Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8B94116DA9111EF8173468D762E951A.roa
File: C8B94116DA9111EF8173468D762E951A.roa (raw, json)
Hash identifier: OMtJJmBzdWSJQOet8fM7ktKUqSVjVgG7ltgzP7h/4Yg=
Subject key identifier: 93:9B:3B:17:B2:7D:18:F0:DB:70:70:10:02:7E:DF:F8:B6:9C:3B:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01107C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8B94116DA9111EF8173468D762E951A.roa
Signing time: Fri 24 Jan 2025 20:28:35 +0000
ROA not before: Fri 24 Jan 2025 20:28:31 +0000
ROA not after: Tue 25 Feb 2025 20:28:31 +0000
asID: 44559
IP address blocks: 156.246.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69756 (0x1107c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:28:31 2025 GMT
Not After : Feb 25 20:28:31 2025 GMT
Subject: CN=6793f7f2-20b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:8e:cb:cc:5c:2a:0e:2f:29:78:e8:b1:47:
51:61:b3:97:08:b1:f0:a8:ab:e2:3c:43:82:6f:99:
66:ae:eb:42:fe:f1:82:50:df:47:b4:90:3a:84:23:
0e:aa:73:cf:70:9e:c4:ef:76:ff:b4:0d:c8:74:b8:
12:07:16:4f:7c:6e:e9:d3:91:cd:85:ae:6a:3b:ff:
3c:b2:cd:f8:c9:8d:2c:04:b8:f7:32:f2:65:a2:f3:
b8:2a:55:c2:bc:c6:11:23:7b:25:16:a1:fb:04:2d:
6c:6f:55:f3:c8:2e:e4:3e:27:ec:5d:6c:a4:be:38:
a5:45:96:51:1f:c8:99:86:9f:1a:ee:35:6f:99:62:
f0:85:4e:65:51:b3:a6:01:90:89:57:d3:3e:03:a1:
69:bd:51:89:a1:db:ab:e6:5d:be:b2:9d:da:e8:dd:
72:0c:51:0e:d0:37:15:3b:af:c2:86:ac:bb:46:bc:
5e:03:90:56:5a:c3:88:c9:18:19:7b:16:02:08:c3:
c7:93:9f:fd:c2:85:f1:9c:e6:03:81:5a:74:6b:d1:
9d:2b:e4:14:f5:4f:c7:ee:e0:bc:de:41:10:20:a7:
c3:c8:93:ed:22:77:20:68:42:6a:a6:75:3b:54:42:
32:6a:21:23:b9:a6:c4:c0:80:09:f9:07:7b:08:9d:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9B:3B:17:B2:7D:18:F0:DB:70:70:10:02:7E:DF:F8:B6:9C:3B:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8B94116DA9111EF8173468D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.217.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3e:fa:1a:c5:31:eb:26:2c:80:7b:59:ad:f1:52:42:a7:fd:
ff:80:00:b0:0a:5c:9e:93:47:1a:5b:22:39:64:6b:be:78:f3:
de:2c:67:7b:63:84:89:7c:ee:02:0f:8b:53:00:4f:8c:cc:1e:
a2:ea:ff:af:0a:4e:92:45:33:02:eb:06:12:bb:9b:91:04:57:
00:36:90:2f:3b:6d:69:9f:d3:55:bb:80:c2:9b:13:3c:7d:e3:
94:18:82:a5:e8:80:f5:bb:b1:76:7a:ab:17:35:ea:cc:53:6b:
b3:c4:e1:65:71:1c:c1:4d:76:68:82:4a:20:c9:1c:e5:e2:2a:
2b:4c:17:7e:6f:6b:d5:f7:f2:ad:92:9c:91:a6:05:34:bb:7c:
02:57:ff:bc:68:41:61:7b:8c:5d:2b:4f:f3:4a:25:89:10:27:
05:91:64:ca:17:5f:f2:6b:85:1c:09:15:f5:2c:61:a1:e3:b5:
a1:d2:49:10:4f:1e:21:ab:9b:1b:cf:ba:ec:63:d0:94:db:6e:
1a:99:3e:32:0d:19:68:41:0b:f4:21:96:b6:52:6b:b6:1f:95:
ff:85:c1:63:6f:4e:be:32:59:fb:94:73:e9:5b:68:35:a3:4c:
63:b1:62:91:10:52:41:57:49:07:b1:05:2b:15:60:ca:85:be:
56:fa:d3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:53:52 2025 by rpki-client