Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D9673DCDA7611EF8D112D58762E951A.roa
File: 6D9673DCDA7611EF8D112D58762E951A.roa (raw, json)
Hash identifier: t4SgT5pz5ahH1YMcNriOEsucc2bEkzBA2SKql6pfH98=
Subject key identifier: DF:55:64:7B:56:12:6D:85:F6:AA:B9:9C:A3:01:B0:7B:4C:D3:71:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FCA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D9673DCDA7611EF8D112D58762E951A.roa
Signing time: Fri 24 Jan 2025 17:12:45 +0000
ROA not before: Fri 24 Jan 2025 17:12:42 +0000
ROA not after: Tue 25 Feb 2025 17:12:42 +0000
asID: 44559
IP address blocks: 156.246.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69578 (0x10fca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:12:42 2025 GMT
Not After : Feb 25 17:12:42 2025 GMT
Subject: CN=6793ca0d-3c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:84:83:04:75:eb:6f:92:42:79:56:e2:18:
15:af:ff:fb:63:2c:f0:6d:1c:9e:41:3c:c1:5e:2e:
0d:91:9e:2c:de:ca:25:2d:f2:38:e8:e4:91:b3:a9:
12:f2:a1:c2:45:2c:d2:ee:7b:11:b7:43:cb:82:8f:
e3:0e:8f:d1:35:a2:75:11:5a:a7:bc:6c:c9:f6:3d:
cb:76:65:51:04:ac:d5:e2:cd:a5:a0:fc:10:6a:5f:
e6:8f:f6:bf:99:b9:36:2d:28:33:84:1f:a1:a5:e2:
f8:b3:a2:d2:27:24:20:6a:21:74:e7:20:8b:df:a8:
e3:cc:02:8d:e2:19:82:7c:ac:b5:9d:1e:19:66:d9:
f1:9d:12:1f:d4:b5:f6:93:79:44:d6:05:00:8e:1d:
45:d2:a1:f3:19:c0:fc:12:0b:4e:a9:0a:34:bc:97:
47:12:8d:8f:0e:57:68:e0:5d:03:21:70:ad:cd:4b:
66:ac:d7:a0:e3:65:10:62:23:de:a4:83:1e:67:aa:
95:07:73:24:a0:31:e4:08:2d:39:fd:e2:8f:cd:f2:
7e:bd:8e:ed:41:cc:d0:29:eb:12:68:98:42:a5:38:
25:db:30:aa:31:f8:fc:01:60:61:45:f0:88:c7:9d:
ac:26:6e:e9:ad:4c:6d:c5:c6:91:17:91:aa:33:7f:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:55:64:7B:56:12:6D:85:F6:AA:B9:9C:A3:01:B0:7B:4C:D3:71:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D9673DCDA7611EF8D112D58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.184.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:10:6c:25:b7:e0:54:05:75:7f:1d:92:59:ee:30:f9:0f:bc:
8f:bb:6a:cb:f8:5c:db:5f:78:01:ed:93:f1:4d:6f:e3:a2:ad:
1d:08:05:04:20:a9:0a:e8:e0:f9:c9:c0:38:89:cc:10:31:09:
e8:03:b2:a6:85:04:dc:d6:e0:9a:60:99:d7:13:a9:95:ec:93:
f0:49:89:3a:4b:fe:0e:25:a0:93:71:16:2a:a7:23:33:2c:a3:
37:ff:c2:cd:50:dc:bc:c1:19:0c:ad:77:9c:8d:a4:87:d1:db:
89:ff:f2:4a:4c:7f:86:65:fa:ca:85:bc:49:f1:aa:3e:c4:c4:
3e:5f:02:46:f7:b8:1d:e7:a2:04:c1:cb:e2:83:b6:f7:1d:8a:
df:af:9e:01:15:37:8e:97:54:7e:85:23:cd:8e:e9:ef:84:5c:
3c:d7:17:fc:76:44:e6:17:a7:72:4b:c8:9a:3b:c5:84:f4:2c:
8a:9c:59:f3:f9:dc:11:df:08:27:2a:d6:96:43:74:ec:69:67:
02:00:31:c0:71:c6:07:34:a5:e7:5d:d7:ec:d4:91:b5:dd:b5:
41:ef:44:52:03:6e:1d:e8:26:52:94:9b:c9:10:96:0c:dd:6f:
ff:25:d5:d4:1a:f0:78:ed:d5:c0:cf:5e:d4:1f:36:02:93:b6:
63:f7:b0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:28 2025 by rpki-client