Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDD5DCF4DA8811EF9D584851762E951A.roa
File: BDD5DCF4DA8811EF9D584851762E951A.roa (raw, json)
Hash identifier: dLqWrr4joC8cbgQc79Ygrmkp9MPH9EHtDiRDGkuFUyw=
Subject key identifier: 98:BF:35:05:49:92:78:E2:24:26:DB:A1:90:C7:6A:89:05:AC:0B:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011042
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDD5DCF4DA8811EF9D584851762E951A.roa
Signing time: Fri 24 Jan 2025 19:23:51 +0000
ROA not before: Fri 24 Jan 2025 19:23:47 +0000
ROA not after: Tue 25 Feb 2025 19:23:47 +0000
asID: 44559
IP address blocks: 156.246.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69698 (0x11042)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 19:23:47 2025 GMT
Not After : Feb 25 19:23:47 2025 GMT
Subject: CN=6793e8c7-058f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:d6:2c:88:0d:8f:eb:04:9f:89:55:62:43:
ba:67:c2:b8:a9:5a:7a:dd:eb:ce:ec:bf:28:d1:1d:
d9:cc:ff:81:4a:54:b7:bb:f1:1f:be:a7:74:34:d1:
d1:ab:99:91:fd:44:cd:12:a1:28:3b:0f:f1:ad:11:
0b:53:32:ed:cf:a6:8e:f8:d1:87:3f:c5:4d:6d:e4:
ba:c3:f8:d0:63:69:3a:c5:fe:56:10:d9:3b:ba:e7:
22:cf:de:94:c9:4c:8e:74:5a:77:c4:08:62:4c:a0:
b6:12:e9:bd:01:fd:5c:72:81:8f:42:45:a3:04:9e:
f2:2a:32:c7:06:b5:62:05:64:ad:7d:9a:02:20:86:
ed:f4:e0:48:7c:a3:e1:7f:db:a8:57:9b:ee:5f:6f:
d0:7e:79:44:90:56:fc:6a:cc:98:03:69:c9:be:37:
0a:cc:2c:d7:57:df:e0:94:5c:5a:a7:19:db:a6:59:
f3:54:25:f8:52:6f:2b:a1:07:f8:66:24:3b:b3:1c:
0a:be:b9:a6:8f:eb:a5:63:34:6b:b5:be:51:d9:77:
6e:79:05:72:46:96:c9:ba:0f:a4:83:0b:c3:ab:9a:
c8:bb:8c:90:cb:a7:6f:8f:be:42:03:73:a5:05:ae:
d2:1f:71:9b:cf:b1:67:a0:12:8b:23:07:59:2d:66:
bb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BF:35:05:49:92:78:E2:24:26:DB:A1:90:C7:6A:89:05:AC:0B:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDD5DCF4DA8811EF9D584851762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.199.0/24
Signature Algorithm: sha256WithRSAEncryption
04:16:82:e9:a4:a4:29:68:30:9e:73:0f:4e:a2:64:b2:f5:44:
82:cd:10:c5:dd:c9:79:71:a5:a0:cb:ad:82:25:91:68:43:e5:
17:f4:bc:32:a9:c5:7e:72:62:5d:57:a6:58:e5:40:06:cd:1b:
d4:96:f0:f8:bc:58:30:b8:c8:ae:c9:cc:78:f8:42:32:f0:fe:
60:7a:cf:34:d5:06:15:1e:d6:ea:3d:4a:91:5d:2d:8b:f4:96:
81:0c:57:15:84:3c:bd:10:df:d6:e6:17:f0:d9:4f:3b:36:9d:
fe:62:b9:0c:07:83:99:1c:7f:05:d7:45:26:e5:e1:95:dd:46:
48:b4:00:da:bf:b9:33:74:cb:96:1c:2d:b6:53:82:2f:3a:10:
55:6e:71:d7:18:16:f4:40:25:19:b7:e5:2a:b6:37:d3:64:01:
7a:a1:7b:ba:c4:50:35:68:a6:05:b7:92:fb:0a:95:48:63:06:
50:b5:81:d9:5d:90:75:78:3f:40:b1:ee:77:83:04:4a:06:f4:
c2:6a:29:72:4e:ab:72:1f:a5:1d:1e:64:ad:5a:a1:99:14:54:
54:65:6f:92:5d:3c:41:cb:1a:48:bf:1d:45:75:f3:a3:a3:aa:
77:f9:04:b2:ec:f5:aa:e4:21:73:ee:5b:3b:84:82:bb:9b:8e:
24:75:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:59 2025 by rpki-client