Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AECA0B8CDAFA11EFA8F0A25A762E951A.roa
File: AECA0B8CDAFA11EFA8F0A25A762E951A.roa (raw, json)
Hash identifier: PK+9xjzfaZsuF1Nos+EKknSWsHaHNWpgcUgUROzDj1w=
Subject key identifier: DD:AD:5D:37:44:F0:7E:6A:8C:0C:E0:52:B9:F8:82:9A:40:A2:90:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01119B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AECA0B8CDAFA11EFA8F0A25A762E951A.roa
Signing time: Sat 25 Jan 2025 08:59:28 +0000
ROA not before: Sat 25 Jan 2025 08:59:24 +0000
ROA not after: Sun 23 Feb 2025 08:59:24 +0000
asID: 48031
IP address blocks: 156.246.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70043 (0x1119b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:59:24 2025 GMT
Not After : Feb 23 08:59:24 2025 GMT
Subject: CN=6794a7f0-ebbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:d0:ba:b3:a4:22:38:53:c7:09:55:17:0b:
ca:41:36:d8:b1:89:c4:1c:c4:6c:58:33:57:d7:47:
04:5f:fc:72:4c:6f:cb:b6:64:55:eb:a4:8b:c0:09:
73:56:4e:95:30:58:fc:d3:04:83:c3:03:33:5a:af:
cc:f6:30:9a:5e:8c:cd:e1:72:24:d0:36:17:5b:82:
b2:58:96:90:aa:5b:df:a1:5d:9c:91:f1:9e:71:7e:
2b:6a:47:06:06:09:c8:f7:02:8f:73:32:32:d4:b4:
67:3b:44:86:64:92:79:90:12:ee:9a:cc:3f:46:77:
f1:ae:7e:68:9d:ee:4c:66:ec:d9:67:0f:c1:1a:c5:
9b:8a:79:6f:d0:6f:c6:23:a7:4b:96:e2:d0:96:62:
f4:dc:23:b1:b1:d3:df:85:72:83:6f:1e:21:5b:53:
4b:0a:e0:a1:01:67:12:a0:41:ae:6a:87:05:6c:02:
25:34:e9:9b:b6:08:31:4e:2d:02:6c:75:8a:9f:b1:
d9:bd:e1:64:df:88:ac:da:92:51:d3:cc:08:7f:00:
4e:28:9e:f7:12:33:0a:4f:05:0b:99:1d:f2:88:b1:
9a:21:10:64:90:fe:36:66:92:9f:02:ab:9c:50:3b:
6b:2b:58:b8:a0:9b:08:cf:91:78:56:1d:0b:69:59:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AD:5D:37:44:F0:7E:6A:8C:0C:E0:52:B9:F8:82:9A:40:A2:90:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AECA0B8CDAFA11EFA8F0A25A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.128.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1f:ba:fe:05:49:a8:6b:3d:28:1d:e2:24:b6:93:d8:9e:63:
f2:e6:38:0f:7d:74:4b:5f:e3:f4:64:65:86:01:f3:76:36:37:
c7:8f:89:65:32:ce:55:90:a2:0a:ca:24:ee:9d:b0:29:28:03:
a3:78:a0:77:6a:c0:7b:b5:39:8f:05:aa:1b:67:03:6c:a9:cb:
3f:0e:4e:80:52:15:bc:2a:25:20:99:1a:3a:b4:d4:68:b0:0f:
c1:ae:a9:d1:56:a1:8f:a4:1a:14:a9:2e:dd:fe:f1:16:2a:88:
8e:25:70:9c:b9:22:d6:4e:7c:d1:fc:32:5f:95:b7:a4:27:2d:
6f:b1:20:60:96:ad:7b:45:6d:96:63:eb:50:03:83:47:38:d1:
66:d6:cf:45:f3:af:29:9b:83:c9:af:ef:a4:f8:42:b4:7a:cc:
03:56:11:ac:6a:69:ac:78:02:9e:ed:dd:ea:b8:87:ab:d2:bc:
28:54:23:28:b0:44:70:13:4e:ed:32:fb:69:6a:25:22:50:ef:
18:be:3e:6d:02:87:d3:e2:19:15:f0:10:52:eb:d7:ad:c9:9d:
5b:c6:0a:74:9e:ce:c8:9f:89:15:af:d5:a6:85:58:df:fb:1b:
0b:57:58:91:fe:be:0c:cd:d6:74:cc:98:b3:cb:e8:39:46:03:
3b:2e:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:11:34 2025 by rpki-client