Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C74E67AD7FB11EFBB858ABB762E951A.roa
File: 9C74E67AD7FB11EFBB858ABB762E951A.roa (raw, json)
Hash identifier: 7HFJfuOWOLolvJIUZxCrx5hWDX9B2CIL8L1sxiG/VWs=
Subject key identifier: 1E:AF:FE:8C:7F:C4:01:65:5A:11:C8:A8:A1:F5:CF:E4:81:58:E5:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C74E67AD7FB11EFBB858ABB762E951A.roa
Signing time: Tue 21 Jan 2025 13:28:33 +0000
ROA not before: Tue 21 Jan 2025 13:28:30 +0000
ROA not after: Sat 01 Feb 2025 13:28:30 +0000
asID: 48031
IP address blocks: 156.246.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69080 (0x10dd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:28:30 2025 GMT
Not After : Feb 1 13:28:30 2025 GMT
Subject: CN=678fa101-34a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:e2:83:5d:4b:eb:70:1d:8f:90:2d:01:b3:
11:01:5b:ff:12:57:a0:38:9a:a5:a1:5b:0d:74:f7:
f9:b4:fa:91:d6:58:c6:54:df:77:10:c1:86:0c:af:
41:34:64:70:ca:56:51:1c:b2:e2:06:87:bb:45:5c:
2e:a0:4a:ba:0b:bb:c2:91:fd:5a:67:0a:8c:09:83:
e7:ec:b2:07:22:63:0c:e8:40:e5:e1:0a:3d:f1:8a:
be:59:bd:04:e7:c2:0e:0b:3f:d5:90:3e:6c:dd:a6:
0e:8c:b3:86:e5:45:24:50:7e:d7:af:1e:8c:90:4d:
a6:a4:dc:15:8e:d0:40:c7:e8:4b:c2:59:d2:db:dd:
3b:73:00:2a:f9:76:9d:ce:39:40:2c:cf:12:b3:2d:
e4:d8:29:4d:5b:ab:c9:ba:d9:c7:8e:cd:0f:ab:45:
ff:f3:bd:7f:4e:c0:cd:35:f6:c4:d2:20:12:3d:90:
36:0f:7a:d5:cf:99:cb:75:fa:97:83:98:3e:2f:6f:
65:59:42:c1:39:10:82:87:f8:9d:8e:fd:24:77:fc:
a6:29:4a:83:b4:fc:f2:17:08:e2:bb:68:db:0a:20:
eb:49:16:4a:37:51:e6:97:c3:04:ee:a2:3c:af:ab:
7b:4a:c2:78:46:49:e5:25:ce:ef:c1:cb:34:94:f8:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AF:FE:8C:7F:C4:01:65:5A:11:C8:A8:A1:F5:CF:E4:81:58:E5:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C74E67AD7FB11EFBB858ABB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.141.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e4:b4:79:8b:88:e2:14:ed:d0:34:a4:1a:7e:d3:03:0c:c7:
91:e9:17:d7:94:7a:fa:d2:18:fd:e0:cf:9f:ec:2e:8e:37:d6:
30:26:5f:e6:77:3e:b3:af:24:4f:64:52:b8:29:6d:c0:09:b4:
9e:b8:f5:ea:fa:09:ad:f1:c5:66:89:36:6a:ef:ab:9d:08:61:
cf:41:20:2d:22:ad:de:30:76:97:91:5f:47:74:5d:43:2b:eb:
c8:bb:e1:b4:bd:ce:72:98:98:0d:02:ca:e0:e4:2d:7b:c3:37:
2d:46:b5:2b:ad:9d:2e:a0:17:60:8a:21:36:db:20:84:8e:9c:
08:f5:63:c4:8b:fa:65:57:29:63:ca:b2:98:94:c6:07:28:53:
79:03:72:30:1c:b7:ab:63:94:ee:61:4a:ab:96:54:84:21:92:
ab:73:7d:ab:74:71:12:36:4e:65:66:48:bb:a5:ae:02:cb:e1:
6c:52:a9:2d:01:94:61:0c:e5:6d:b7:ae:ac:ff:97:1c:4e:fe:
9e:4c:78:b7:9a:70:ac:88:17:57:a1:db:12:92:ba:b4:79:d8:
3a:f9:34:f6:7c:b5:2b:96:15:24:4c:a5:73:3a:35:0b:1e:9a:
7c:7e:56:a3:56:06:2b:62:6a:56:55:d4:fc:0f:b6:e7:39:e6:
19:4a:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:56 2025 by rpki-client