Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AE84FFADA8C11EF828C6368762E951A.roa
File: 6AE84FFADA8C11EF828C6368762E951A.roa (raw, json)
Hash identifier: ar6Ait1xKN9usa/pPmkOd7xDbW//GRQiuMj8H9dLeBk=
Subject key identifier: FD:A3:22:AA:9B:59:0E:4D:9D:E0:CA:66:49:34:1D:22:B2:BD:57:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01105A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AE84FFADA8C11EF828C6368762E951A.roa
Signing time: Fri 24 Jan 2025 19:50:10 +0000
ROA not before: Fri 24 Jan 2025 19:50:06 +0000
ROA not after: Tue 25 Feb 2025 19:50:06 +0000
asID: 44559
IP address blocks: 156.246.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69722 (0x1105a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 19:50:06 2025 GMT
Not After : Feb 25 19:50:06 2025 GMT
Subject: CN=6793eef1-8e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:c9:fc:35:c1:36:9d:e5:83:82:31:87:3e:
fa:c7:d2:e9:7c:5d:7f:ca:41:2d:d7:66:79:d1:bb:
e2:8a:4c:01:c4:4e:8f:d6:56:b0:fd:d8:6b:1f:7e:
49:90:b5:e4:4f:ec:61:bd:8c:48:30:12:9c:4d:70:
7f:db:57:c1:fa:36:45:3d:b5:16:aa:15:cc:0c:75:
a5:73:d6:c9:54:8b:f1:f8:5e:98:72:56:8b:83:51:
41:a7:e9:0d:e8:a2:a6:d9:da:67:2f:bd:eb:50:ef:
96:83:a4:ef:95:66:48:06:c7:52:7e:1e:b1:08:bd:
b1:6f:53:c8:06:1b:8f:32:0f:27:3d:78:67:43:cc:
1d:55:5b:f2:e1:ec:d8:14:69:8a:07:73:67:9c:1a:
f9:43:85:e6:a8:1d:6d:ff:8a:68:95:a9:85:c1:a1:
b7:c4:6a:bd:46:5a:2c:9e:76:44:b0:ab:d8:1b:b1:
c7:98:52:bf:81:70:40:12:98:e4:b8:41:2e:4d:90:
87:54:8b:34:95:ee:f9:05:76:e2:64:aa:fa:56:88:
d5:6a:b8:35:a7:5e:f7:93:bd:ce:72:1b:eb:bc:7d:
68:95:d2:dc:3d:2a:7a:26:97:66:a6:e6:22:50:d1:
7c:e9:ef:ea:5e:4a:28:2b:46:2e:3f:46:94:e6:03:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:22:AA:9B:59:0E:4D:9D:E0:CA:66:49:34:1D:22:B2:BD:57:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AE84FFADA8C11EF828C6368762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3b:08:4f:00:ef:84:3b:b8:dd:16:39:13:41:93:fa:96:22:
c9:cc:b2:b3:50:7b:57:98:4c:71:41:84:a6:b3:59:d8:a4:01:
ee:ab:98:55:a6:dc:a4:b3:33:f2:c3:13:d8:03:06:d1:30:6e:
06:6a:1e:ae:f0:8b:60:74:96:c0:05:3a:6a:5e:f1:29:38:de:
7c:d8:db:92:ea:ee:ef:d9:61:93:df:7f:0d:37:62:9e:df:e9:
e9:ea:83:00:33:af:87:54:7f:52:41:d9:1b:04:a8:f8:9a:1e:
bd:2b:0a:55:7e:46:16:94:d6:60:a0:82:ca:70:2d:c2:ac:e0:
be:0e:88:a3:98:7c:af:09:c9:f8:41:c2:e7:8a:ae:58:1e:58:
3c:f2:d3:73:cd:1e:da:f6:34:29:24:42:85:66:12:f6:c7:d7:
83:1c:49:61:dc:d7:dd:32:22:0b:bf:00:26:96:d8:62:47:38:
00:d9:75:02:ad:a6:c6:ec:21:59:64:d9:20:f9:7a:95:3e:d9:
b6:96:30:34:6c:6e:a1:03:19:f0:98:8b:76:fa:31:74:da:52:
6f:bf:c7:34:26:94:5f:df:7e:e8:90:47:30:f9:77:18:46:50:
88:5b:63:ec:70:98:61:3a:23:ed:87:d6:fa:e5:67:a5:d1:65:
41:33:ae:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:28 2025 by rpki-client