Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93636C12CD4911EF90857277762E951A.roa
File: 93636C12CD4911EF90857277762E951A.roa (raw, json)
Hash identifier: oC4GYavU3WrdD/r4MUFrc11jbeDak4nfgIjLMm3D00w=
Subject key identifier: 80:08:16:C8:C3:32:5D:B4:1C:19:28:EE:37:AE:0C:A6:64:20:56:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEB3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93636C12CD4911EF90857277762E951A.roa
Signing time: Tue 07 Jan 2025 22:48:56 +0000
ROA not before: Tue 07 Jan 2025 22:48:52 +0000
ROA not after: Sat 13 Dec 2025 22:48:52 +0000
asID: 984
IP address blocks: 156.246.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65203 (0xfeb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 22:48:52 2025 GMT
Not After : Dec 13 22:48:52 2025 GMT
Subject: CN=677daf58-93f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:34:eb:84:38:84:35:64:1e:2c:0e:73:d1:
dc:ce:ef:ea:f6:dd:44:1e:9b:63:59:d5:35:0f:20:
3f:7e:b8:d2:39:a0:74:8d:c9:ac:f6:79:a9:5e:a4:
45:76:35:02:88:fd:cc:b1:98:7c:ef:44:8f:19:64:
a0:c5:8c:d9:7d:4f:7c:83:0f:78:96:30:17:7f:16:
ed:6f:b7:81:35:dd:cc:1f:af:cc:81:58:55:65:78:
7e:02:81:0e:68:d1:17:37:2e:70:e0:57:54:4d:ee:
d0:79:00:22:a0:95:8d:ba:ad:7c:17:42:fa:38:28:
4c:f6:c4:52:91:9b:8a:b9:99:b9:9e:f2:c4:a6:30:
ce:61:1c:d3:5d:ab:d6:18:ba:56:93:bd:be:07:67:
1c:68:07:25:78:33:e6:5f:a2:5c:19:29:d6:a6:ed:
18:24:fc:41:82:fe:6e:73:af:44:1c:11:60:a7:0a:
30:4a:da:ca:7e:4d:ea:2c:43:20:23:80:9a:0e:de:
51:9a:c6:b0:d0:5b:ab:1c:9b:04:bc:73:87:b7:af:
3f:e0:38:93:52:12:4f:0c:d7:89:3f:8c:cf:92:88:
0b:fa:2b:4f:0d:ca:f3:bf:78:da:27:14:1b:10:e9:
25:29:ec:05:fe:28:e7:aa:4b:7b:a7:73:1b:94:a3:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:08:16:C8:C3:32:5D:B4:1C:19:28:EE:37:AE:0C:A6:64:20:56:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93636C12CD4911EF90857277762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:9f:42:b5:e0:84:4c:db:a4:de:7c:d9:41:12:46:dc:b4:d0:
b4:31:ab:62:15:50:05:f0:3f:55:66:13:7e:f9:d8:9e:ad:1f:
b9:ac:d6:88:1a:ca:3d:c4:41:e5:01:c6:ce:22:5b:ac:14:f9:
bd:25:fd:7d:b2:3d:35:6c:82:fb:48:ba:a9:e7:e4:54:7e:61:
51:76:ef:23:66:c2:af:39:6e:2d:b2:80:65:90:ec:e2:fa:2f:
6d:97:39:16:55:5d:54:52:8c:9a:5a:62:3e:a1:b9:bb:40:a5:
ee:9a:1f:3b:0e:30:e3:56:41:38:ef:a1:44:8f:39:cc:71:57:
9a:26:45:61:32:ae:48:41:f9:50:df:e5:f0:d0:dd:71:bc:e8:
81:7c:bc:27:4a:e7:39:a6:61:d5:d2:cc:57:dd:cb:8a:a6:3e:
5a:59:72:6f:70:cc:6c:cd:27:be:5a:4b:84:7d:84:63:8e:dc:
7c:4e:8a:6b:97:76:38:c6:7b:50:52:d3:5e:66:17:1e:3f:21:
1d:af:a1:5e:c7:0c:93:54:bf:65:4b:9a:57:07:b5:5f:79:a6:
8e:ce:7e:86:c0:3e:ea:d5:ee:be:6d:7e:31:97:94:b5:f2:d5:
82:eb:56:d2:6e:de:3c:41:bf:c9:aa:45:63:57:03:09:53:bd:
3b:e8:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:42:05 2025 by rpki-client