Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68359B26D7FA11EFB1A2BAB2762E951A.roa
File: 68359B26D7FA11EFB1A2BAB2762E951A.roa (raw, json)
Hash identifier: T595A8Zdo7BxjFZYrNdjUYKPt2mm5y/B0/MJEv9JLz0=
Subject key identifier: 5B:0A:8D:B9:B6:9E:E0:A3:F1:F1:CF:0F:1A:CF:FB:A7:A1:C2:AE:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68359B26D7FA11EFB1A2BAB2762E951A.roa
Signing time: Tue 21 Jan 2025 13:19:56 +0000
ROA not before: Tue 21 Jan 2025 13:19:52 +0000
ROA not after: Sat 01 Feb 2025 13:19:52 +0000
asID: 48031
IP address blocks: 156.246.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69072 (0x10dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:19:52 2025 GMT
Not After : Feb 1 13:19:52 2025 GMT
Subject: CN=678f9efc-4cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:9c:10:a6:94:11:4d:14:6e:1f:91:0a:b6:
c6:84:f9:db:bd:b7:f6:19:43:c5:6f:12:7f:25:e5:
9b:2c:ad:56:3f:ac:38:2f:09:2f:45:65:4f:bb:31:
4e:8d:44:d7:fc:25:43:34:a9:33:14:46:2b:3c:1e:
96:e9:0f:2f:e1:86:65:e0:e3:47:a3:62:b0:c1:b2:
6e:c8:4c:46:d2:28:ab:7d:f9:0d:ec:7a:9f:5b:f7:
36:41:ec:8e:16:40:dc:9e:b0:63:01:c6:9b:10:ce:
76:f1:46:8e:42:4e:8e:b3:66:99:1a:04:07:e7:85:
13:a0:0f:79:1a:63:78:17:0d:e6:10:85:01:de:39:
ee:d1:7f:f3:42:c4:4d:e0:22:c2:8b:3c:6a:cf:e0:
c3:1c:c1:fc:8f:ab:49:bf:18:6e:44:b3:b1:78:c0:
5e:66:07:0f:79:7d:bb:d2:fa:48:6f:e1:1a:48:b9:
71:df:b9:f1:80:22:6c:47:01:b6:66:9c:6c:ee:db:
c2:0f:a7:c6:39:68:db:b9:72:7f:21:1b:db:47:7e:
02:ed:02:ad:c7:fc:4b:0f:14:44:46:85:b3:3f:65:
b9:ce:6f:9b:22:3f:e1:72:11:a9:d4:c4:f7:53:66:
4e:f9:c9:53:3a:79:fa:6b:b1:8b:f6:2b:a7:e9:53:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0A:8D:B9:B6:9E:E0:A3:F1:F1:CF:0F:1A:CF:FB:A7:A1:C2:AE:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68359B26D7FA11EFB1A2BAB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.137.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:6e:96:10:fa:dd:e8:4c:2a:12:be:c9:f9:40:90:b3:51:c5:
2a:eb:6b:5f:da:55:a6:1a:d1:86:b7:22:81:0e:78:45:7a:41:
f5:ee:d3:87:2b:e4:48:b6:44:7c:06:87:ad:79:4c:d3:e1:c7:
53:41:5d:cd:a1:d9:ab:31:f0:d3:42:0d:54:be:c1:7f:60:f9:
8b:91:35:1e:7d:96:12:5a:24:e5:74:fd:3c:ae:d6:05:21:fb:
09:d5:f5:22:6b:78:7a:fd:08:b1:6f:10:be:0e:d9:60:73:08:
7c:e6:5f:f0:e5:14:31:7b:6d:39:98:f6:28:01:ba:da:46:d1:
0e:15:cb:e1:66:c1:19:97:77:2f:86:63:da:8b:89:22:a2:72:
c2:2c:c3:00:0f:7e:00:73:52:13:3f:16:5c:42:23:b0:76:ed:
66:f0:f0:5d:63:c9:89:86:12:77:06:18:b7:ba:32:0b:c3:64:
f9:b0:42:cf:df:e1:a2:34:97:70:82:08:0d:8d:db:24:a8:ef:
be:dc:15:fa:2c:e6:4e:ea:2d:b3:8f:88:fb:ab:48:15:5f:2d:
d1:b2:03:5b:72:1b:68:84:1c:15:85:13:f4:cb:9b:f3:e6:19:
bc:76:14:cc:3a:9b:da:bb:f7:ea:dc:76:5a:33:9e:45:c6:89:
a2:14:a2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:43:08 2025 by rpki-client