c:
5e:69:28:e6:cd:85:07:45:69:c5:4d:ba:86:2c:49:34:ae:a7:
53:dc:e0:93:bc:4a:8e:79:a9:e2:ff:0f:a7:fb:3f:d2:fb:d3:
96:8f:fd:f5:b6:79:6a:6e:6d:78:98:b7:ce:be:8d:e8:ae:ce:
e9:6f:6a:d2:8f:1b:c5:05:4b:0d:23:ed:b6:55:55:9e:52:a6:
da:39:c9:1f:48:e4:7c:64:11:4f:8f:38:ae:de:be:8a:77:b1:
0d:e6:59:97:c9:c4:5a:be:9e:7f:8a:44:22:86:b6:04:27:eb:
39:12:ee:0a:70:a5:96:8f:b7:32:88:a3:82:66:72:ad:0e:ba:
3b:75:31:fc:5d:ac:65:80:b1:5a:51:c1:4a:33:ec:3f:55:ec:
b1:f8:0c:5d:77:e6:83:f5:48:81:d7:1a:87:bf:94:3c:c0:a3:
fc:41:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:27:25 2025 by rpki-client