Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1105B68D7F611EFA5F87F9C762E951A.roa
File: C1105B68D7F611EFA5F87F9C762E951A.roa (raw, json)
Hash identifier: vP76MGHllG1je+q10xFENouZPH9501FSt20Emi/k9Kc=
Subject key identifier: B9:08:7E:EA:10:B7:43:7D:AB:C3:23:38:DE:19:D8:EC:16:B7:73:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1105B68D7F611EFA5F87F9C762E951A.roa
Signing time: Tue 21 Jan 2025 12:53:47 +0000
ROA not before: Tue 21 Jan 2025 12:53:44 +0000
ROA not after: Sat 01 Feb 2025 12:53:44 +0000
asID: 44559
IP address blocks: 156.246.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69048 (0x10db8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:53:44 2025 GMT
Not After : Feb 1 12:53:44 2025 GMT
Subject: CN=678f98db-0922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:e2:64:54:33:30:7b:58:41:c0:68:e2:7b:
f5:30:17:8a:9e:7d:41:5c:aa:e9:5b:e4:ef:a3:f5:
34:a7:ad:b3:02:7a:5d:08:97:29:91:b2:9b:ad:c1:
04:8e:33:d8:25:6b:45:48:a5:00:8c:ae:f7:62:2d:
6f:a2:39:a7:fd:9c:3d:77:b3:2c:43:84:8f:c8:58:
ce:07:5c:c7:05:95:ec:7b:d8:47:d0:70:fb:c0:21:
3f:33:15:60:62:e4:c8:ef:b5:7f:c1:38:94:a0:a1:
7f:a8:e8:11:0d:53:cb:c5:71:7d:81:e3:8b:e9:b6:
32:0f:a4:f4:a4:eb:0b:22:97:f7:31:8e:fd:fc:4d:
b8:a4:c7:07:90:27:3c:fe:05:a1:fc:54:86:6f:bd:
57:85:a4:62:f1:2b:83:e6:d0:16:c3:1d:4b:28:1e:
76:98:30:e4:d0:3a:4b:aa:3d:7b:d5:0f:a1:9f:9d:
9d:9a:60:f5:c9:c5:6a:82:c8:d1:c2:2d:60:a1:9c:
15:bc:8b:7f:9b:7f:fd:e0:95:5a:ee:f5:d2:3d:10:
f2:72:12:8d:82:79:51:3a:c6:10:3a:ae:cc:46:38:
88:b0:53:7c:8e:4c:02:fa:0e:e2:79:7e:ec:7b:5f:
ad:8b:3d:28:43:c4:41:ed:47:34:8c:a0:a8:ee:5c:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:08:7E:EA:10:B7:43:7D:AB:C3:23:38:DE:19:D8:EC:16:B7:73:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1105B68D7F611EFA5F87F9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.253.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b2:5f:10:e2:86:4d:eb:3a:33:df:d1:23:da:eb:52:a2:cc:
39:aa:3e:4c:27:11:96:54:3d:62:00:55:c0:96:53:a9:33:46:
15:ca:02:7e:bb:0c:0c:24:30:64:77:59:e9:6d:06:74:06:18:
d4:26:a8:2c:e4:24:fe:e7:47:b5:19:6e:da:d4:79:89:36:aa:
98:d4:70:18:ad:98:3d:f3:d7:ee:1e:67:bb:c9:be:8e:a9:67:
e9:3e:fb:00:93:c6:5e:dc:62:8e:49:cc:d1:34:2a:78:fb:6f:
3f:3d:d6:4a:b5:60:8a:17:83:49:8f:9f:91:0a:c0:79:aa:40:
ff:87:42:f5:a5:2d:83:fe:17:8e:60:c2:fb:ca:dd:7d:de:46:
0f:39:86:c1:ff:79:6c:a6:72:a2:b0:77:af:e5:7d:f7:48:78:
8e:75:48:39:e3:9c:43:5f:a8:c8:b4:fc:87:2b:5c:fe:ca:ea:
51:f2:f8:a7:88:35:ba:ec:7c:4c:a9:b1:e2:28:65:82:8f:06:
d4:5d:ef:1a:59:d6:52:55:4b:38:6c:b4:66:eb:b3:60:03:37:
31:ed:1e:e0:d7:03:76:5f:e6:ac:81:81:8b:3b:f2:43:e2:cc:
86:64:9b:cb:d7:be:44:70:a8:65:ab:04:d8:c4:0a:d6:fa:f0:
64:e4:2d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:27:01 2025 by rpki-client