Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E39D7E6CD5811EF95850B56762E951A.roa
File: 6E39D7E6CD5811EF95850B56762E951A.roa (raw, json)
Hash identifier: os5+W7vIOFvpr+0AmdXrRlUOEuoU43ZmCosF1O8uVxk=
Subject key identifier: D5:98:99:AF:BA:54:AD:28:2A:EA:C9:9A:A1:EA:FF:48:AE:BA:A0:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E39D7E6CD5811EF95850B56762E951A.roa
Signing time: Wed 08 Jan 2025 00:35:16 +0000
ROA not before: Wed 08 Jan 2025 00:00:13 +0000
ROA not after: Sat 13 Dec 2025 00:00:13 +0000
asID: 984
IP address blocks: 156.247.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65269 (0xfef5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 8 00:00:13 2025 GMT
Not After : Dec 13 00:00:13 2025 GMT
Subject: CN=677dc844-e48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:6a:23:fe:05:8e:85:8a:8b:0f:64:6c:83:
21:2e:3f:27:41:27:cc:bc:c0:fa:41:b6:c8:f2:1f:
62:89:98:35:89:ba:5d:c0:1b:66:35:c1:e0:53:c1:
50:eb:fc:c4:90:df:0b:22:ea:55:15:d3:e3:5b:f4:
8a:57:36:e7:89:60:64:13:05:02:40:4c:11:67:2d:
05:49:60:3b:f9:08:e2:e6:3e:2f:30:2a:05:81:e5:
ca:6a:fe:47:e1:b4:5d:19:5d:78:d8:8e:6f:2d:77:
45:16:20:cc:45:72:81:f0:7b:38:80:af:48:7d:56:
37:64:0c:52:d6:63:2e:4a:f3:70:b2:09:b1:54:e4:
a7:a9:db:d0:4f:fa:9d:35:bb:7e:47:2b:ba:38:e3:
0e:fb:3e:49:4d:db:6b:13:51:29:85:d7:28:d2:68:
dc:31:e6:e1:fd:19:8e:7a:71:31:ca:cb:c1:06:2f:
4a:fc:e5:98:c8:1b:c1:e2:20:4c:dc:14:d1:d6:48:
0f:cd:43:88:39:54:1c:91:1a:4d:45:fe:fe:32:8d:
1e:3e:20:07:6d:be:20:36:11:78:af:33:3b:a3:09:
d3:b5:47:11:7a:a4:d3:fb:51:e9:1a:47:2a:e6:f6:
2c:11:69:2a:11:bf:b6:9e:43:13:43:30:80:18:45:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:98:99:AF:BA:54:AD:28:2A:EA:C9:9A:A1:EA:FF:48:AE:BA:A0:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E39D7E6CD5811EF95850B56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.67.0/24
Signature Algorithm: sha256WithRSAEncryption
16:59:dd:fc:24:54:b0:89:6b:33:54:6a:3d:a8:ed:e8:e2:f1:
2f:ad:d2:bd:55:01:10:c5:f1:72:7d:b5:be:90:67:90:80:4e:
fb:2d:c6:d1:49:c1:14:56:48:e2:2a:7a:80:2a:cc:69:68:57:
7b:5a:14:6e:41:b0:4b:3f:b3:9b:bf:fa:51:3c:ec:5f:a0:ec:
22:d6:b1:d1:3b:81:ef:8e:93:51:c0:5d:8c:30:2e:73:cf:71:
f2:9a:ca:42:5f:77:80:35:34:2f:24:7a:ef:62:5a:47:16:37:
f4:21:5b:ad:35:00:a4:35:4f:1e:10:cc:87:70:55:8d:f1:d6:
fc:cf:21:6f:45:2a:f4:6a:b9:40:31:e3:3c:8c:52:ab:15:c2:
61:58:04:15:92:dd:50:15:d7:a0:5e:0f:34:da:cf:71:51:99:
c9:29:20:b5:7e:c2:86:40:12:b3:31:8c:48:fc:0d:48:94:13:
65:f6:ed:6a:bc:b6:30:cc:5c:13:ad:46:8e:fb:a6:17:d4:2d:
8d:07:a5:c9:8c:ad:25:f8:b4:97:cb:f7:46:56:fd:ec:4c:b4:
6b:b2:f1:94:f0:12:38:5f:2d:00:eb:87:38:5b:cf:7b:ae:fe:
30:d8:c0:cb:a7:f0:bd:03:c6:d8:54:48:55:4a:bc:0f:27:76:
82:6f:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:31 2025 by rpki-client