Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B5468D4DA7D11EF86D88886762E951A.roa
File: 6B5468D4DA7D11EF86D88886762E951A.roa (raw, json)
Hash identifier: 4Fgvsk0NJI7FUSYSXPbdiSbhrBDTqY+RlcfNjrZQ5Yc=
Subject key identifier: 19:18:C7:D0:A5:4D:51:06:47:48:75:C5:90:91:0A:B5:57:C9:7C:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FF8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B5468D4DA7D11EF86D88886762E951A.roa
Signing time: Fri 24 Jan 2025 18:02:48 +0000
ROA not before: Fri 24 Jan 2025 18:02:44 +0000
ROA not after: Tue 25 Feb 2025 18:02:44 +0000
asID: 44559
IP address blocks: 156.246.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69624 (0x10ff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:02:44 2025 GMT
Not After : Feb 25 18:02:44 2025 GMT
Subject: CN=6793d5c8-14bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:b9:63:ce:99:06:5f:20:70:c7:30:ee:d5:
da:f8:3d:df:13:40:50:cc:dc:87:f0:b8:2d:a2:d8:
89:18:06:fb:36:8c:52:1a:98:36:ce:ca:08:38:6b:
1e:43:29:34:71:6d:b5:fa:9d:ae:bd:0e:b0:bb:8d:
76:ac:cc:fd:45:84:39:28:fd:b4:fa:f4:16:6f:0a:
3a:3a:1d:cb:e9:9b:13:49:17:70:35:f0:60:bb:bb:
e9:3b:89:9e:76:10:af:38:63:9f:5a:a8:3c:c0:07:
25:7d:a2:cc:25:24:49:7c:da:8d:37:a6:00:f8:a3:
aa:ba:3e:40:06:9c:89:3b:fc:8b:97:19:dd:57:e9:
1d:c2:4c:be:b9:c9:f0:4b:c5:04:90:31:82:86:52:
0d:c2:ea:bb:b5:ba:e7:56:6d:51:f2:15:df:9c:a7:
51:cc:d1:ee:cc:c5:ec:36:17:51:cb:d8:c9:d7:23:
2b:68:ff:48:42:8d:cb:25:5e:f1:a6:3a:c3:57:c1:
cd:d1:bd:72:5d:fb:a7:f0:bc:f3:91:bb:db:1b:c2:
c3:df:8f:4f:09:fd:30:71:54:37:6b:81:29:91:0b:
06:d0:63:9a:8a:6f:76:03:54:3b:12:14:d1:62:79:
be:d6:4e:b6:b6:14:e7:b7:19:22:ee:50:f9:02:46:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:C7:D0:A5:4D:51:06:47:48:75:C5:90:91:0A:B5:57:C9:7C:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B5468D4DA7D11EF86D88886762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.153.0/24
Signature Algorithm: sha256WithRSAEncryption
65:25:6d:44:d1:27:0b:8e:aa:ea:82:2f:2c:11:59:8b:22:bc:
ec:00:4a:f1:79:28:76:3a:02:5c:78:71:25:ae:8f:75:15:67:
11:dd:bf:0b:5b:f5:68:9f:47:e1:ac:3a:d4:75:61:4a:46:9a:
f8:8a:f3:e9:67:38:92:36:91:28:64:e9:11:36:16:84:c3:e2:
e7:75:f0:8a:ef:84:04:38:80:bc:e7:42:23:13:e7:5d:17:ba:
e4:84:24:e4:6f:e1:95:7f:fc:ea:1b:79:12:1d:d1:01:76:8d:
5c:f9:a7:25:91:3e:3d:ed:e9:28:24:fd:f8:a3:d5:39:c0:f1:
96:82:1f:1d:7a:93:c7:13:07:ee:92:4b:c1:dd:30:ee:77:a4:
89:a4:29:36:a8:c7:17:33:af:40:b7:b3:f8:80:a6:ac:7b:19:
2f:7c:46:6d:8c:ee:e9:02:de:66:b7:2f:54:7c:ab:54:65:72:
0e:ae:5a:0c:e1:a8:b9:1b:21:bc:e1:9b:13:f9:df:89:7c:c9:
99:2b:8d:a1:5a:c1:17:92:ea:c4:3d:00:5d:c4:46:6c:92:0c:
98:0d:60:ce:93:2f:7d:a0:cb:df:d6:3d:3c:34:e3:49:55:5f:
d6:30:61:5c:e7:b5:44:1b:89:d4:e1:01:fb:a9:93:0d:f0:e6:
03:f1:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:46 2025 by rpki-client