Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA04C7BADA8411EF9677A2B4762E951A.roa
File: BA04C7BADA8411EF9677A2B4762E951A.roa (raw, json)
Hash identifier: MbjWelZWoNZwyx51H1UyujS6FfXqXoUuad6v3c3V+uI=
Subject key identifier: 51:5C:AF:68:AC:3E:FC:ED:70:70:0B:42:0B:ED:6D:25:3B:7A:6B:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011028
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA04C7BADA8411EF9677A2B4762E951A.roa
Signing time: Fri 24 Jan 2025 18:55:06 +0000
ROA not before: Fri 24 Jan 2025 18:55:03 +0000
ROA not after: Tue 25 Feb 2025 18:55:03 +0000
asID: 44559
IP address blocks: 156.246.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69672 (0x11028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:55:03 2025 GMT
Not After : Feb 25 18:55:03 2025 GMT
Subject: CN=6793e20a-375e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:51:91:6b:2f:c3:8f:a1:ed:15:d6:5c:0c:
9d:d6:08:e8:3f:c7:4d:b9:de:94:68:65:21:53:53:
71:e7:a5:ca:8b:1a:91:35:4c:a1:27:46:d8:e5:92:
11:5f:74:7d:d4:24:a3:0f:39:1f:c2:15:20:99:44:
5a:c1:db:bc:95:cb:68:4a:c6:3e:68:81:1f:35:dd:
6a:e9:bf:59:e2:1f:a0:c2:b8:4b:d2:d7:d8:e0:ed:
f0:d8:8f:2a:63:e4:37:ac:48:f0:37:9b:04:ab:a3:
4f:cf:e1:d1:54:45:a2:1d:10:6a:74:46:7a:57:07:
64:17:d9:55:e9:c1:ef:a5:c3:b4:e7:5a:4c:72:57:
d0:2a:3e:fb:cf:1f:02:46:54:61:ea:37:78:06:5b:
68:c4:14:92:5e:69:d2:03:14:5f:c3:63:d7:a7:db:
9b:1d:cf:bb:e8:1d:97:28:4c:1b:12:de:3b:e1:c0:
ed:81:8a:82:89:6a:84:26:fb:03:fe:d3:60:fa:8d:
0c:83:9e:09:ab:ab:bc:96:56:44:eb:98:c0:37:0b:
bb:a2:d1:8b:70:89:8a:38:80:ec:de:48:74:a3:36:
02:7d:dc:56:2d:b0:97:93:17:8e:6c:0c:d4:3c:48:
54:60:1f:4b:d1:cf:e8:8e:b9:ad:97:35:1b:b8:24:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5C:AF:68:AC:3E:FC:ED:70:70:0B:42:0B:ED:6D:25:3B:7A:6B:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA04C7BADA8411EF9677A2B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:4d:d2:17:ca:24:1c:53:52:4c:b9:9d:44:ee:5c:82:e4:3a:
9b:84:a3:ba:0b:4d:50:fa:62:f6:60:64:9f:b6:cc:df:13:42:
82:5b:9e:8f:50:c9:d4:ce:ed:ee:28:b5:48:56:90:27:66:46:
22:b0:b4:9c:35:cb:1d:58:6f:cb:9d:38:1e:3a:ac:c9:21:94:
32:bf:1f:8e:0b:0b:54:71:b1:d8:1d:d2:e4:0b:2f:e6:27:bc:
e0:c8:df:cc:fb:55:2e:97:a0:b3:ad:34:de:82:81:4f:3c:d9:
76:bf:ba:2b:3e:ce:96:53:f9:0a:b8:74:20:3e:99:4c:3a:9e:
a2:64:60:f5:d9:6d:a5:80:10:4e:e4:04:ef:6c:03:02:6b:5c:
e3:83:c4:97:89:0c:88:09:93:43:4e:cb:af:d9:79:b2:0f:fb:
dc:02:c7:3a:34:00:86:e5:9f:66:22:1f:7d:78:d3:83:9c:47:
c7:03:6c:f7:20:e5:c0:20:4a:21:87:4b:d6:06:46:70:90:13:
a1:0a:ad:c2:77:05:50:73:9c:00:05:20:85:b0:1d:db:36:ab:
bd:b4:c0:68:7d:36:b0:fd:a3:b6:e1:e7:9f:3a:0b:77:b2:66:
55:8b:aa:ae:ff:f5:11:b6:bc:62:ad:e3:53:c7:ba:5e:22:b9:
ad:99:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:08:03 2025 by rpki-client