Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/686B4DF4D95611EFB96B1ABE762E951A.roa
File: 686B4DF4D95611EFB96B1ABE762E951A.roa (raw, json)
Hash identifier: ANiNs+ncRPpKi5pQX34w3CLoQOvpgw2acuUiQF4KQSI=
Subject key identifier: A6:CC:3B:30:3C:81:E2:AE:AF:1D:39:A4:39:6A:3A:88:9D:61:63:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/686B4DF4D95611EFB96B1ABE762E951A.roa
Signing time: Thu 23 Jan 2025 06:51:01 +0000
ROA not before: Thu 23 Jan 2025 06:50:58 +0000
ROA not after: Sat 15 Mar 2025 06:50:58 +0000
asID: 138915
IP address blocks: 156.244.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69283 (0x10ea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 06:50:58 2025 GMT
Not After : Mar 15 06:50:58 2025 GMT
Subject: CN=6791e6d5-e2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:85:d8:ef:50:a5:b4:e3:f1:7f:4a:76:62:
bf:f5:4a:cf:2f:80:97:12:1c:ba:46:21:dc:91:52:
66:3e:46:3b:64:48:e6:4a:b7:ea:db:79:8f:ee:d2:
7b:f3:a9:2d:ba:d6:26:a9:9e:73:b1:2e:ba:65:4c:
53:30:2b:8b:e6:b6:b1:00:16:25:22:56:74:a1:95:
03:9a:8f:33:9c:23:b5:43:c7:1f:66:ae:39:a0:5b:
80:2b:3e:6e:9f:12:99:c0:0e:64:49:7b:6b:43:4e:
e6:9a:04:cf:bf:3f:3c:9f:57:81:d0:20:e7:d3:7c:
ce:92:60:3a:36:ce:c5:5f:a4:2a:b3:39:fc:a1:f7:
95:35:99:a2:3a:98:a4:c3:88:95:1b:2c:6a:a4:0c:
8e:2b:a5:6e:1c:8f:cb:28:da:59:60:7a:2d:67:83:
db:85:b9:a6:c6:c7:6e:45:c1:6e:5f:14:28:9d:77:
b7:15:7f:42:be:05:38:41:9f:1b:c9:55:42:4e:53:
82:38:0f:c0:12:fc:ef:fb:78:13:8c:d2:c2:aa:67:
2b:1a:06:11:de:6f:e3:35:99:bf:bb:32:2c:bb:8d:
23:f1:5a:3c:d6:68:fd:0d:f4:aa:56:21:b7:75:d5:
58:62:b5:b1:3c:c4:96:1e:1a:24:53:c7:ac:10:02:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CC:3B:30:3C:81:E2:AE:AF:1D:39:A4:39:6A:3A:88:9D:61:63:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/686B4DF4D95611EFB96B1ABE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e6:bf:36:0d:3b:93:10:ee:d6:a3:0d:b1:17:03:b7:43:03:
1c:13:ce:42:b6:90:83:99:a3:0a:43:9e:6e:f0:7d:a0:ce:eb:
cd:2a:95:aa:a7:99:5c:ae:60:ef:30:0b:a2:04:6e:6e:fd:a8:
30:d8:4a:a4:b6:b4:ca:aa:5c:2f:b4:9a:69:d8:61:60:db:fc:
51:af:9d:74:ba:99:82:ae:df:0c:ea:d5:9b:69:97:c1:b3:39:
42:12:17:51:e9:d1:0d:f2:17:a7:1b:34:2f:5d:a5:18:b1:55:
76:b1:58:de:3d:6b:bc:0a:30:8e:d5:b3:ef:46:e2:10:18:b0:
26:11:66:32:b3:5f:b5:86:b0:78:78:c2:78:1e:e1:ba:7e:5a:
4b:c1:72:5c:a0:21:a0:ad:ee:a2:89:a1:1d:9e:fc:fc:02:78:
ba:2f:ea:14:d5:20:4e:8c:6f:4a:59:7c:ca:4c:df:3e:e2:a4:
15:94:09:e2:6d:cb:ba:35:5b:b7:44:56:fc:11:b3:a1:73:b7:
45:a4:a0:5c:22:da:bd:06:8e:9f:b6:03:6a:cf:99:fe:7b:47:
d9:81:f4:46:60:1d:73:c3:d5:9d:24:7d:1f:c7:78:8c:3c:22:
47:53:f6:41:df:59:c5:e1:6f:f8:41:16:df:ee:4f:63:4a:ee:
d9:30:cc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:19:17 2025 by rpki-client