Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AE78C56D7E611EFAC2429B3762E951A.roa
File: 8AE78C56D7E611EFAC2429B3762E951A.roa (raw, json)
Hash identifier: DZoyQ+MHtmHXtlGXgr0nmeIJJIHov3oJi7D3ZjE3dOk=
Subject key identifier: E9:99:37:A8:3E:23:93:47:CB:80:9E:CD:D8:15:30:50:3F:A2:92:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AE78C56D7E611EFAC2429B3762E951A.roa
Signing time: Tue 21 Jan 2025 10:57:44 +0000
ROA not before: Tue 21 Jan 2025 10:57:41 +0000
ROA not after: Sat 01 Feb 2025 10:57:41 +0000
asID: 44559
IP address blocks: 156.246.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68942 (0x10d4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 10:57:41 2025 GMT
Not After : Feb 1 10:57:41 2025 GMT
Subject: CN=678f7da8-9a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:25:fc:ca:e0:ce:c7:ce:61:82:0b:53:09:
48:59:1e:a1:7f:72:36:e1:49:ed:34:b9:c8:d0:90:
61:09:43:e0:01:f4:11:f1:c1:ac:f6:57:d3:99:a4:
f0:64:bd:06:01:c3:29:6a:a5:52:02:98:66:59:32:
cd:15:3d:73:f2:f4:f3:4d:97:96:dd:27:5f:4f:bb:
e3:e2:f8:76:79:fd:0c:c2:18:0d:f6:2d:c6:56:98:
9b:fd:e6:c1:55:1d:08:e2:2f:ba:14:77:c6:7c:f2:
ff:45:f7:f5:10:9d:57:63:16:8d:36:48:83:9c:75:
b6:59:ef:c9:d7:45:f0:9b:ff:07:6b:63:4a:13:f7:
8a:94:72:44:3a:90:84:00:67:31:6f:ef:5d:8b:28:
73:0d:e2:31:6e:22:49:a5:c3:3e:43:70:cc:b0:37:
3b:6d:4e:96:9f:43:5a:fa:37:ce:4c:c5:97:4d:86:
fe:63:35:38:51:88:68:db:e3:38:cf:fd:87:2c:63:
dd:dd:5d:91:eb:e2:5a:7f:52:86:55:45:11:2d:d1:
aa:cf:aa:b3:5a:01:53:0c:62:03:50:68:61:e5:2f:
c2:e5:ef:c3:49:2c:da:62:a7:98:93:5a:be:89:e8:
72:64:45:0b:fd:5f:97:b9:ac:b6:47:6c:1b:b7:2d:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:99:37:A8:3E:23:93:47:CB:80:9E:CD:D8:15:30:50:3F:A2:92:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AE78C56D7E611EFAC2429B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:22:52:4a:23:b5:90:ce:42:76:ff:7e:72:e9:fc:e7:fc:1c:
88:3d:18:1d:d8:e9:33:5b:59:4a:1a:2e:78:15:ac:23:a7:88:
6b:6f:ba:e5:ff:32:d2:ed:91:b3:5f:d8:2d:fa:09:a7:35:82:
42:d1:6c:85:6f:e5:d4:1f:21:85:04:8b:97:8c:56:91:94:95:
bc:45:eb:87:ee:30:12:d6:73:3f:0e:d1:d2:59:2f:65:97:39:
2c:eb:c4:40:b9:e1:5e:98:68:4d:2e:24:96:8a:db:c5:1a:f3:
f5:56:0c:77:28:71:92:f6:4b:8d:b1:97:c5:28:31:5e:13:4c:
83:68:9c:72:c1:71:0f:f6:02:e6:e8:6a:09:ff:b5:3b:bd:67:
d8:39:64:01:6f:26:f9:ea:41:22:17:f4:09:82:df:cd:0b:20:
a3:36:33:63:00:f2:d9:57:09:ea:28:99:28:dc:a8:aa:14:c2:
47:fd:24:30:35:10:33:bd:6d:1b:dc:60:9b:f2:1b:f0:76:8e:
f0:19:7e:02:31:ee:e3:28:0c:f8:53:2c:6d:90:21:e1:dd:b9:
59:88:5e:77:fc:a7:07:56:2a:dc:ad:a0:0a:9e:92:87:1a:c4:
f6:5e:f9:68:50:10:91:b8:6c:e3:44:5a:e3:00:4a:a5:cf:99:
6f:10:bc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:48:49 2025 by rpki-client