Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C773B4C2D71B11EF966AD581762E951A.roa
File: C773B4C2D71B11EF966AD581762E951A.roa (raw, json)
Hash identifier: Akxwiixp53/HbV3kd75OmiODasAW5NVK7XcfgSH+xF8=
Subject key identifier: 6E:AF:45:69:F3:BA:31:DD:38:4A:41:57:2A:C5:03:32:3A:66:B0:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C773B4C2D71B11EF966AD581762E951A.roa
Signing time: Mon 20 Jan 2025 10:46:18 +0000
ROA not before: Mon 20 Jan 2025 10:46:15 +0000
ROA not after: Sat 01 Feb 2025 10:46:15 +0000
asID: 48031
IP address blocks: 156.246.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68633 (0x10c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 10:46:15 2025 GMT
Not After : Feb 1 10:46:15 2025 GMT
Subject: CN=678e297a-6509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:42:d6:70:cc:cd:d9:cf:5f:6b:02:19:60:
f5:34:cf:34:6f:84:02:c6:4f:14:de:40:64:1b:ab:
72:a4:17:42:59:fd:f6:a6:9f:3f:07:83:ed:c7:fa:
ff:f4:0d:ed:19:c3:23:e5:48:8d:d9:09:4d:b0:03:
e1:f3:55:9b:8b:09:55:35:8a:61:e3:2e:db:fa:39:
47:cc:2b:89:23:7e:8e:0a:7b:da:a4:4d:f3:8e:bd:
ab:0f:54:d8:46:1b:95:07:35:4e:21:9b:c1:75:ac:
55:78:d0:62:88:8c:54:74:4d:af:2a:45:f6:61:d2:
8b:58:c1:9d:9f:16:b3:c1:b1:b5:43:87:2d:11:41:
f8:86:ee:60:45:bb:90:32:72:de:52:d6:41:6d:ac:
14:30:d4:ef:46:bd:dd:1f:1e:54:93:dc:e4:49:6b:
1f:61:cb:9c:8c:7c:29:ce:93:50:9f:59:9d:31:2a:
26:c1:b0:ca:d2:9a:b6:1c:da:b5:9d:82:24:3e:d7:
66:57:d5:05:fc:db:b1:45:3c:51:5b:3e:9c:d0:34:
79:49:a1:37:9f:7d:ce:e1:9d:1a:9d:38:75:34:e5:
af:09:33:1d:43:e3:4d:5c:b4:7c:78:dc:0d:42:a3:
e4:d9:6c:05:fd:97:a9:af:98:e5:11:cf:01:e9:91:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AF:45:69:F3:BA:31:DD:38:4A:41:57:2A:C5:03:32:3A:66:B0:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C773B4C2D71B11EF966AD581762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.128.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:16:64:3f:3c:6e:c2:5d:da:e1:80:fa:d2:50:27:ae:47:d6:
b7:eb:46:09:f3:60:fa:23:94:a9:dd:50:08:aa:28:98:2f:00:
01:ca:b7:66:14:12:e7:18:8d:d6:34:77:11:d3:82:f6:b6:f9:
5b:22:e7:68:5a:24:2d:0c:02:7d:ba:38:b4:46:cb:26:cc:3d:
d1:0f:18:94:98:bb:3a:3e:8a:fd:18:24:c7:25:9f:2a:c0:da:
57:58:70:91:74:f5:64:fa:9d:71:58:96:93:df:2c:98:e8:5f:
2f:42:24:fe:bb:c2:5c:83:ac:13:cd:16:6f:45:0e:10:49:c0:
89:7a:53:a4:31:1d:6d:93:3c:b8:2b:37:18:e2:4e:05:1d:a6:
bb:f9:14:30:5a:f8:02:f3:a3:b6:b1:f1:a1:75:93:7c:50:3d:
56:c7:42:b1:a7:b3:6a:af:6e:07:a8:b4:5a:fd:bc:1d:41:06:
93:8a:95:fb:37:4a:bb:a8:15:86:7a:ab:51:65:f4:1a:52:3a:
4c:f3:3c:45:be:8c:cf:c0:76:d1:89:af:fb:0e:f8:cd:f0:25:
5e:33:6c:90:d6:16:2e:c7:e3:ab:a5:f9:c0:81:cf:9c:75:28:
d1:f1:87:70:c2:3c:bf:b3:e6:2b:9f:13:17:bd:50:b1:04:68:
c4:56:00:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:38 2025 by rpki-client