Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B556A00D7D511EFA675F843762E951A.roa
File: 5B556A00D7D511EFA675F843762E951A.roa (raw, json)
Hash identifier: LVuvmdDASqAjH9KvOd0FM8uu4mpiF+vCk/mGlqgC19U=
Subject key identifier: 0C:41:DF:E1:8B:A1:01:F2:BB:8B:19:98:DA:8B:3B:1B:EE:81:79:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D1A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B556A00D7D511EFA675F843762E951A.roa
Signing time: Tue 21 Jan 2025 08:54:43 +0000
ROA not before: Tue 21 Jan 2025 08:54:40 +0000
ROA not after: Sat 01 Feb 2025 08:54:40 +0000
asID: 44559
IP address blocks: 156.246.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68890 (0x10d1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 08:54:40 2025 GMT
Not After : Feb 1 08:54:40 2025 GMT
Subject: CN=678f60d3-89c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:f8:a8:b3:c6:44:b1:bd:06:db:84:9b:89:
85:96:3d:a5:ee:e2:e9:3f:84:7b:88:83:49:5c:56:
98:41:be:89:d3:d4:4f:c9:1c:a5:46:e5:8f:5d:76:
10:a0:8a:28:55:8c:25:9b:3b:90:89:46:6d:e1:a3:
0b:db:67:d5:ef:ac:31:70:94:a1:04:aa:66:91:38:
36:32:18:15:0a:e3:df:06:52:51:cc:b3:1d:1e:f0:
57:3a:77:40:e1:32:eb:15:f5:b2:c4:e7:62:66:52:
23:8d:63:08:e4:89:e7:a6:67:c3:ec:05:60:54:c1:
3c:b7:fe:fa:d2:87:1b:0f:04:96:80:0c:f6:fe:ff:
44:a6:fe:3f:ec:7c:2d:5c:3a:22:93:00:dd:96:f0:
c4:8d:5f:f2:9a:85:14:23:06:96:8f:8d:d2:1d:2f:
6c:1e:c1:d3:a9:3e:fc:15:fb:32:0e:98:87:23:a9:
7f:2a:df:ce:2b:e9:6b:ba:70:5b:72:8d:ed:d0:a6:
8c:e6:16:64:56:e9:41:6a:f1:47:c7:3a:67:5b:ea:
79:8f:16:7d:31:c8:34:d1:d4:e5:3e:64:50:a3:e2:
7e:72:c8:a0:4e:08:18:69:04:fa:80:bd:85:47:2f:
c2:be:5a:8b:02:39:d3:bb:c8:dc:c7:d0:c3:26:e5:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:41:DF:E1:8B:A1:01:F2:BB:8B:19:98:DA:8B:3B:1B:EE:81:79:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B556A00D7D511EFA675F843762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.168.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2d:35:f9:ae:16:14:e4:b3:fd:7c:f4:0b:d5:67:00:4b:b5:
95:28:5d:05:82:8b:8e:78:cb:4f:f2:a3:4d:c9:7d:65:5c:74:
21:ed:61:b0:f7:e1:ea:99:4b:97:82:20:6d:3f:74:78:cb:64:
ff:b7:e1:e7:8e:ea:1c:67:e5:26:c4:e4:6f:5f:9f:24:40:87:
5c:fc:31:5e:36:11:fa:c2:7d:c8:8a:a5:3c:5b:f1:af:cc:f8:
f2:83:f1:e6:25:dc:8b:f7:7c:ce:c2:51:9c:1e:ec:c5:08:7b:
07:be:ac:e3:1d:e0:3a:92:56:41:10:ea:97:82:a4:ce:04:4a:
d1:79:cf:7f:d2:63:93:3a:4e:8f:77:27:3c:0c:60:1c:87:ac:
c4:cf:a5:0e:58:61:31:7a:48:41:fd:d1:48:a6:08:71:fd:c4:
a4:b3:98:5e:e9:c9:2c:fa:93:1e:88:d5:9b:cb:90:57:6f:ae:
38:95:5d:f5:cf:a8:bb:b5:1c:16:2d:c2:0f:3a:01:7e:62:b6:
5f:6f:5e:47:c0:51:2c:6a:ff:0b:2d:92:c2:e1:27:26:db:c3:
6c:bf:10:eb:3d:27:78:31:43:43:cb:b6:34:41:4f:04:29:e2:
2e:ca:2c:27:fb:d1:2c:ea:02:d9:8f:04:cc:a2:a4:a2:b7:ec:
57:fd:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:24 2025 by rpki-client