Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DC4330DAFD11EF8DD29C6E762E951A.roa
File: 90DC4330DAFD11EF8DD29C6E762E951A.roa (raw, json)
Hash identifier: f9gEU3BC0YAh+mwGruis2oXvBwtEQcNsFxoEagpfmLY=
Subject key identifier: CF:C9:82:2A:1E:EC:0C:18:4B:5C:B0:A8:D1:52:16:3E:47:06:02:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DC4330DAFD11EF8DD29C6E762E951A.roa
Signing time: Sat 25 Jan 2025 09:20:06 +0000
ROA not before: Sat 25 Jan 2025 09:20:03 +0000
ROA not after: Sun 23 Feb 2025 09:20:03 +0000
asID: 48031
IP address blocks: 156.246.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70063 (0x111af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:20:03 2025 GMT
Not After : Feb 23 09:20:03 2025 GMT
Subject: CN=6794acc6-42bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d4:d9:17:d7:65:75:fe:55:29:c8:8d:20:39:
0d:46:4c:86:39:73:0d:a3:50:50:29:76:d9:0a:a6:
d3:7a:d3:e7:88:dc:cb:f3:7e:a6:7e:7b:27:e0:70:
a7:af:79:54:e8:f8:bd:48:3e:93:e7:f2:9b:d4:cc:
ea:82:c4:02:0c:92:a3:44:fa:ee:f6:80:91:f2:76:
99:7a:8e:bd:c1:0f:89:5b:76:f7:02:46:5c:83:41:
dc:31:de:cd:0e:56:dc:37:56:ad:29:5f:17:39:55:
9e:35:d1:f6:dc:82:40:1b:88:c9:87:f7:bf:9e:29:
4a:6e:73:e1:7c:82:98:69:cc:5d:85:05:48:22:81:
53:87:91:35:28:0a:f1:44:e9:e3:bf:1b:61:3f:26:
f6:9d:dc:7c:2b:55:af:3e:a5:65:98:eb:cc:bd:2d:
79:d3:f9:70:11:a5:01:e2:88:f3:0a:9f:60:39:3a:
27:10:9b:58:f7:93:88:93:df:66:09:9d:67:ff:2e:
6b:81:73:9a:bb:8e:96:2f:3b:81:40:76:27:5e:1c:
fe:9a:b2:77:0a:f1:bc:6f:b5:90:cc:03:8c:5c:ec:
01:5b:5e:6e:66:66:f8:05:9c:54:b4:6f:69:49:4d:
af:21:cb:7c:98:7b:93:81:d5:26:74:92:c5:f5:24:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C9:82:2A:1E:EC:0C:18:4B:5C:B0:A8:D1:52:16:3E:47:06:02:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DC4330DAFD11EF8DD29C6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.138.0/24
Signature Algorithm: sha256WithRSAEncryption
22:53:b2:8d:fd:ff:41:5f:b0:69:85:7f:40:82:40:6e:59:b7:
cc:17:6c:b1:cc:4f:98:c9:d6:40:3a:29:42:b1:5c:7a:ef:c2:
93:35:81:3d:79:8f:5c:0b:9d:fd:12:7b:cf:2e:07:07:40:73:
42:26:84:f0:bd:c0:f3:c5:d0:cc:75:07:aa:be:b2:a8:1d:d8:
bf:3c:3c:44:69:64:5a:7c:d1:1f:87:cd:70:c3:d7:fd:16:a5:
17:14:75:d6:2f:6d:54:13:02:5e:b4:d0:d0:e3:c2:74:a0:c4:
ea:4a:ba:04:61:0e:0f:74:fc:09:73:ef:e3:47:2b:49:12:4b:
94:49:ad:7b:3e:c2:b8:76:ad:27:e7:65:40:d1:9c:e6:fe:f4:
64:a9:12:df:37:8f:01:4f:fc:0c:a2:5f:a0:bb:87:71:f7:3c:
cd:28:bd:6d:5d:d8:18:e4:37:f7:fc:09:2f:cb:42:65:2c:cc:
58:97:b3:ee:a7:b1:32:aa:aa:41:b9:2e:d7:c7:34:39:79:e0:
e4:02:30:e0:cb:06:f4:97:5b:22:65:b0:88:d4:c7:19:20:e5:
0b:2e:b8:18:dd:ad:dc:82:7d:95:dc:9d:88:a5:33:f5:df:ac:
3f:35:f7:36:a8:3a:88:b8:f8:4e:20:ff:b9:47:c8:a9:b0:31:
c0:90:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:29:08 2025 by rpki-client