Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5D61B4CDB1711EF9D77589D762E951A.roa
File: B5D61B4CDB1711EF9D77589D762E951A.roa (raw, json)
Hash identifier: EZreRcOPnuFrAJTIthqy9mkoO/Yp2cifAuPfzvtpras=
Subject key identifier: CC:0F:DB:90:5D:1B:C4:48:32:34:15:F4:0D:AB:71:77:5C:02:64:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011243
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5D61B4CDB1711EF9D77589D762E951A.roa
Signing time: Sat 25 Jan 2025 12:27:15 +0000
ROA not before: Sat 25 Jan 2025 12:27:10 +0000
ROA not after: Sat 01 Feb 2025 12:27:10 +0000
asID: 152092
IP address blocks: 156.245.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70211 (0x11243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 12:27:10 2025 GMT
Not After : Feb 1 12:27:10 2025 GMT
Subject: CN=6794d8a3-584a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:c0:ec:94:f8:6d:c1:dd:66:a3:ca:48:9e:
a3:8b:24:a2:50:b0:87:5b:9a:47:15:b7:5a:1d:cf:
9f:4c:ec:4d:0d:16:63:ec:ba:51:1e:60:85:04:96:
65:8b:cf:50:de:df:bb:70:67:68:c0:f5:d0:91:ee:
62:5f:50:81:a8:54:c3:db:cc:c7:b4:6a:fc:2b:e6:
ff:ea:71:26:a1:3d:c6:1a:47:43:1a:6e:d7:bf:7e:
10:c0:9f:18:fe:cc:34:d9:eb:3a:a9:13:30:32:d7:
c6:fa:5e:48:13:2a:c0:98:82:7e:6a:37:dc:94:dd:
ea:4d:eb:47:69:fc:08:9e:f2:25:e7:a6:e2:c7:69:
ef:c1:9c:a7:cb:e7:9c:3f:43:b5:0d:f9:a5:8b:2b:
ae:9a:8e:70:06:31:cf:3c:66:1d:e6:a3:d5:ba:04:
67:12:85:11:f7:27:1d:dd:e3:63:22:e9:8f:e8:7f:
15:bc:d8:d0:26:4c:1b:80:50:78:1c:6c:29:77:fd:
f0:aa:07:cd:01:66:c7:9a:fa:94:82:cb:04:8a:93:
e0:eb:35:03:40:42:5b:52:99:44:34:a6:6e:f2:de:
70:2b:7e:65:ae:a6:5c:9f:51:68:f0:0e:42:24:b0:
96:ff:bc:42:8c:20:5e:ea:3d:f1:75:5d:a8:e9:3a:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0F:DB:90:5D:1B:C4:48:32:34:15:F4:0D:AB:71:77:5C:02:64:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5D61B4CDB1711EF9D77589D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d9:63:38:46:70:ed:93:76:4d:65:1c:8a:59:0c:2e:4b:6a:
ba:b5:c7:9d:a5:e0:75:58:86:4d:c0:bd:b7:7e:8c:b3:00:4e:
19:1d:98:1e:7b:39:72:84:7a:5f:2a:f9:a1:fc:80:cf:4a:3e:
f4:11:19:ae:f1:3d:2f:09:76:cf:80:3f:61:4b:56:25:53:1b:
11:4c:16:e7:c2:b6:63:5c:74:0f:49:f0:1b:d2:99:8c:d0:dd:
40:44:51:6c:8d:d5:3d:5c:11:57:85:a2:42:28:5a:cd:f5:c9:
7f:08:b1:d0:b9:0c:99:32:6d:b8:23:bc:0a:ba:84:48:40:c4:
73:73:e0:2c:09:5e:9d:38:3e:cf:ee:7a:1f:5e:27:1d:18:70:
80:e5:71:96:fd:45:71:4a:08:16:99:9d:be:40:3d:14:bf:8e:
e8:49:58:af:7f:56:d2:44:5c:cc:65:99:9f:ef:10:ba:e5:74:
2e:23:2b:48:6a:8e:c5:98:76:d8:ad:d6:7a:96:cc:03:05:64:
0d:c7:0c:15:04:82:54:e6:57:68:c7:36:73:6f:ea:53:a0:96:
67:44:73:d7:c7:80:7c:8a:e6:41:5a:f0:4a:bb:3d:e8:2e:b4:
c5:85:d2:37:a6:fe:a9:3a:8b:02:26:be:cb:e1:07:d4:eb:05:
5e:2c:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:37 2025 by rpki-client