Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FFEC03ADA8311EFB4CE70AD762E951A.roa
File: 7FFEC03ADA8311EFB4CE70AD762E951A.roa (raw, json)
Hash identifier: E0QtedH0ow9wS104Mnu2qFrX82qBGX/atveLovuBeLg=
Subject key identifier: A5:EB:AC:42:72:09:A7:4F:59:BC:5B:BD:6D:DF:AA:A7:70:F1:5C:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011020
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FFEC03ADA8311EFB4CE70AD762E951A.roa
Signing time: Fri 24 Jan 2025 18:46:19 +0000
ROA not before: Fri 24 Jan 2025 18:46:15 +0000
ROA not after: Tue 25 Feb 2025 18:46:15 +0000
asID: 44559
IP address blocks: 156.246.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69664 (0x11020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:46:15 2025 GMT
Not After : Feb 25 18:46:15 2025 GMT
Subject: CN=6793dffb-8f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:6d:2e:db:61:34:cc:37:0c:c7:34:47:b7:
d3:34:fc:6f:72:89:0f:29:08:40:55:ee:10:cb:e0:
1e:63:6b:8d:41:55:2e:1a:7c:66:61:d4:8a:7a:7e:
be:4a:8a:9a:f3:04:7e:cc:66:d9:7e:42:63:dc:85:
6d:bb:9a:6b:bb:0a:86:c7:83:9a:74:0b:63:7e:df:
3c:0d:1f:c8:d2:96:fa:27:13:fa:fd:77:05:ed:26:
8f:8c:3f:00:b9:fe:37:2d:53:b1:c2:83:a6:64:ef:
22:0b:60:80:7f:ac:fb:19:8d:4d:8a:fc:1c:65:80:
29:73:6d:1a:84:b4:6b:84:af:17:36:a4:75:d2:eb:
a7:ad:6e:b1:59:68:78:f7:19:89:9c:d5:3c:53:42:
cb:00:65:02:ea:53:dc:04:99:9e:68:35:12:e8:96:
46:91:7f:32:70:77:42:f7:dc:31:94:92:43:3e:c8:
10:f0:dd:de:a9:70:86:60:89:ea:bf:fb:6b:4a:ee:
ac:4e:82:e9:65:05:35:97:47:d6:ee:a2:33:90:ba:
8b:60:bd:1c:7a:b4:15:68:e5:e4:fa:70:12:20:89:
7e:cc:22:9a:89:e1:a3:0f:27:f2:9a:b4:1c:77:71:
79:fe:0c:9c:ed:6e:da:ae:75:a3:6f:fd:4c:f0:95:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EB:AC:42:72:09:A7:4F:59:BC:5B:BD:6D:DF:AA:A7:70:F1:5C:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FFEC03ADA8311EFB4CE70AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.178.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a6:1c:8e:fe:b2:f5:49:f1:06:17:30:34:23:b0:e7:be:53:
02:5c:ca:ce:33:1b:75:33:a5:d2:47:6c:35:c7:57:00:54:a4:
af:3c:03:a5:82:f2:52:ce:60:6b:0b:d1:a8:76:2d:d7:4b:0b:
a8:b1:9a:63:c3:4e:33:96:d4:af:15:f1:8b:1d:fd:67:5a:ef:
9d:fb:3c:ae:45:f9:65:f0:15:2c:ec:4e:eb:9d:d1:c9:f4:b1:
79:07:a2:69:4b:d7:df:3b:3f:63:25:4e:e8:3c:75:af:77:cd:
07:8d:54:55:f3:8b:2e:54:65:38:26:db:72:36:d9:6c:86:0f:
c3:9b:a9:5b:93:8c:0a:7c:cb:d0:fa:23:b5:b5:bc:19:d0:49:
ae:77:f8:a5:d6:a4:6a:da:44:7f:42:4e:5b:a1:a9:a2:3d:8c:
96:d2:2c:bb:5e:93:79:80:6d:2c:f2:5d:df:85:b8:f3:33:36:
d7:c7:a8:32:ef:6a:7e:9a:a1:df:77:0b:5b:fd:76:40:af:47:
16:ba:b4:a3:0c:8a:c5:9c:46:30:b7:e8:35:0b:2c:c8:ee:5f:
a7:35:03:1c:6c:41:ba:f2:98:0d:a4:31:a2:4b:b0:10:08:94:
21:95:64:b5:8d:ed:2f:d2:4f:a9:f4:fd:fa:ee:f4:c2:7f:da:
43:ac:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:33 2025 by rpki-client