Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F95B80DA2311EF993A58A6762E951A.roa
File: 95F95B80DA2311EF993A58A6762E951A.roa (raw, json)
Hash identifier: cHaCjNbqNdG4Wtuod1ji6stAY+5gqsf0fSqWm7nOm+0=
Subject key identifier: BF:0C:1C:FD:85:2C:13:66:A4:5A:B0:44:FF:60:19:8E:52:96:8B:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F95B80DA2311EF993A58A6762E951A.roa
Signing time: Fri 24 Jan 2025 07:19:45 +0000
ROA not before: Fri 24 Jan 2025 07:19:41 +0000
ROA not after: Tue 25 Feb 2025 07:19:41 +0000
asID: 44559
IP address blocks: 156.246.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69415 (0x10f27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 07:19:41 2025 GMT
Not After : Feb 25 07:19:41 2025 GMT
Subject: CN=67933f11-0928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:c2:63:99:36:3d:14:94:1b:cf:60:09:17:
01:ac:c8:fb:dd:98:9a:fb:fd:20:4f:d3:37:89:e1:
e6:b1:a9:b5:71:b0:9e:34:f6:e8:8d:50:0a:aa:b0:
58:a1:63:dd:05:9b:de:a8:19:85:05:26:3e:10:bd:
47:18:6d:3d:a6:08:18:6c:b2:ba:41:28:bf:fb:01:
f1:f2:d1:de:56:c3:72:da:07:3b:ad:80:ca:9b:da:
ce:17:d0:58:22:f7:8c:7b:bd:af:9f:b1:16:00:2c:
9d:61:e1:68:ac:0c:cc:f6:12:c5:28:b3:91:19:93:
fe:fd:e5:b6:7b:47:b7:34:60:53:3e:64:ca:9a:77:
34:d3:83:05:ce:01:5f:d2:af:cb:c2:86:33:08:49:
3f:7c:0e:c5:8f:0a:e9:1c:99:39:5f:b1:22:a5:f4:
02:67:48:c2:63:05:49:71:4f:b4:14:09:c4:25:00:
93:ba:89:4a:24:c4:cc:2d:13:d4:dc:db:04:dc:d5:
1f:57:0f:a0:0a:de:77:bf:42:52:50:55:cc:80:47:
e7:12:8a:45:22:a1:9e:34:10:aa:0f:e3:04:c4:a9:
fb:3d:c7:2d:79:47:73:c9:90:f0:bd:32:14:a1:33:
a7:05:b1:21:65:9b:74:c1:fe:4f:0a:67:f4:66:74:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0C:1C:FD:85:2C:13:66:A4:5A:B0:44:FF:60:19:8E:52:96:8B:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F95B80DA2311EF993A58A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.188.0/24
Signature Algorithm: sha256WithRSAEncryption
74:14:03:03:cb:1e:4d:67:0e:c1:7c:03:6c:3a:88:df:9d:b3:
90:62:53:f2:1c:ff:66:22:88:ee:4b:f5:7f:1c:52:b9:6a:53:
81:21:82:8d:39:fa:c0:c9:c5:f3:4c:9b:1a:12:83:f6:6e:c2:
12:41:5f:06:43:12:d6:ec:58:ee:76:d8:bc:66:ce:6a:74:a9:
56:b7:df:22:db:7a:4f:bd:e2:0e:dc:f5:c1:9b:dc:7a:18:f6:
3d:e0:5e:8c:98:29:37:10:d5:88:d0:10:0c:e4:98:48:c6:2f:
bc:47:8d:33:33:d6:62:77:16:7e:a2:8e:74:d1:90:db:db:d3:
bd:f3:c0:07:0b:49:6d:99:f5:d0:ea:b0:67:6a:0e:ba:95:ce:
e7:f9:b6:40:5f:61:95:04:04:5a:03:1c:8d:d0:84:78:96:1f:
27:ed:32:aa:a3:fa:97:83:33:84:cc:7a:63:6a:9d:53:ba:57:
9d:be:ed:e8:36:16:59:95:21:72:63:ae:50:0c:02:9e:a9:4f:
2b:3c:b3:d4:f1:25:15:dd:39:ed:3b:55:39:da:50:b3:5c:d1:
33:ad:f8:c1:e9:45:50:b7:43:06:8b:53:38:e2:c2:9e:8c:e9:
03:9e:6a:ac:a7:7e:67:dc:25:24:bc:5a:fa:dc:c6:05:ec:17:
7f:6d:98:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:22:28 2025 by rpki-client