Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/690F9556D7FF11EFB37C2154762E951A.roa
File: 690F9556D7FF11EFB37C2154762E951A.roa (raw, json)
Hash identifier: KcW+K2Q8BZa/khbQHi3PfPTZsaqorFZ9YE2zcZkD+7A=
Subject key identifier: 12:07:29:50:FB:CF:F0:10:6E:2F:C3:02:D2:89:AE:2C:0A:21:9C:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/690F9556D7FF11EFB37C2154762E951A.roa
Signing time: Tue 21 Jan 2025 13:55:45 +0000
ROA not before: Tue 21 Jan 2025 13:55:41 +0000
ROA not after: Sat 01 Feb 2025 13:55:41 +0000
asID: 48031
IP address blocks: 156.246.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69106 (0x10df2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:55:41 2025 GMT
Not After : Feb 1 13:55:41 2025 GMT
Subject: CN=678fa761-b856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:5d:0c:58:5a:55:70:b1:29:6b:56:28:2c:
db:0f:c8:70:60:5d:56:d5:26:4c:dc:3f:fd:97:ec:
bc:89:7c:af:69:8b:9c:76:2c:0c:43:9c:88:3d:8a:
3e:cb:22:24:01:53:58:93:fd:7a:01:48:12:66:85:
4d:f1:0d:72:3a:36:c6:f0:53:9f:16:af:43:5c:81:
3e:8c:57:87:b5:c1:53:c7:59:f0:b9:a4:7d:a2:e3:
d0:ba:1f:cb:0d:a2:b3:75:dc:0f:ab:63:0e:1f:70:
9f:fb:65:c4:93:18:4a:04:55:10:d2:70:20:3a:83:
c0:21:ee:5b:bd:11:6b:d9:03:bb:a8:2b:21:8c:3d:
dc:81:4c:4f:96:14:82:ef:61:55:2e:9d:ce:78:37:
8f:8a:aa:02:39:79:bf:74:ee:eb:ac:63:02:ef:a8:
da:19:66:48:4a:59:af:d1:2f:c2:8e:69:fe:e3:e0:
65:af:f4:37:61:9e:31:d4:82:40:d4:71:a2:12:45:
97:1d:f9:9a:b5:69:d8:c8:26:ba:21:f3:6e:8d:a9:
be:fe:4d:24:d8:f6:d8:bf:28:09:c2:dc:2f:3f:aa:
b1:06:1e:b0:8b:e0:27:04:52:d8:f3:a4:b1:d2:4e:
df:11:50:f6:f5:f3:48:37:8f:3b:99:5f:6f:63:17:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:07:29:50:FB:CF:F0:10:6E:2F:C3:02:D2:89:AE:2C:0A:21:9C:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/690F9556D7FF11EFB37C2154762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.146.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d9:ea:99:cd:bb:b3:b3:55:3f:af:54:dd:04:00:3e:5b:f3:
8f:3f:76:69:56:3c:1b:88:1d:0d:07:df:bb:a3:54:3f:f6:01:
5a:a6:d4:60:89:21:b3:08:fa:fa:be:9f:94:d6:2f:e4:40:f1:
2c:ed:fb:19:e0:9f:e8:ed:5f:07:65:86:4c:56:0d:0c:b2:eb:
91:32:94:fc:61:a3:2d:4f:dd:d9:33:f7:fa:7a:ad:67:90:fc:
96:bb:79:3f:1d:de:23:f7:ae:c9:ac:f7:cf:d3:1d:c4:b4:31:
84:e3:8a:71:3a:96:ad:ff:65:8b:f6:31:26:09:4e:3f:84:d1:
74:cd:ae:a5:83:6f:9f:6f:e5:de:55:62:68:e8:fd:29:1e:11:
d5:a6:1f:24:99:77:9f:56:bf:d4:56:4d:64:12:d4:1e:02:81:
e5:28:f7:7b:48:07:14:47:33:68:7b:f8:1e:37:81:ce:48:e7:
a6:b6:47:ea:9b:c6:89:d8:27:88:d9:29:27:ea:b9:d6:78:11:
2e:a2:ec:3a:34:36:83:90:9e:f3:8c:da:ea:a9:16:b0:b5:f6:
5f:ce:06:e0:12:f2:93:71:77:b6:37:90:c4:e1:cf:d7:5a:19:
96:24:e7:e3:9c:40:6d:4b:fb:b9:7a:16:7f:4c:22:9d:f7:cc:
42:48:3d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:36:26 2025 by rpki-client