Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF37B31ED7CC11EFBA2C128D762E951A.roa
File: CF37B31ED7CC11EFBA2C128D762E951A.roa (raw, json)
Hash identifier: mENcSU5zoq92pSM3kodqXg3AUU4MrnRPB5gvS2jjiO4=
Subject key identifier: BF:1E:1D:61:A2:A5:0F:B9:68:8F:E0:1C:5B:08:7C:3A:66:E4:80:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF37B31ED7CC11EFBA2C128D762E951A.roa
Signing time: Tue 21 Jan 2025 07:53:32 +0000
ROA not before: Tue 21 Jan 2025 07:53:29 +0000
ROA not after: Sat 01 Feb 2025 07:53:29 +0000
asID: 44559
IP address blocks: 156.246.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68828 (0x10cdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:53:29 2025 GMT
Not After : Feb 1 07:53:29 2025 GMT
Subject: CN=678f527c-5081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:51:c8:90:72:23:d2:53:b4:8e:16:cb:3a:
c9:e8:a8:ab:7b:5b:e1:4e:28:31:b7:f4:6e:7c:15:
90:0e:e9:77:95:41:6c:d9:9f:fd:00:b7:d8:96:0e:
4d:57:d1:08:6b:a1:6e:88:e0:59:bc:6d:91:b3:19:
0d:37:a7:2b:16:bf:21:43:c5:ce:1f:e8:f6:3a:3c:
f9:09:a3:5e:46:4c:65:92:32:a3:f1:35:92:cb:27:
e3:fd:e5:93:6c:34:54:1f:c2:74:df:c9:81:66:53:
f9:37:cc:96:43:00:7e:19:d5:60:0c:ca:b5:55:bf:
58:db:46:40:dc:9f:86:09:bd:f1:41:e2:24:6f:40:
31:81:bf:37:2f:67:e1:07:18:b4:72:a5:50:21:ec:
73:72:27:14:25:c6:55:d9:97:c1:47:c2:0c:fb:49:
42:e8:1b:ce:e6:5f:91:ee:93:75:3d:c0:ef:88:6d:
9b:26:9a:78:60:fa:d3:89:0b:e6:c4:80:7a:df:8a:
ac:9d:1e:7c:82:c1:7e:81:a2:19:e6:85:72:12:87:
81:f8:0f:25:04:da:cd:d4:3c:6a:c7:e9:dc:d1:76:
66:9b:81:3b:71:3e:fe:61:16:73:9d:ce:20:2d:bb:
ea:dc:c9:68:52:2b:55:51:d1:95:57:ad:5c:d7:2b:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1E:1D:61:A2:A5:0F:B9:68:8F:E0:1C:5B:08:7C:3A:66:E4:80:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF37B31ED7CC11EFBA2C128D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.185.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d9:f7:4a:fc:a1:7a:3a:68:22:b8:85:99:71:63:81:cb:47:
48:ee:7b:ea:1b:0d:23:31:40:3e:81:a6:d7:70:1d:4a:db:d0:
3a:e7:3b:2b:1c:7c:34:e5:a4:a8:54:e0:f9:ac:67:66:b3:8e:
4a:04:d1:10:ee:dd:af:f9:a9:96:e1:a1:8f:49:bd:d2:eb:3d:
2d:c6:68:5c:7f:93:e0:b5:b1:a9:f7:d6:2e:93:9d:0d:af:63:
2c:9f:cc:ca:bc:e6:63:9c:cc:92:d1:25:ac:2f:75:e6:cb:ac:
89:bf:e1:69:3b:8f:67:5e:31:d5:00:43:dd:4a:6b:8d:03:31:
06:0e:44:29:a1:36:e6:3c:b5:f3:93:7d:20:2e:23:5c:a2:b6:
54:02:57:39:93:b8:ab:55:8d:37:2b:66:b6:2f:f7:b8:5e:85:
ac:96:45:69:a5:bd:5e:2d:61:3e:3f:da:b5:47:e1:fa:50:30:
7e:89:37:83:d9:d2:d4:e8:72:0f:0c:0a:d3:6e:80:51:58:7a:
88:36:c9:2e:b1:00:7a:54:8d:2d:49:98:13:7d:eb:b1:92:6f:
fd:49:f0:7f:46:ca:ef:98:90:72:f9:ba:c8:33:11:e6:22:f1:
7f:a7:f5:13:ad:0b:99:39:cc:7f:fd:f2:ac:76:4c:78:f8:90:
a5:e6:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:52 2025 by rpki-client