Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1F8255ACCE411EF9AC6137D762E951A.roa
File: C1F8255ACCE411EF9AC6137D762E951A.roa (raw, json)
Hash identifier: oaVeMizhbhcPKeGtd/2OthyRxdtI7zI5OlL3yl8HnQk=
Subject key identifier: A4:EA:C0:8A:F3:C8:4F:2D:31:04:08:5D:9E:D0:93:7A:F3:E4:8A:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1F8255ACCE411EF9AC6137D762E951A.roa
Signing time: Tue 07 Jan 2025 10:47:15 +0000
ROA not before: Tue 07 Jan 2025 10:47:11 +0000
ROA not after: Mon 13 Dec 2027 10:47:11 +0000
asID: 17561
IP address blocks: 156.233.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64451 (0xfbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 10:47:11 2025 GMT
Not After : Dec 13 10:47:11 2027 GMT
Subject: CN=677d0633-d7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:95:58:80:85:0f:89:92:cd:e2:9a:37:78:08:
33:76:4a:66:75:7d:06:12:60:8b:f0:20:27:db:3f:
10:e3:1e:e2:1f:26:9e:56:b7:05:31:b7:ae:cd:8e:
4d:e7:da:c3:b0:c1:48:80:8c:95:f6:b7:8f:76:35:
12:0e:92:bd:f9:c2:f5:c1:48:84:c3:b4:6d:65:7f:
3f:8a:76:82:93:70:fc:28:75:9a:8d:bd:ae:03:64:
7a:c2:69:fb:d1:70:c7:72:74:5d:34:97:f3:17:47:
1c:2d:13:cd:02:9b:0a:f6:59:c2:a9:78:af:92:62:
96:38:af:5d:28:90:e7:66:d4:71:5b:e2:73:a9:f1:
02:e6:7e:fd:96:6c:83:e0:2c:d8:bb:d7:67:d6:40:
f7:59:c4:69:72:0d:7f:e3:93:24:58:fb:76:64:03:
7f:df:9a:17:87:93:7c:6b:22:78:7d:ff:3c:9b:f5:
67:61:81:8f:9b:7e:9c:a4:6b:53:89:8c:14:ac:95:
b7:af:3e:a5:84:4b:a7:76:78:63:8a:dc:35:f2:2f:
e8:63:9d:57:04:ed:71:e9:8d:08:0d:6f:9e:d7:05:
d0:db:66:a4:d5:b4:65:be:c2:ca:11:0f:69:a4:a3:
14:27:b0:69:30:3a:d2:ec:50:75:75:f0:a4:af:a4:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EA:C0:8A:F3:C8:4F:2D:31:04:08:5D:9E:D0:93:7A:F3:E4:8A:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1F8255ACCE411EF9AC6137D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.246.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e2:2b:a5:19:85:4b:d0:26:00:6e:53:42:52:68:fc:e0:9e:
2b:5b:2a:fc:4c:0b:b9:14:f8:fc:d1:ca:c2:66:df:b4:ef:98:
30:e5:d0:03:32:88:a8:c3:60:aa:31:95:64:13:20:f4:c8:a4:
18:8d:0c:b4:e1:dd:b6:d9:77:99:b1:e1:5f:8a:d4:85:07:36:
5d:b1:6d:47:aa:90:bc:1f:e3:1b:d6:ef:83:30:5a:39:4f:c3:
69:66:42:51:c1:c4:8f:55:f7:8b:78:aa:4f:5f:cd:7c:26:a2:
f2:7e:3d:01:77:9a:02:6b:1b:02:dd:fa:7c:36:e0:33:40:a1:
d5:f5:7e:91:54:6d:dc:41:f7:67:8c:e1:90:3d:7d:89:ba:1b:
79:6c:64:d1:17:56:d0:98:be:8b:6d:5b:56:b1:06:41:9a:90:
91:d4:e3:20:c8:e1:22:e9:2a:5a:b2:1d:7b:b0:12:49:72:c7:
43:05:f5:c3:9d:97:56:bb:da:e0:3f:1d:78:95:73:a6:2b:60:
af:2c:e0:8f:d3:7e:45:9b:93:06:4a:1b:29:27:ea:fa:3e:77:
02:9f:54:fe:f8:9e:64:1f:f7:cd:35:c9:aa:fd:38:db:3c:95:
76:db:05:b2:cc:2b:79:c9:74:9f:b1:ca:c5:1d:87:0f:cd:86:
cb:67:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:33 2025 by rpki-client