Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94FC2A3ED70611EF9B129A7A762E951A.roa
File: 94FC2A3ED70611EF9B129A7A762E951A.roa (raw, json)
Hash identifier: xX34vrFzBnsCHEA5est5B7p5dMxS3ixI8tS7nnmgPZc=
Subject key identifier: 3A:7A:C9:59:21:95:B6:4B:13:11:3D:02:8B:60:01:A0:E1:9A:D0:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94FC2A3ED70611EF9B129A7A762E951A.roa
Signing time: Mon 20 Jan 2025 08:14:34 +0000
ROA not before: Mon 20 Jan 2025 08:14:30 +0000
ROA not after: Sat 01 Feb 2025 08:14:30 +0000
asID: 44559
IP address blocks: 156.246.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68585 (0x10be9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:14:30 2025 GMT
Not After : Feb 1 08:14:30 2025 GMT
Subject: CN=678e05ea-34c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f0:a5:4c:b6:2a:cc:ff:d5:7a:21:85:13:f7:
76:3b:cb:dc:54:91:af:6f:3d:1b:0e:dc:cf:99:a6:
ae:1e:05:50:5d:24:8a:2e:86:10:62:fc:00:55:b4:
f1:dd:34:6d:17:eb:4b:81:14:9a:da:aa:33:5d:96:
42:42:1b:c8:1d:e7:c4:2a:cb:45:fb:8e:a4:f6:64:
ea:0c:a4:48:17:35:b1:22:53:9b:d7:e8:db:21:ee:
62:ec:ef:cd:7c:40:2c:1d:8e:24:f0:7c:c8:d2:5b:
69:21:28:af:da:db:9f:1c:05:b5:87:4d:28:08:9e:
35:76:60:91:42:4b:2c:a5:fc:e1:11:94:9a:61:d4:
f3:a8:ea:2e:f2:ce:48:27:67:df:57:8c:94:05:da:
f3:b2:8f:6f:60:8e:f2:1a:e8:3c:89:50:19:b7:7d:
90:20:1e:0b:bb:47:e0:55:b8:e7:56:d1:e1:28:55:
38:9c:a8:1e:4b:52:13:ea:af:e4:5d:54:37:a4:c3:
cb:32:60:3f:9b:cb:1d:95:9f:1c:60:22:6a:89:83:
c4:5b:2c:ac:d3:96:2b:e2:8f:76:1a:3f:22:c6:f9:
90:3c:92:7b:4d:fc:96:2f:5d:ce:a9:06:b8:75:7a:
25:43:b9:11:22:b5:48:6f:f8:23:fc:27:b1:e7:2b:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7A:C9:59:21:95:B6:4B:13:11:3D:02:8B:60:01:A0:E1:9A:D0:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94FC2A3ED70611EF9B129A7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.188.0/22
Signature Algorithm: sha256WithRSAEncryption
86:f1:ed:a0:5b:4a:75:40:37:86:69:83:87:a3:94:70:81:2c:
63:86:20:c4:b2:ae:b0:84:ea:a4:97:69:ca:bf:f2:4e:db:65:
12:3a:56:1c:f6:2f:d3:f2:f7:4f:c7:c6:25:9d:76:8e:21:f3:
40:ad:0f:d2:ca:11:8a:0f:b9:9e:8b:9b:3a:a5:00:3e:59:f3:
4e:82:65:b0:d0:21:84:c3:a3:9a:0b:cf:7f:74:89:90:ba:90:
bd:d9:b4:ab:e2:43:5b:b5:b5:fc:3d:e6:14:f1:19:7a:be:38:
ed:e7:0a:b7:2f:00:3f:0b:67:36:bb:09:dd:fd:14:4f:ae:ca:
d6:8a:ad:f7:ec:78:34:52:cb:c8:2d:f5:93:20:db:b7:f0:29:
85:9b:56:fa:56:b7:b0:51:bb:d4:90:f8:56:ad:bb:6f:3b:6e:
cd:b3:45:b8:9b:59:11:b4:98:20:48:22:5a:02:fc:0d:31:86:
23:39:20:20:a2:03:fc:32:47:a7:99:cf:82:08:3a:5b:e7:2f:
e7:c2:92:d5:5a:76:6d:2a:56:30:23:99:37:8f:9f:8e:dc:04:
dd:d8:3a:2b:15:75:ef:13:ad:a3:12:d2:d1:bb:ef:77:2c:1e:
06:5c:eb:a9:33:61:0b:e7:0e:db:cd:77:6f:cf:0b:30:18:95:
ab:ec:ea:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:22:32 2025 by rpki-client