Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBC33098D80C11EFAAFF81A9762E951A.roa
File: BBC33098D80C11EFAAFF81A9762E951A.roa (raw, json)
Hash identifier: RdtxRsSUB8dZmBk0X0duOZ6Wr51j+lgkLu7Gvd3hW+Q=
Subject key identifier: EA:00:06:AC:D5:5C:D0:E6:10:19:D8:E3:ED:CF:A5:80:65:07:54:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBC33098D80C11EFAAFF81A9762E951A.roa
Signing time: Tue 21 Jan 2025 15:31:07 +0000
ROA not before: Tue 21 Jan 2025 15:31:04 +0000
ROA not after: Sat 01 Feb 2025 15:31:04 +0000
asID: 202656
IP address blocks: 156.246.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69194 (0x10e4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:31:04 2025 GMT
Not After : Feb 1 15:31:04 2025 GMT
Subject: CN=678fbdbb-c425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:4b:1c:59:fa:9b:a1:e6:d6:77:a8:c9:eb:
92:42:24:a4:c9:4b:89:d1:45:82:d3:06:58:53:e8:
e3:b8:e4:22:bf:49:a5:e5:84:6e:01:9a:1f:ab:45:
ee:a4:e9:36:b3:7e:a4:5f:2b:1d:61:2f:cf:21:ff:
1a:26:30:63:d5:de:37:a5:ad:05:8a:73:77:1b:70:
25:3d:9a:eb:8b:8b:cb:0b:2f:1c:5d:f9:f1:71:67:
95:ea:46:6e:6b:6c:10:c6:8d:82:b5:fc:61:9b:8b:
3c:89:da:fb:d0:fb:8d:28:29:a0:89:5b:7e:d7:78:
8a:cd:10:a4:f7:fb:e3:55:92:7a:25:bf:25:82:f7:
78:f5:da:f0:3a:50:92:96:89:fa:bb:e5:38:67:be:
69:85:ce:8a:a6:54:97:5e:3c:5b:3a:a1:a5:fb:0c:
9e:3a:56:55:2d:05:1f:0c:8b:8a:a0:45:0c:c0:64:
fa:ec:3d:cf:c3:6f:3b:df:0c:22:42:53:7d:74:f6:
07:a4:77:97:89:5b:01:dd:24:b4:de:48:c8:34:de:
dc:36:41:29:80:9e:50:d6:85:0b:12:3c:d2:07:6c:
e8:56:1d:82:3e:e5:0b:1a:5e:80:89:70:8a:e5:bd:
2d:9c:64:6e:42:88:94:e4:8a:37:99:c8:3e:f7:a4:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:00:06:AC:D5:5C:D0:E6:10:19:D8:E3:ED:CF:A5:80:65:07:54:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBC33098D80C11EFAAFF81A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.162.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:2d:c5:c3:00:f3:5c:e7:7f:9d:ec:8d:71:0b:99:0e:f7:52:
3c:a3:aa:a4:7f:e0:fa:3b:6c:40:c1:b7:0d:f9:e3:80:2f:0c:
2f:19:d3:72:45:e1:59:c7:63:13:bd:b3:6c:d5:e8:1a:9e:f5:
33:23:49:10:1c:aa:38:2d:ab:83:4f:46:68:73:d1:22:1c:c1:
18:9c:c3:b6:d0:52:9a:c6:0d:b4:8b:94:5c:32:88:27:50:9d:
3a:6a:eb:e6:94:bb:49:2e:70:47:7f:01:bc:4e:61:75:69:58:
d5:47:4e:fa:c2:27:64:2a:ca:ee:88:40:5c:83:21:3b:7d:0b:
9a:e4:6a:bf:ea:9c:1f:b6:e5:ff:04:71:fe:68:2c:80:a7:73:
0a:1d:99:f7:9b:11:46:59:bb:e8:b5:31:70:d3:69:d1:e6:84:
0c:a7:b7:3c:b8:42:b0:8a:5b:8f:1c:cc:bc:13:ae:f9:6a:cd:
5e:39:c8:22:8e:25:7f:1c:f1:d8:d2:af:81:67:2d:8d:2f:f5:
bf:8b:fa:56:b3:bb:f4:b9:fc:66:5e:22:d2:59:47:5a:fc:82:
28:63:bf:0f:25:d8:09:d9:c1:b9:cb:3d:89:66:2d:29:38:d5:
6c:6d:7b:d2:64:27:a8:fb:f2:83:b7:31:26:8d:4c:8d:57:7d:
f6:1f:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:15:31 2025 by rpki-client