Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD976B4D70911EF91E1C48C762E951A.roa
File: 8DD976B4D70911EF91E1C48C762E951A.roa (raw, json)
Hash identifier: NegYF3NTnx3Jchy7Cq+qVKGhF4DxDfGhBhyX0xg8Iqs=
Subject key identifier: 0C:EB:29:BB:96:62:2C:E1:B6:77:E4:CE:33:16:48:90:3E:DD:81:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD976B4D70911EF91E1C48C762E951A.roa
Signing time: Mon 20 Jan 2025 08:35:51 +0000
ROA not before: Mon 20 Jan 2025 08:35:47 +0000
ROA not after: Sat 01 Feb 2025 08:35:47 +0000
asID: 44559
IP address blocks: 156.246.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68605 (0x10bfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:35:47 2025 GMT
Not After : Feb 1 08:35:47 2025 GMT
Subject: CN=678e0ae7-4132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:c8:74:77:5d:17:2b:2d:a7:b1:85:4a:17:
d4:fe:3f:c1:43:46:75:77:c4:61:f2:71:46:bf:c8:
0b:7d:9d:ad:22:b5:f6:3e:30:18:0c:80:40:45:1c:
f6:92:d5:94:5c:70:31:f0:ce:a6:04:fb:84:94:b1:
be:5b:1f:1a:b6:6d:a6:14:79:2f:56:db:d5:09:00:
de:5e:71:a8:43:9d:c4:31:5f:2e:12:e5:b9:e0:0c:
39:2d:77:4b:1c:65:3e:50:98:c2:a9:0d:59:a2:ca:
16:e8:cd:f9:a0:fe:e7:40:2c:05:eb:e7:45:0a:48:
0c:1e:70:13:c6:3b:b8:84:eb:be:ca:83:2e:d9:e5:
1a:15:13:ee:9a:b9:57:4e:e7:ab:9b:24:56:09:22:
ff:ce:59:3d:7c:42:b5:1e:30:76:88:45:57:4d:b4:
0d:d8:15:c9:e6:c1:23:3c:4b:98:d7:0b:72:63:57:
ac:18:c4:52:cd:79:9f:d2:32:06:10:1a:ed:dd:48:
03:d4:2a:63:06:f2:82:f7:92:35:56:06:aa:c5:66:
8c:60:aa:84:a9:da:b0:70:66:11:95:b9:b8:3c:6a:
d6:2f:39:26:77:f2:ea:c5:b6:f8:5e:ac:4b:22:dd:
a2:27:be:7d:41:46:bf:21:fb:6a:24:24:c5:76:d8:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EB:29:BB:96:62:2C:E1:B6:77:E4:CE:33:16:48:90:3E:DD:81:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD976B4D70911EF91E1C48C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.152.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:04:9c:2e:44:85:93:fb:06:6c:62:91:84:cb:cc:55:55:9c:
77:fc:ab:54:d6:5d:2b:40:a7:f9:9d:a0:2e:24:76:8d:ba:68:
0d:d5:45:79:c9:d6:3f:24:c0:4e:69:ab:df:fc:48:00:97:44:
fe:94:c3:76:be:7c:cf:85:4d:93:56:e4:74:cb:23:44:02:b2:
dd:e7:ea:ec:f1:85:3f:6a:a2:c3:13:f6:e1:17:2d:08:2e:21:
42:8a:79:27:fd:26:51:8a:a0:ae:d2:39:61:66:cf:34:50:ae:
db:44:bb:84:ae:3d:76:d8:3e:f8:2b:70:3e:09:5c:a3:ac:69:
e4:8d:f1:4f:26:cf:1c:01:05:b5:cf:5f:c4:0b:44:79:07:3d:
ea:38:15:fd:6b:cc:f6:4b:f4:ed:1b:61:cc:85:78:84:2e:ee:
13:59:1b:65:a3:75:78:cd:98:7f:64:44:c1:38:75:9f:85:48:
8c:8d:13:9f:45:a4:5e:e7:47:bd:48:1e:e8:2c:0b:56:78:ec:
e6:de:58:b2:cd:0f:05:c3:38:3d:3e:64:1c:ef:c1:b0:90:49:
c4:83:77:e9:1c:64:c8:1d:84:a9:f4:24:8a:c0:b5:6e:02:fb:
82:40:58:26:83:c0:20:ac:83:17:84:a2:18:6e:53:5a:57:5d:
04:7c:82:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:48 2025 by rpki-client