Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6127CE02DFF311EF9265105C762E951A.roa
File: 6127CE02DFF311EF9265105C762E951A.roa (raw, json)
Hash identifier: oxozS/Lb/vg9pnH8VVqTaOf6tmxd7C/XeCBbFkCM+Lw=
Subject key identifier: 14:8E:70:A6:F3:37:C0:DB:82:05:17:BF:E3:8D:4E:59:85:A2:7A:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011683
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6127CE02DFF311EF9265105C762E951A.roa
Signing time: Fri 31 Jan 2025 16:49:47 +0000
ROA not before: Fri 31 Jan 2025 16:49:44 +0000
ROA not after: Tue 25 Feb 2025 16:49:44 +0000
asID: 62468
IP address blocks: 156.245.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71299 (0x11683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:49:44 2025 GMT
Not After : Feb 25 16:49:44 2025 GMT
Subject: CN=679cff2b-3495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:58:ec:31:d5:02:20:65:cb:54:bd:5a:45:
b8:17:09:85:41:b8:e9:b2:64:af:6c:05:5a:61:2f:
e7:57:f0:4d:d5:5e:ea:ee:42:19:f0:8f:74:15:28:
fa:de:01:ac:fc:b3:2d:26:4c:1f:cc:e1:9b:ae:ff:
66:31:74:db:c8:a5:94:69:53:18:f0:5e:79:06:b9:
3b:eb:9f:b6:a5:60:82:5f:51:b9:a7:c1:cc:fb:93:
9f:61:68:a4:23:d8:99:32:2c:a8:28:24:e6:6f:9f:
4d:6d:cc:f7:40:2e:79:40:b0:0d:dc:6c:52:25:0e:
7a:7b:13:bb:de:83:76:66:79:d2:23:6e:24:6e:96:
2f:c8:2e:f6:88:ff:12:03:4b:d4:c1:4f:1f:6b:b4:
4d:f0:9c:59:a8:1d:e9:75:c9:18:8d:c3:51:e6:ba:
37:e2:64:75:3c:a4:83:09:e2:ca:c4:fd:35:28:ac:
21:d9:f9:a4:99:5c:68:bb:eb:99:92:16:e8:84:ca:
3d:2f:41:ee:d4:4a:99:ef:aa:a3:13:c9:36:5d:f0:
5d:ec:17:25:d0:00:7a:68:18:50:c1:97:0e:a2:f1:
a4:b2:8d:47:96:08:0c:c6:00:1a:35:0d:07:88:c0:
07:2d:8d:35:d5:7b:0c:7e:bb:8d:da:17:d5:f0:36:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8E:70:A6:F3:37:C0:DB:82:05:17:BF:E3:8D:4E:59:85:A2:7A:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6127CE02DFF311EF9265105C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:b4:74:a3:c2:ac:ea:01:58:18:e9:18:91:ac:c4:76:b6:10:
0d:86:30:7b:1d:e3:dd:ce:fc:f9:a5:28:5c:2a:56:e0:bf:c3:
54:12:5f:ed:f7:22:9f:d3:f1:b9:2d:18:2b:00:2d:2b:3e:bc:
40:a0:60:ee:83:9e:6d:b4:5e:19:2f:2d:66:b2:29:25:55:59:
6b:5e:44:22:c5:a4:ba:23:1e:55:8a:3d:3c:0b:55:fc:56:ef:
a7:7f:31:4b:b4:c6:93:0b:c1:d4:f7:d0:39:4e:a2:44:ea:e8:
3f:c6:4a:c0:31:7f:d6:ee:c0:7d:3e:90:e6:96:40:f6:b3:27:
cc:32:c7:d8:4f:29:47:1e:e5:b3:95:e7:ba:8b:db:99:39:da:
3a:2e:f4:b0:6b:58:5a:18:61:df:19:47:ac:8c:70:4b:51:40:
ec:8d:15:32:7c:c3:13:a2:02:ab:b2:70:46:53:46:45:93:04:
11:85:f5:40:68:cd:66:c2:c0:f1:d3:93:42:9a:c9:34:81:af:
99:77:f7:d5:a3:90:b6:33:7b:e4:dc:58:74:d5:02:99:fb:c3:
8c:18:72:89:29:c6:c2:e9:cf:44:46:ba:47:03:a5:b8:2c:d7:
1f:3c:e5:8a:94:fd:85:81:aa:20:41:69:e0:53:64:96:7b:c3:
83:61:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:59:29 2025 by rpki-client