Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1E3DE92D7EE11EFA74EC466762E951A.roa
File: B1E3DE92D7EE11EFA74EC466762E951A.roa (raw, json)
Hash identifier: EfgI2jfsGexpSdNyF0FEEoSNESKccWryEB849yFZ0NQ=
Subject key identifier: D0:23:BA:33:AA:64:17:78:56:A6:0B:5D:71:A6:8E:12:9E:42:37:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1E3DE92D7EE11EFA74EC466762E951A.roa
Signing time: Tue 21 Jan 2025 11:56:06 +0000
ROA not before: Tue 21 Jan 2025 11:56:02 +0000
ROA not after: Sat 01 Feb 2025 11:56:02 +0000
asID: 44559
IP address blocks: 156.246.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68996 (0x10d84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 11:56:02 2025 GMT
Not After : Feb 1 11:56:02 2025 GMT
Subject: CN=678f8b56-1304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3a:d3:43:dc:46:9c:0a:08:a6:ab:69:07:0d:
6b:ab:87:19:9b:fb:fb:97:1b:57:00:d0:ac:9f:88:
f3:d8:6a:b6:70:7b:e5:11:ec:f1:f9:89:81:b8:4d:
ec:1b:8b:dd:f7:9d:6b:25:05:97:a3:e0:f9:91:3f:
bb:c8:df:42:37:9e:c8:32:a4:61:33:b1:65:63:18:
7e:b7:ac:01:be:4a:55:3f:03:0c:64:b7:f7:03:e8:
99:c9:da:ad:9c:91:9d:ec:63:10:62:cc:67:03:20:
8d:4f:35:b6:3a:25:49:09:be:a0:91:48:48:22:29:
38:50:41:b7:9e:05:1b:dd:55:65:3c:a0:6b:30:33:
81:21:7f:c0:78:12:11:7c:ca:5c:73:79:57:3d:ee:
c3:6e:ca:fe:30:92:30:a9:fc:a1:8d:06:9c:23:8d:
f7:d4:42:d3:55:e6:2e:96:71:d4:6d:28:c4:fc:9c:
e4:0e:6d:86:65:47:1d:5a:70:01:05:0a:dc:12:96:
a9:ef:7d:43:e5:2f:f1:47:bd:22:4a:4d:3e:91:10:
e1:91:06:f4:1f:a6:65:e3:f7:01:77:66:46:af:fa:
60:8c:ff:36:64:a8:6a:f9:79:b0:87:fc:a1:91:76:
88:95:92:e8:c2:22:63:9b:dd:08:d3:77:f5:26:69:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:23:BA:33:AA:64:17:78:56:A6:0B:5D:71:A6:8E:12:9E:42:37:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1E3DE92D7EE11EFA74EC466762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.227.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f9:b3:1b:1d:86:36:2c:f4:66:57:e5:e5:3a:2e:40:35:7f:
7b:79:f6:82:c9:e0:88:63:4c:4d:20:f6:d5:db:98:e6:f6:79:
74:0b:b7:17:30:e4:f0:2d:05:13:5e:17:dc:71:83:30:4b:33:
08:5d:43:f3:f6:b0:39:f1:5e:21:17:17:41:99:4c:a1:8f:bc:
c5:f1:46:bc:a4:20:9f:b6:91:d7:84:18:11:af:72:c3:ba:d5:
8f:de:d0:1a:79:ba:97:94:1d:72:08:41:b5:83:88:ea:32:f1:
d4:4c:ae:d5:67:2b:99:85:57:6c:04:f4:41:c7:a2:0c:19:db:
1e:0f:50:72:75:ff:31:ab:06:e0:0d:e1:d5:15:89:8f:92:27:
93:43:13:b6:44:9d:7c:05:90:3d:70:fd:21:d8:7f:2d:29:f6:
51:58:f8:8a:7b:98:14:91:57:5d:9e:f1:a9:d5:05:2a:98:37:
6d:4b:e5:c3:c4:38:83:2b:ce:6f:2e:2d:32:74:27:0f:2a:36:
5e:cf:06:1d:89:73:58:6b:0e:6f:bd:af:a7:d2:2a:68:76:eb:
8d:85:03:14:4c:11:96:15:0e:47:09:a9:be:d3:12:9e:1a:85:
1c:25:93:d7:76:2f:94:9a:f0:61:c7:8c:4a:26:fe:fa:21:cb:
ee:6d:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:56 2025 by rpki-client