Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C032CF6DB1011EFB18BC36B762E951A.roa
File: 5C032CF6DB1011EFB18BC36B762E951A.roa (raw, json)
Hash identifier: kPAQh5gH6FR/oAMahELIya7OYu8uJp51bbF+/GAAGcg=
Subject key identifier: 0B:89:12:26:DC:FD:79:FC:19:5F:5E:17:4E:99:86:DD:63:88:A4:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011225
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C032CF6DB1011EFB18BC36B762E951A.roa
Signing time: Sat 25 Jan 2025 11:34:38 +0000
ROA not before: Sat 25 Jan 2025 11:34:32 +0000
ROA not after: Sun 23 Feb 2025 11:34:32 +0000
asID: 202656
IP address blocks: 156.246.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70181 (0x11225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 11:34:32 2025 GMT
Not After : Feb 23 11:34:32 2025 GMT
Subject: CN=6794cc4e-6165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:2a:d3:df:83:0f:65:e5:11:57:b8:d1:2c:
da:13:1b:74:24:97:73:ca:2b:e0:a4:df:e9:88:cf:
36:f0:8d:43:b4:86:43:72:0c:53:34:2c:c2:8f:38:
a5:7e:96:c3:0d:8d:a9:9c:a1:9b:e4:0c:a8:d4:0c:
1d:6c:36:cf:18:61:8d:ec:f7:10:d9:a2:76:ec:66:
17:d1:51:8a:48:c8:05:de:f4:01:9a:1e:51:75:87:
a6:a5:c4:31:5b:2b:03:91:b3:36:df:02:4f:10:90:
16:36:d3:1a:7f:e7:31:ed:48:98:ab:46:dc:ec:15:
63:f3:ec:5c:37:3c:9c:0e:95:3b:86:1b:4d:a0:f1:
8d:56:f7:de:0f:fb:a8:d8:d2:eb:3d:dc:e2:84:8c:
fc:ed:c8:32:ba:0e:f8:8d:cf:83:0f:17:e6:68:55:
3d:b8:32:85:3e:4b:e0:72:63:6a:fe:e3:7a:58:61:
ab:4d:c9:5f:ec:92:4e:a1:28:70:e3:ad:f7:0c:b4:
0f:c6:c4:0f:28:2e:c0:eb:25:bc:28:e2:5d:db:99:
87:27:3a:56:c8:9c:70:31:9f:d1:90:36:89:ff:d0:
b3:9d:d1:61:7b:8d:ca:69:49:8a:63:c0:31:1a:f7:
c0:f5:f3:f1:4e:a5:cd:8a:6b:f6:59:35:c2:37:cd:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:89:12:26:DC:FD:79:FC:19:5F:5E:17:4E:99:86:DD:63:88:A4:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C032CF6DB1011EFB18BC36B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.165.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c6:b9:cc:e4:48:ae:67:33:92:92:9d:6f:2d:3f:69:69:5c:
52:1e:ab:d3:5f:08:e0:d6:b4:33:85:2d:b1:f0:6a:b6:ed:ff:
7c:5c:e5:0f:be:da:51:d3:22:7c:6f:97:10:b4:0f:fe:59:f6:
2b:b3:0b:54:70:c4:bb:57:27:74:2b:77:c4:b3:d2:36:43:1d:
26:9b:41:dc:19:e6:e6:c5:62:e5:8e:04:ac:08:fa:a8:d6:49:
31:29:8d:45:aa:e1:d6:8f:33:8c:6d:81:6b:0b:6b:b9:bb:37:
f9:0c:4c:16:23:48:4c:d7:03:42:3b:b4:d9:a9:31:e2:19:07:
7c:f8:e7:99:a5:ef:71:2b:89:7a:65:c1:52:49:e9:19:20:31:
4a:82:93:02:65:4c:a0:b7:ba:d3:3c:75:8a:1a:25:6d:3e:c0:
ec:92:d5:5b:d8:b6:16:c6:9c:1c:af:f1:ee:09:10:0b:77:27:
00:2e:d6:1f:4d:e1:9f:f8:cd:98:2d:6b:01:ac:94:a1:7d:0f:
10:81:d4:e2:4f:4c:43:3f:8f:5e:89:80:fc:34:28:bd:be:e0:
47:3c:3b:12:4a:cf:ac:07:23:55:50:be:cf:4c:d3:2a:57:ac:
f0:c5:ab:e2:cb:ac:b4:23:fe:50:7f:02:e5:db:48:0b:d6:79:
ff:b7:10:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:03 2025 by rpki-client