Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6667F266DAF311EF85358DAA762E951A.roa
File: 6667F266DAF311EF85358DAA762E951A.roa (raw, json)
Hash identifier: OhJV40AFEziP1oDgm2M/ItgVIDhsoFQ1y+rGMibe6Pw=
Subject key identifier: 8D:69:D5:C7:5F:01:BF:A1:BA:3A:04:97:67:C3:5E:E6:25:B0:16:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011168
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6667F266DAF311EF85358DAA762E951A.roa
Signing time: Sat 25 Jan 2025 08:07:20 +0000
ROA not before: Sat 25 Jan 2025 08:07:16 +0000
ROA not after: Sun 23 Feb 2025 08:07:16 +0000
asID: 44559
IP address blocks: 156.246.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69992 (0x11168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:07:16 2025 GMT
Not After : Feb 23 08:07:16 2025 GMT
Subject: CN=67949bb8-4e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:27:08:5a:c5:f2:0d:38:0a:ba:ba:d4:19:
0e:17:bf:88:44:68:2d:7b:58:a7:08:de:ad:ce:9a:
f3:3d:ef:f1:18:d9:71:ab:20:72:8a:78:c4:ab:ad:
06:23:6a:ab:e7:c0:95:a1:0a:c6:b3:81:ed:fc:7f:
7f:90:5f:7b:f4:55:53:b1:f7:05:d4:96:59:eb:24:
d7:e2:c9:50:67:3d:80:9f:91:7c:fe:11:8b:16:9c:
b8:a9:2e:f8:52:fa:28:d6:d2:0d:fa:b9:ff:3a:06:
d0:d7:91:d4:74:12:03:1e:c8:f5:e9:79:cc:b5:e1:
ee:53:83:46:3e:52:b7:78:37:94:aa:5c:0a:94:c1:
a5:a8:ea:ba:3d:af:82:82:7e:ad:52:43:55:79:e9:
6a:0c:97:2e:bf:07:1f:94:9f:16:c5:e1:3d:9e:86:
bd:01:b9:6b:10:59:84:f3:f9:4b:98:cc:52:56:c9:
4c:a2:07:2b:24:39:32:0e:3a:e3:6b:5b:a6:8f:9d:
b6:d4:59:20:56:41:1f:84:e8:72:28:7c:1e:96:2b:
71:94:72:57:ab:da:f3:78:b3:3b:f0:d7:31:df:db:
a6:67:fb:5e:20:e0:a8:07:87:45:6e:87:03:34:60:
ee:e6:22:d7:c2:51:08:cb:b0:a2:a5:58:2b:38:b6:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:69:D5:C7:5F:01:BF:A1:BA:3A:04:97:67:C3:5E:E6:25:B0:16:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6667F266DAF311EF85358DAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e0:cd:89:27:aa:d6:f6:3a:c5:4a:10:71:42:bf:68:89:cf:
9b:11:22:34:bc:e0:55:48:2d:5f:7e:4a:13:91:13:67:3b:f0:
71:31:00:16:db:4f:2d:1b:c4:61:cc:c3:3c:d3:4a:65:e8:77:
81:ae:a5:8a:37:a6:3d:aa:2f:88:e5:19:4a:50:ac:ec:4c:54:
40:ce:3e:79:6d:a8:b9:25:16:70:8e:97:f7:3f:f5:b0:1a:f7:
02:38:61:29:38:d8:13:a9:54:c8:36:f0:7f:14:f2:3a:06:b5:
8b:6b:86:1f:4f:35:f6:56:11:f2:cc:65:44:f6:9c:b3:40:b8:
fc:5c:f2:02:fd:b3:6c:a9:7b:1c:dc:5e:76:6a:a4:6b:a7:78:
e5:86:dd:fd:68:7b:aa:e8:92:63:84:f1:ea:20:1e:8e:3b:c2:
bd:1a:b7:27:1a:29:62:04:d3:ca:35:17:e8:a9:22:cc:f5:2c:
9e:35:3d:03:1e:61:a1:59:d4:07:0b:94:09:c7:6a:a2:dc:47:
99:62:79:c2:39:16:94:f4:88:c5:4e:5c:bb:5f:10:97:5c:2c:
32:b5:ff:6c:32:2d:2d:a1:5b:7e:bc:29:a1:ad:c0:66:73:fe:
b2:4c:36:e7:ac:bd:09:e9:2b:ad:3b:fd:d4:52:8c:bb:00:6c:
d6:96:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:46 2025 by rpki-client