Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9448637CD7F211EF86C1EB81762E951A.roa
File: 9448637CD7F211EF86C1EB81762E951A.roa (raw, json)
Hash identifier: kM9gBbMaIaEWzfqW3IoYbhT+WoinRVks5F4eEkYAMdA=
Subject key identifier: F6:07:AD:76:93:FA:9A:E6:D3:5B:7F:DA:C7:2D:75:92:FA:CB:3A:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D9C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9448637CD7F211EF86C1EB81762E951A.roa
Signing time: Tue 21 Jan 2025 12:23:54 +0000
ROA not before: Tue 21 Jan 2025 12:23:51 +0000
ROA not after: Sat 01 Feb 2025 12:23:51 +0000
asID: 44559
IP address blocks: 156.246.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69020 (0x10d9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:23:51 2025 GMT
Not After : Feb 1 12:23:51 2025 GMT
Subject: CN=678f91da-6c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:56:36:69:66:5e:4b:fd:ad:6c:5a:23:79:
d7:8c:fd:d5:ec:d2:14:29:ed:7d:1f:62:dc:ba:97:
68:8f:51:90:9e:7e:e4:6c:b4:1e:9f:68:1d:8a:38:
08:18:df:ee:63:a2:3d:13:f4:b3:33:7e:5c:f7:77:
56:32:05:3b:ee:49:b9:fc:5b:bb:26:ed:97:0a:8a:
8a:fc:79:3c:b5:2a:8f:13:67:e8:33:76:04:d6:56:
72:e9:dd:97:16:bf:21:60:88:e1:f9:98:a2:8c:da:
86:6b:97:39:14:6c:16:60:d3:b4:50:b0:4e:3b:08:
fe:3f:10:eb:91:8b:ec:cf:a4:1c:c9:e3:eb:e4:6b:
2a:c1:6b:7e:00:33:75:ee:a1:df:cc:ac:f3:69:aa:
27:c2:1c:ee:7d:d3:d9:52:a6:ff:61:31:b4:d8:cd:
fc:75:c0:08:11:a5:d6:e3:c3:62:4f:5a:38:1c:0f:
ea:65:01:8b:d0:67:2a:49:4c:4e:81:3c:b1:c3:f6:
85:b1:23:9e:7a:23:7c:f7:de:17:33:da:f3:7d:da:
c3:e5:33:64:a6:49:ce:4c:3a:c0:f1:42:93:a4:86:
16:01:b1:98:19:92:a1:f2:88:ab:da:97:48:f7:d1:
a7:6e:a5:66:a4:81:d7:94:4a:37:66:74:89:27:51:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:07:AD:76:93:FA:9A:E6:D3:5B:7F:DA:C7:2D:75:92:FA:CB:3A:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9448637CD7F211EF86C1EB81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.239.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:89:d3:b1:8b:af:73:15:23:95:5e:36:61:76:00:0b:aa:7c:
b3:bd:db:06:49:d7:c6:60:a5:c9:ff:61:00:7c:9c:7f:e7:ac:
6d:10:ac:88:92:a7:af:08:22:7b:4d:34:ea:c6:a9:51:1c:d3:
82:aa:6d:61:c0:e3:1a:12:9b:35:cd:f1:10:cf:71:a3:b0:80:
7b:ac:5b:f8:d3:0a:31:29:df:b4:aa:d5:69:d7:2d:17:7b:35:
a1:22:c8:55:ec:c8:5f:58:20:61:07:81:ae:83:14:01:af:bb:
60:56:95:d9:0b:54:a5:f1:6e:52:31:27:b2:42:a5:f1:e7:5b:
e3:26:eb:5b:4e:98:97:e2:a7:15:0e:a4:ec:6d:a1:bf:30:36:
62:71:c8:9c:9c:96:2c:ec:6b:65:17:7c:f9:b5:23:a7:b9:09:
bc:79:fa:43:0d:55:79:fa:91:94:3b:8c:83:b5:2d:82:a0:21:
af:ee:70:c6:f1:05:92:6d:37:b5:8a:d0:16:27:0e:79:50:01:
b3:1f:d4:98:1e:1f:e4:ea:59:2d:61:68:f3:a6:e9:d7:1d:5f:
93:9f:3b:88:a9:96:09:4b:e3:d8:23:38:53:b8:d5:39:7b:16:
11:ad:e8:15:95:be:5b:ab:85:33:38:77:ea:ab:e1:cb:6f:53:
4e:39:c4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:19:42 2025 by rpki-client