Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61884E3AC33811EF8BB66F83762E951A.roa
File: 61884E3AC33811EF8BB66F83762E951A.roa (raw, json)
Hash identifier: QCTA4iLKDvteRCzObfOZ/H6ktcOHb2j61UkXisMsBss=
Subject key identifier: 7D:9E:B7:E0:5B:A0:EB:40:28:AE:79:63:96:8B:BE:BC:90:7F:61:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61884E3AC33811EF8BB66F83762E951A.roa
Signing time: Thu 26 Dec 2024 03:20:39 +0000
ROA not before: Thu 26 Dec 2024 03:20:36 +0000
ROA not after: Fri 10 Dec 2027 03:20:36 +0000
asID: 17561
IP address blocks: 156.244.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60261 (0xeb65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 03:20:36 2024 GMT
Not After : Dec 10 03:20:36 2027 GMT
Subject: CN=676ccb87-9865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:5b:71:ac:80:6d:9c:19:3f:f7:de:71:ea:
86:bc:1a:e2:6d:59:a4:e4:5d:13:b7:b9:98:7b:c5:
28:a4:1b:81:a1:ea:a4:7b:33:cd:d5:15:d9:35:28:
f5:41:69:8c:d5:06:6f:dc:8f:30:de:a3:d7:2e:f0:
81:05:79:41:8f:88:19:eb:57:ed:c7:97:27:da:ad:
38:73:ad:58:69:c7:a9:75:1c:a0:16:40:64:8f:c0:
21:a1:67:db:e3:f5:c2:29:18:68:af:f7:1f:28:ee:
36:de:97:d9:0f:a7:28:14:76:92:0d:bd:e7:1c:84:
fd:da:a3:6a:47:89:91:eb:4a:1e:6a:0f:4e:eb:d4:
44:99:e2:87:9d:34:a7:56:2f:b2:0d:85:2b:30:0d:
47:02:03:47:b4:52:fc:ca:76:e0:53:6c:e2:fa:66:
41:6b:20:30:bc:89:99:66:ae:72:30:d7:95:a6:ba:
a7:cc:6c:c6:76:92:f2:40:66:8a:04:f1:20:64:3e:
1c:e7:eb:fb:3b:d7:c0:12:ab:cd:06:e1:28:00:0e:
50:18:b7:2d:43:8a:05:04:68:6b:77:3b:4d:05:f9:
b8:c1:4f:f5:4e:ae:2e:f3:4f:c3:6f:21:23:7f:be:
45:83:bf:d1:45:3e:fc:c4:16:22:de:ff:54:be:77:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9E:B7:E0:5B:A0:EB:40:28:AE:79:63:96:8B:BE:BC:90:7F:61:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61884E3AC33811EF8BB66F83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.174.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4e:90:e5:86:51:7e:a4:03:21:96:12:40:7c:d9:74:0d:51:
f5:c7:ab:d7:e4:37:82:9e:12:ff:b7:db:51:e7:8c:41:bb:c6:
00:15:2a:95:fa:67:49:a7:19:8e:68:82:40:2d:04:09:53:26:
a8:58:85:88:51:3b:70:d8:8c:04:32:75:fa:f2:c2:af:c1:25:
bc:f5:f4:19:d0:b7:6e:c6:46:dc:79:1b:87:6d:45:4c:70:ea:
ec:34:8e:38:33:d5:2b:89:da:1b:29:57:27:f8:b0:d0:47:c1:
9c:10:f3:fc:b1:b2:47:23:56:b7:f7:2d:d5:0b:af:15:0e:30:
b9:0a:b2:8d:e8:af:0a:eb:db:63:0f:e2:42:aa:60:89:d2:d7:
ce:c3:b3:e6:d7:bf:16:7f:07:c4:9e:1c:ee:ac:8d:78:42:bd:
02:1a:cf:73:c7:87:79:e4:ea:41:97:85:86:0e:08:2b:2d:8b:
ca:9e:03:c9:1b:ef:e7:8a:8d:11:2f:e0:2f:39:2c:1e:c1:d6:
94:46:b4:13:99:1a:67:01:db:d8:06:d8:15:92:ac:91:36:61:
99:29:07:00:60:dc:07:ae:f8:31:22:75:fb:ec:c6:e0:f2:83:
2b:3b:34:8d:0d:ba:17:3b:ba:c3:d3:8f:14:a3:d0:44:0c:9a:
2c:e0:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:34 2025 by rpki-client