Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D24D04CD71C11EF82E46C86762E951A.roa
File: 9D24D04CD71C11EF82E46C86762E951A.roa (raw, json)
Hash identifier: 63m0VeLOtUV5wsY+UAFl6YD+VFjiEdzfDy1rCkqkZp0=
Subject key identifier: AC:2D:AA:3E:A6:B1:FD:C9:97:1E:10:F1:E8:8F:DB:B9:DB:B6:4C:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D24D04CD71C11EF82E46C86762E951A.roa
Signing time: Mon 20 Jan 2025 10:52:17 +0000
ROA not before: Mon 20 Jan 2025 10:52:13 +0000
ROA not after: Sat 01 Feb 2025 10:52:13 +0000
asID: 48031
IP address blocks: 156.246.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68639 (0x10c1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 10:52:13 2025 GMT
Not After : Feb 1 10:52:13 2025 GMT
Subject: CN=678e2ae1-c99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:06:5f:f5:20:f9:5b:51:20:be:34:de:93:
32:14:f3:7d:47:9c:4d:2c:36:4e:9d:17:c2:de:16:
9f:4f:ee:50:90:4f:82:dd:5b:29:2c:52:f9:37:f2:
97:b8:c5:60:db:11:19:ef:c2:d0:34:32:ea:4f:06:
e7:69:c9:a1:3c:16:28:26:b0:bb:28:a9:09:73:2c:
a5:ac:5a:82:2d:5d:24:fd:bf:01:d4:0e:8b:48:15:
09:a1:50:1e:da:f1:59:3b:81:34:06:77:73:a8:02:
fb:0f:bf:7a:d9:48:e5:44:58:7e:7d:0f:5a:0a:bc:
e8:75:3a:fa:df:6a:5e:b7:e2:f5:f5:63:52:87:a5:
29:d3:67:89:b7:1d:e3:88:3a:68:41:a5:d9:59:7f:
0a:f6:9c:d6:9c:78:b8:66:87:c7:10:25:42:78:a9:
e4:0b:8a:2d:9d:de:0d:f3:c3:c7:32:5b:2c:49:54:
f4:0c:a8:95:97:15:13:22:7f:1e:ad:1b:3a:40:55:
07:2a:d8:93:bd:43:56:23:3f:e4:e4:95:c5:2f:ad:
ff:e3:0d:4f:ae:66:53:25:6a:ed:1d:9a:5b:50:7b:
39:1c:d9:37:c9:02:fc:ad:8d:bf:f7:70:84:cc:c1:
ee:e4:31:f8:d2:19:1d:83:cc:2d:a6:3a:f2:a0:58:
ed:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2D:AA:3E:A6:B1:FD:C9:97:1E:10:F1:E8:8F:DB:B9:DB:B6:4C:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D24D04CD71C11EF82E46C86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.146.0/23
Signature Algorithm: sha256WithRSAEncryption
73:fe:dc:59:19:8b:80:90:68:4f:1b:3b:41:e9:ce:f4:1a:65:
fb:aa:6e:7e:a2:3a:17:c6:13:a1:9e:bb:dc:50:bf:62:43:ad:
c5:26:89:84:0e:b3:5e:f0:e5:70:18:0d:d8:2a:07:53:48:3e:
64:03:7f:dd:39:0d:ff:6b:4e:48:85:7a:ac:f6:fa:8f:9b:7a:
6c:8b:cf:91:42:6f:38:43:39:a5:ff:4d:bf:0d:20:33:b3:a3:
ba:c6:35:2a:d3:0f:06:8d:6a:ee:8b:02:bc:64:0f:99:e7:3f:
08:1a:41:54:1f:10:1a:21:d2:82:36:68:f0:16:6f:03:dc:3b:
d0:1c:4e:79:4f:f4:77:c4:c1:8d:6d:e9:b1:e1:70:42:7f:72:
60:28:5e:3d:1b:54:60:9f:fa:49:9d:5a:a3:98:ca:68:fa:7a:
b3:4b:45:cc:b2:1c:8c:cf:86:cb:0c:49:46:f2:04:1e:7d:3f:
ad:9b:ef:c9:e7:29:9a:9e:06:4f:5b:1b:c9:7a:12:bc:1a:65:
fd:70:b9:ad:38:7e:af:e1:1a:54:03:d4:57:50:de:7c:f3:f3:
13:63:df:20:d1:ba:9c:bd:7f:f7:6b:f7:54:42:c7:63:b4:6c:
8c:fc:57:b8:70:75:a5:f9:9f:b8:48:0a:bb:5f:0a:c6:32:51:
83:90:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:38:43 2025 by rpki-client