Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76E86EF2D7F311EF9B0ECC86762E951A.roa
File: 76E86EF2D7F311EF9B0ECC86762E951A.roa (raw, json)
Hash identifier: RPZZf5BW87GwyI1g0UTUTXPUO9KNUA1JmUvgqipcrcE=
Subject key identifier: 77:8A:1B:7A:53:F5:13:90:8E:96:E4:F0:0E:CC:D2:42:17:4F:89:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76E86EF2D7F311EF9B0ECC86762E951A.roa
Signing time: Tue 21 Jan 2025 12:30:15 +0000
ROA not before: Tue 21 Jan 2025 12:30:11 +0000
ROA not after: Sat 01 Feb 2025 12:30:11 +0000
asID: 44559
IP address blocks: 156.246.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69026 (0x10da2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:30:11 2025 GMT
Not After : Feb 1 12:30:11 2025 GMT
Subject: CN=678f9356-26ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:eb:8c:a4:7f:23:0e:3b:60:ba:79:bc:8c:
1d:3e:f6:f4:f1:47:e3:8e:a7:7d:e0:63:9b:21:79:
cc:10:19:46:ed:a1:88:0f:0c:02:bc:78:f1:f9:d3:
3b:d7:56:7d:88:b1:1a:c2:28:0f:d6:a7:fb:15:c1:
82:54:64:08:d7:e0:34:1b:13:ea:fe:74:14:24:38:
e8:ef:91:cd:32:d5:d3:2a:d7:27:0a:a0:b6:5c:ba:
e0:6e:5b:2a:5b:1d:8e:9f:d3:93:50:fb:18:6b:86:
84:d0:62:a1:c5:41:73:1e:17:2f:fc:5a:ee:b1:56:
65:3f:28:65:4f:ed:78:bf:db:c2:a5:b0:90:a8:0b:
13:c8:fc:2e:f2:d2:49:21:37:89:5a:51:15:43:9f:
33:1e:e5:77:c6:50:c8:d7:93:f9:52:c7:52:c7:59:
10:f9:d6:37:b7:9d:57:bf:ba:02:a7:93:e3:1b:09:
84:15:27:4e:f1:8d:19:04:30:55:31:9e:8b:cc:01:
2c:21:91:ea:15:c2:aa:5d:f1:4b:f4:cf:98:68:90:
12:7a:ed:e7:ed:80:62:09:36:00:87:76:05:12:41:
d7:04:ed:ae:65:79:a0:52:7a:9b:2b:18:69:86:e3:
75:ab:c5:a2:52:7d:60:a1:f7:80:79:18:5d:18:0c:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8A:1B:7A:53:F5:13:90:8E:96:E4:F0:0E:CC:D2:42:17:4F:89:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76E86EF2D7F311EF9B0ECC86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.242.0/24
Signature Algorithm: sha256WithRSAEncryption
16:1b:1c:ae:4a:04:e9:3e:fe:d5:c0:eb:67:74:0a:04:61:d2:
ed:16:80:68:50:90:22:05:49:d8:20:80:df:a0:90:dc:64:ef:
22:0c:05:68:56:ff:d0:61:d2:c3:08:c9:66:9c:4e:6e:e8:53:
eb:79:b1:82:67:85:57:57:09:22:00:bf:24:7c:10:a1:eb:6f:
09:24:71:72:6f:9d:b0:ea:ed:57:cc:75:ff:1c:24:e9:9a:f3:
7e:da:3b:87:8b:e0:cd:04:9a:9d:44:dc:b7:d3:6d:dc:7f:45:
5c:e6:75:f6:43:f6:f1:63:60:1e:a1:7f:0f:ee:e9:6c:b4:a2:
38:98:38:fe:bb:98:09:91:e7:1f:c7:c4:ef:bb:3e:0b:b2:9a:
63:b5:93:d6:b3:b1:e2:cf:a5:bc:52:c9:c2:2b:b7:df:e1:56:
95:b1:37:18:06:9c:c3:54:e7:09:90:e2:8a:7e:9c:d5:cd:a8:
4e:1d:95:90:de:bc:e1:16:f5:16:91:b6:20:ed:8a:ad:fe:c4:
f5:50:ce:1d:17:e8:e5:17:4c:85:dd:59:83:e0:cd:68:90:bf:
53:5d:cb:2d:f9:0e:61:48:16:62:c8:fb:73:71:9f:0b:a6:f0:
d4:0c:c2:f8:65:1e:51:74:8a:7c:f6:bf:9a:a5:1d:67:ec:01:
9c:92:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:40 2025 by rpki-client