Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DFCB27EDA8411EF9802EAB3762E951A.roa
File: 6DFCB27EDA8411EF9802EAB3762E951A.roa (raw, json)
Hash identifier: bbmRKdnDRWhfjz/qpDm+IfgIl7mMMncnDJBIL/kh8oo=
Subject key identifier: 33:E9:B9:0F:86:86:26:B5:7F:59:AC:14:58:CF:F7:94:A8:D4:30:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011026
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DFCB27EDA8411EF9802EAB3762E951A.roa
Signing time: Fri 24 Jan 2025 18:52:59 +0000
ROA not before: Fri 24 Jan 2025 18:52:55 +0000
ROA not after: Tue 25 Feb 2025 18:52:55 +0000
asID: 44559
IP address blocks: 156.246.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69670 (0x11026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:52:55 2025 GMT
Not After : Feb 25 18:52:55 2025 GMT
Subject: CN=6793e18b-bf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:2d:50:e6:9c:d0:d0:2c:c0:78:88:38:7f:
f6:e1:b5:b3:5f:1f:85:38:e7:ff:e6:8d:26:0b:5e:
1d:6d:11:94:de:9f:4b:d8:0a:45:22:f9:39:59:de:
34:df:7b:d6:40:02:11:47:18:b6:aa:b1:08:34:fe:
e3:0e:f8:e7:72:8f:c6:97:d3:99:e2:cc:13:f9:ea:
4c:d0:a6:d4:05:10:c3:05:40:78:a0:9b:5d:7d:98:
3b:3d:06:10:c2:df:a5:d6:06:d8:de:b5:a5:eb:61:
f8:b0:73:d9:6a:f2:12:ef:60:43:8b:28:2e:6b:0e:
09:aa:ac:5d:f7:60:84:63:4c:bf:4c:6c:6b:b1:bd:
d3:b2:e5:58:3a:d1:7e:a1:e7:c6:9d:5f:63:a3:bf:
f8:6c:8a:72:ec:ba:ea:5e:28:61:71:ab:07:6e:96:
4b:6b:5a:3c:36:79:58:46:73:7b:20:bd:0e:56:2f:
a3:da:33:d6:0b:73:24:36:27:cf:4e:f5:f3:b9:1a:
42:31:c4:84:52:56:b2:c2:c5:be:23:93:ee:d7:76:
3f:bb:f9:e3:23:41:7b:2b:c6:0b:25:05:e7:68:4c:
3c:4a:91:bd:b8:00:42:aa:7f:85:5e:b2:83:75:21:
27:ae:e0:6c:83:88:5b:c1:5d:50:77:1a:98:77:17:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E9:B9:0F:86:86:26:B5:7F:59:AC:14:58:CF:F7:94:A8:D4:30:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DFCB27EDA8411EF9802EAB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.181.0/24
Signature Algorithm: sha256WithRSAEncryption
34:80:67:57:ab:5e:b4:b0:1c:31:07:cc:71:9c:03:c1:f7:fe:
f6:f8:41:29:89:3a:9f:7e:a3:9e:0d:f8:7c:73:0a:d5:c8:c7:
88:d3:2d:d6:79:bf:fb:06:8e:e7:59:1b:f0:23:ce:26:2e:2d:
2d:91:b3:92:7c:42:24:8e:d0:7e:5d:ca:d7:18:42:36:ab:fa:
ab:df:ae:91:31:17:45:9e:f5:a1:c9:85:16:4e:de:51:1a:cb:
11:6c:79:a4:4f:d9:53:c6:07:5e:89:ef:d0:e5:44:38:37:7d:
67:06:4b:b0:c6:c7:a9:28:7e:d7:79:3a:a4:e3:81:05:53:06:
a8:46:0a:70:a6:72:17:8f:56:01:6b:37:87:05:90:bd:82:4e:
cd:15:5c:0c:23:24:e8:d9:3b:dc:ed:62:c9:3a:28:94:8b:af:
43:59:79:01:6c:03:b2:e6:b3:d6:85:87:64:5e:57:60:6d:8d:
60:02:42:05:d6:91:32:1c:c9:a2:d2:00:64:c8:ac:36:24:ee:
e8:ac:53:97:18:b2:b6:1f:99:60:cb:ae:5f:17:dc:47:eb:51:
08:b8:05:60:67:c2:d2:b5:1f:38:e1:cf:2b:f8:58:a2:36:84:
2d:bc:a0:b0:48:11:57:50:5d:3c:49:b1:96:40:cc:5c:06:38:
66:76:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:34 2025 by rpki-client