Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF59BEC8D7F911EFBD67BAAE762E951A.roa
File: CF59BEC8D7F911EFBD67BAAE762E951A.roa (raw, json)
Hash identifier: PRD++m8wftCWiQ1vJHav3clOfELvRfReeSQfCe6f2gM=
Subject key identifier: 13:28:7A:C1:29:CD:21:E0:93:39:13:97:9D:65:14:A5:E8:35:F8:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DCC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF59BEC8D7F911EFBD67BAAE762E951A.roa
Signing time: Tue 21 Jan 2025 13:15:40 +0000
ROA not before: Tue 21 Jan 2025 13:15:36 +0000
ROA not after: Sat 01 Feb 2025 13:15:36 +0000
asID: 48031
IP address blocks: 156.246.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69068 (0x10dcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:15:36 2025 GMT
Not After : Feb 1 13:15:36 2025 GMT
Subject: CN=678f9dfc-aeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:84:32:03:fd:e2:8b:05:d3:5f:1e:11:4b:
35:48:37:2f:ac:24:fa:62:6b:83:e4:5a:eb:e4:45:
65:d4:fa:7b:01:52:d8:ce:2d:f3:f9:b9:2a:94:50:
bc:4a:1f:75:3b:01:58:35:a9:c3:de:3f:82:1f:1a:
3c:b1:f8:bd:f2:4b:9f:59:86:fa:6d:85:57:0c:f2:
8d:b1:4e:da:63:6a:07:4f:1d:ad:eb:3d:aa:8c:71:
d2:d5:e1:b8:66:12:69:7c:48:74:16:cf:10:88:ff:
db:6e:c4:6b:e0:c7:fd:b3:0e:e9:81:5b:34:48:fc:
56:70:37:27:a4:ba:93:7f:04:e5:28:b3:4f:1a:d0:
8d:89:fe:14:f1:04:89:ca:3d:e2:b6:b9:f4:2d:c9:
e4:f2:a5:ae:fd:c9:a6:b4:f6:04:62:fa:99:73:e1:
45:1f:1a:6a:ef:72:50:9b:7e:b0:9b:73:da:40:2f:
8e:26:0d:83:b1:cb:8c:03:03:e0:cc:0a:9f:f9:fd:
86:d7:3f:75:d7:5f:a8:3b:d4:a4:eb:6a:b7:97:c3:
6b:d9:7c:c2:1f:05:07:be:7d:7f:df:8b:71:ae:ee:
7c:8a:f7:ed:3e:7f:60:9c:5f:3b:4b:c1:dd:50:6d:
c8:53:d6:34:7a:39:b7:c3:25:e1:7e:fb:51:e3:85:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:28:7A:C1:29:CD:21:E0:93:39:13:97:9D:65:14:A5:E8:35:F8:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF59BEC8D7F911EFBD67BAAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.135.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9b:79:c5:a1:f0:88:4f:55:02:b7:30:f0:f1:fb:83:49:cd:
e1:dd:3d:6e:8c:90:1c:b2:62:b1:7a:51:18:8b:c3:85:c4:c3:
61:43:45:e3:de:1f:33:64:30:c0:e3:7c:a6:6a:63:32:db:21:
d1:85:fc:38:99:fd:6c:3c:dd:2e:2d:c5:5f:67:44:67:13:d7:
a5:e6:21:cf:67:e1:d4:23:56:c6:ce:19:3a:a8:9d:d6:12:42:
0a:f5:fe:01:2e:44:95:96:5c:c0:1e:4e:83:c7:b5:1c:d2:d0:
51:c2:92:dd:f9:1b:f5:83:7b:99:2b:cc:dd:b1:d4:bc:fd:ce:
ec:42:af:38:35:e3:04:98:ce:bf:77:d5:fe:bc:d1:ac:f1:52:
a8:87:18:ef:29:2e:2a:52:8b:c7:7a:24:d2:a3:e0:0e:b9:b9:
b0:1a:cb:b8:19:bc:2e:9c:3c:6e:39:b8:8d:00:c4:a5:cf:b8:
de:37:b8:e7:9e:ee:9f:13:e6:1a:70:9a:9f:d7:3b:a9:0f:db:
7a:43:ee:32:7f:f4:d1:cb:52:c0:6c:f6:d2:34:9d:b8:21:55:
c5:e5:9f:57:3f:31:4c:55:9b:61:ee:75:ae:00:ae:58:1e:2c:
e3:c6:b6:d8:65:78:32:67:74:e5:0d:13:b6:9a:9e:17:bf:cd:
ec:d8:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:01:47 2025 by rpki-client