Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB6A228CDA8C11EF8198096D762E951A.roa
File: BB6A228CDA8C11EF8198096D762E951A.roa (raw, json)
Hash identifier: JLis4OEZnQ5CXFWZDvPW58UMkoY0fLzVTlSdZAfSJ8Q=
Subject key identifier: B0:54:3A:D2:C4:78:57:28:F7:74:68:BC:82:99:C7:4F:20:BC:51:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01105C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB6A228CDA8C11EF8198096D762E951A.roa
Signing time: Fri 24 Jan 2025 19:52:25 +0000
ROA not before: Fri 24 Jan 2025 19:52:21 +0000
ROA not after: Tue 25 Feb 2025 19:52:21 +0000
asID: 44559
IP address blocks: 156.246.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69724 (0x1105c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 19:52:21 2025 GMT
Not After : Feb 25 19:52:21 2025 GMT
Subject: CN=6793ef79-5182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:fb:78:3e:8a:f2:b9:8a:0b:64:9d:ac:7d:
94:ad:ce:e3:88:b5:e8:48:29:5a:1d:a7:d9:08:29:
6f:0c:4c:03:7b:a7:30:08:e8:35:7e:cf:7b:37:5f:
70:c1:1b:a8:8e:93:2a:0f:c1:97:03:58:35:d0:dd:
08:1e:1f:02:c5:d6:d0:0c:a0:11:e5:0f:4b:15:97:
e3:3b:02:1e:aa:dc:f1:da:c5:6a:ed:3d:37:9f:90:
34:89:f9:4b:e0:e4:23:30:cf:84:bd:e0:b9:59:5c:
20:84:6f:00:a5:84:7d:27:f9:02:38:1b:6d:63:0d:
16:08:5a:72:a3:6f:77:30:9b:b4:40:62:a4:aa:b3:
ef:af:d1:7c:95:6a:9a:46:8c:4f:50:a3:9a:74:fb:
23:13:cf:35:93:84:af:c6:eb:93:b0:17:b8:75:b7:
f3:79:9b:51:83:0e:33:a3:83:f3:83:73:0e:d9:7b:
4a:ac:10:e8:66:87:5f:6a:d7:35:a7:29:a2:4e:9f:
fa:f5:a9:bd:8f:36:fa:d6:e3:81:fb:30:c1:74:00:
01:a9:95:e8:49:fb:3d:be:62:86:f7:79:fb:ef:5b:
b8:81:89:ec:a1:78:c0:b1:8d:31:c9:ae:f6:72:c4:
1c:62:49:2e:6d:c3:de:ce:30:bd:fd:64:47:be:db:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:54:3A:D2:C4:78:57:28:F7:74:68:BC:82:99:C7:4F:20:BC:51:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB6A228CDA8C11EF8198096D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.212.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2b:e4:fc:35:fa:c8:e9:01:d5:0b:a0:f0:2d:30:f7:1b:8a:
18:65:f0:ab:55:13:d9:e4:35:1c:8c:a6:3d:dd:68:f8:12:f7:
33:f3:df:6e:7c:b9:75:45:5d:12:5b:62:4d:8e:d3:44:74:7e:
23:b7:61:87:3a:1b:9f:f7:6d:e5:4a:1b:c4:1a:6c:69:bf:40:
bd:5a:af:ed:d2:a5:62:f3:67:aa:4b:d1:aa:1f:e2:76:be:50:
3b:42:d2:54:c9:cb:42:83:08:8e:00:98:54:c4:6c:47:2b:0f:
03:2f:0f:ef:3a:d5:61:a4:38:94:bb:fd:94:49:2b:25:5e:9b:
28:50:49:9d:89:e3:72:7b:df:de:17:52:86:c9:99:7b:77:28:
b5:06:fd:f9:f3:2c:a8:ea:ca:bb:12:c4:6d:1f:f2:a1:32:82:
92:de:53:0e:ac:78:98:c6:78:7a:4c:cb:cf:cb:dc:ec:e6:ac:
0e:08:a4:10:03:16:6d:ac:52:99:a4:ba:d3:9b:0c:71:37:62:
5b:c4:42:8b:2e:38:e3:b9:cc:5d:4e:e2:49:11:50:c8:1b:e6:
ec:85:e4:35:5f:38:1a:4c:c4:13:98:f6:f5:60:c1:6d:ea:9e:
c0:22:4a:0d:2d:5c:e3:53:62:da:61:ae:dd:9a:78:dd:00:84:
05:f6:ae:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:45 2025 by rpki-client