Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67F6E98CD7CB11EFA27A3984762E951A.roa
File: 67F6E98CD7CB11EFA27A3984762E951A.roa (raw, json)
Hash identifier: qW/KKT/mG06gwhtSM35hpB1WexKHG3ewxUuomm+NLms=
Subject key identifier: AF:88:6E:9F:82:E1:4D:82:BD:FB:D6:26:4D:21:4C:9B:DE:1D:16:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CD2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67F6E98CD7CB11EFA27A3984762E951A.roa
Signing time: Tue 21 Jan 2025 07:43:29 +0000
ROA not before: Tue 21 Jan 2025 07:43:26 +0000
ROA not after: Sat 01 Feb 2025 07:43:26 +0000
asID: 44559
IP address blocks: 156.246.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68818 (0x10cd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:43:26 2025 GMT
Not After : Feb 1 07:43:26 2025 GMT
Subject: CN=678f5021-13bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:b7:ed:11:2a:87:a3:1a:a5:5b:ab:a8:ab:
2e:49:23:b3:10:45:a3:30:c0:d8:21:20:36:fe:18:
f8:bd:10:de:01:c6:48:94:b7:24:7f:33:ca:74:4f:
56:30:67:fc:c6:29:c4:65:5a:35:b8:a9:61:8c:ef:
fa:df:d4:7f:f2:7e:9d:f4:c2:e2:c6:3a:db:ad:8c:
30:97:91:4c:47:2a:ab:3f:18:46:4d:a7:8d:d3:35:
bc:bd:84:7f:b8:6d:89:04:75:cd:79:dc:94:d3:fa:
f7:c3:fd:ed:36:91:ec:8c:88:15:c8:6d:11:e3:f1:
01:42:22:84:be:07:09:fc:27:f7:71:01:80:fa:f1:
09:de:af:3d:dc:38:1f:62:72:89:35:ec:69:f4:3c:
20:75:b3:6b:47:bf:fc:9a:31:99:d4:19:37:72:2e:
bc:a8:5a:26:c5:86:f5:ea:81:4f:12:a5:45:54:f7:
04:92:0a:34:c3:73:96:72:7f:b8:32:83:46:7c:0a:
ed:8c:b5:8c:4e:fb:47:44:22:18:5b:db:3c:65:e0:
89:2a:ca:31:36:01:7e:4f:32:88:7c:58:c2:b5:37:
95:45:34:22:a6:50:0a:a9:1a:53:38:cf:95:a8:ea:
2d:6f:d1:d5:8e:e5:be:bb:8b:1e:cc:1e:ca:87:05:
65:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:6E:9F:82:E1:4D:82:BD:FB:D6:26:4D:21:4C:9B:DE:1D:16:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67F6E98CD7CB11EFA27A3984762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a9:f0:ae:0c:bc:c6:ea:e7:91:35:7f:89:86:84:64:48:b8:
77:ab:ad:92:ad:00:cd:a0:27:96:b9:01:35:96:39:9e:47:9b:
f9:5d:3f:5e:4f:6a:b7:09:fc:f0:e9:92:db:73:87:32:17:09:
bd:ab:83:64:50:d9:a3:1e:34:02:80:00:91:e7:95:48:a2:6c:
8b:36:c0:9f:e7:da:0c:63:14:e5:1d:76:f8:ff:31:cd:55:a4:
87:c1:40:11:81:33:61:fb:2a:82:81:66:08:5a:18:41:49:97:
2a:f2:ce:73:04:6b:d1:4c:a1:80:4e:ee:1f:29:d0:e5:82:88:
99:37:13:1b:d6:79:e2:b8:96:d3:47:32:1c:87:ff:9e:81:f1:
83:49:ea:49:6c:98:40:3d:40:79:47:95:90:31:d8:fa:c8:77:
54:23:8e:bd:38:86:65:7e:39:5c:78:5e:14:ef:6d:11:b1:03:
0a:60:e5:08:c6:23:04:a1:6c:3a:00:fd:61:1e:69:5c:87:a7:
ae:f0:4d:97:68:b5:6b:59:c8:a6:59:54:17:77:97:56:d3:c0:
3e:15:0d:72:b3:ce:05:4a:1a:f5:de:fd:0d:8a:be:ee:14:a8:
93:7d:d7:22:ba:4e:32:99:1d:37:4f:2b:b5:e8:41:1a:47:19:
0b:8d:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:22:37 2025 by rpki-client