Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEDFFE56DAF811EF88E85B4D762E951A.roa
File: CEDFFE56DAF811EF88E85B4D762E951A.roa (raw, json)
Hash identifier: byEASQdTaopKYIPkyHRWhfQe3VMf+NJHeP6/+pL3ykQ=
Subject key identifier: 6C:B8:57:4E:B5:A0:F2:6E:B3:F7:75:76:6C:98:D0:01:B4:D0:55:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01118D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEDFFE56DAF811EF88E85B4D762E951A.roa
Signing time: Sat 25 Jan 2025 08:46:03 +0000
ROA not before: Sat 25 Jan 2025 08:45:59 +0000
ROA not after: Sun 23 Feb 2025 08:45:59 +0000
asID: 44559
IP address blocks: 156.246.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70029 (0x1118d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:45:59 2025 GMT
Not After : Feb 23 08:45:59 2025 GMT
Subject: CN=6794a4cb-dd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:7e:bd:82:8c:b6:e0:08:93:e7:91:a3:9c:
64:64:9d:ce:4a:8c:f5:2b:1b:97:ec:2f:0d:29:88:
19:b4:96:47:57:93:a0:f8:07:37:16:6f:32:b9:e7:
b8:96:d4:fd:fb:31:68:a4:86:af:5c:34:3e:7b:6e:
b9:d7:93:ab:27:5e:71:e6:30:52:00:80:35:11:69:
92:53:f1:9a:f4:db:be:25:a4:98:2d:f0:68:0d:f0:
53:56:f5:0a:cf:a0:c7:98:05:41:82:68:47:fd:63:
13:75:76:be:93:2f:ca:fa:48:b9:44:e8:1c:8d:d6:
24:1e:6b:19:ae:e0:a6:e0:ca:0d:77:ad:9c:27:8d:
5a:62:20:e4:97:92:44:04:59:11:46:bb:54:01:25:
11:9b:23:c9:15:cf:5d:05:d1:eb:d1:60:12:39:01:
07:c7:7c:2e:a5:5d:8b:fb:b8:df:82:8e:bc:bf:4d:
38:5a:53:cc:a5:6a:d3:33:eb:ca:36:85:b8:e2:24:
a0:04:c3:6b:4f:f9:d3:54:65:59:98:ab:d2:aa:21:
6c:3a:bc:89:1e:14:ff:d3:c4:0f:11:55:ba:16:88:
9e:68:1f:13:e2:31:30:15:30:51:c7:85:41:35:07:
ba:03:7f:5c:03:e4:4e:0c:50:f7:84:ec:28:7d:30:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B8:57:4E:B5:A0:F2:6E:B3:F7:75:76:6C:98:D0:01:B4:D0:55:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEDFFE56DAF811EF88E85B4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.249.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ca:f5:50:ef:20:58:91:62:ed:15:2c:eb:92:9b:da:a9:5c:
7f:64:96:8b:e4:03:b4:75:a9:27:8b:9d:03:ee:c2:83:e2:58:
28:01:e8:f8:c6:07:f8:2c:6c:16:03:c0:a8:41:2c:76:14:c5:
08:e0:e4:ff:4c:98:91:42:5a:f4:bd:fe:e6:b4:d3:99:89:a9:
eb:64:e2:ab:e1:79:c8:c3:02:82:d2:a6:09:0c:85:d5:dc:c0:
03:33:00:64:8e:3d:9a:20:ce:20:83:f3:4b:ee:1d:35:48:40:
59:db:23:f3:09:e0:3d:a6:19:6e:c4:73:05:b6:09:7e:83:0f:
dd:54:6b:bb:fb:32:cd:68:1c:4f:f6:42:b3:b0:a4:ff:91:a3:
01:b8:20:b0:31:8d:6f:1a:da:05:c6:17:02:01:6d:0a:96:7f:
4e:a2:2e:4b:b1:1c:7a:8a:eb:b4:06:40:92:fb:51:44:cf:67:
37:14:7e:9a:b5:89:cf:ae:4c:cc:bc:2a:33:c4:c6:c9:52:db:
f4:79:d5:7c:21:8f:98:30:41:02:35:a3:92:bd:4b:7d:f6:04:
7d:9f:0c:ef:c9:ac:b9:e6:28:d5:3f:bc:44:b1:74:eb:e2:7f:
76:1e:d2:87:df:b8:22:22:61:8f:be:a1:b3:41:1e:8a:35:69:
bd:f7:30:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:31 2025 by rpki-client