Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3BCE082DAFE11EFB84D4277762E951A.roa
File: D3BCE082DAFE11EFB84D4277762E951A.roa (raw, json)
Hash identifier: JJ55VEPaZjoFxN7fYbCoiogYmaQP/Ms/bCgBYy6z3JI=
Subject key identifier: B2:E1:69:AE:FE:4E:C0:85:8C:8D:CB:22:C0:F3:A1:59:AE:1A:5A:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3BCE082DAFE11EFB84D4277762E951A.roa
Signing time: Sat 25 Jan 2025 09:29:08 +0000
ROA not before: Sat 25 Jan 2025 09:29:04 +0000
ROA not after: Sun 23 Feb 2025 09:29:04 +0000
asID: 48031
IP address blocks: 156.246.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70071 (0x111b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:29:04 2025 GMT
Not After : Feb 23 09:29:04 2025 GMT
Subject: CN=6794aee4-fa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:f3:f5:a3:ac:cd:2a:f6:20:2d:80:f6:6a:
6d:68:e4:9a:44:1e:0c:8b:c5:e4:32:6a:1d:e2:67:
36:a3:d4:0c:a8:f4:60:6b:f6:18:79:04:8d:1f:4d:
0f:d0:c6:c6:aa:c3:00:31:78:c5:62:b6:71:b4:14:
3d:c2:03:b1:91:44:f7:df:f7:3b:6a:3f:c4:45:a6:
33:ee:76:23:fa:03:6e:8f:8c:5e:fb:06:33:b4:d9:
7e:df:47:89:a1:b9:e8:36:5e:f3:66:53:4a:ef:61:
bb:b6:1d:25:a5:29:b2:81:be:18:6a:9b:9b:c7:dd:
d0:94:a2:9d:aa:4a:14:32:2d:7e:31:de:ef:01:26:
50:bb:0b:e8:57:60:ce:3b:a1:85:f8:24:08:e3:b7:
b2:bc:eb:48:6e:31:8d:38:95:e8:26:a9:c5:9c:ca:
47:33:ac:15:5d:73:ef:94:ee:05:43:05:4e:bc:66:
d8:c8:80:c4:5b:00:65:c5:3c:c5:f0:3a:a8:b6:a9:
3a:e4:41:79:56:83:ae:53:4d:d9:6e:66:68:54:fb:
44:0a:d0:1f:88:85:96:af:b0:5e:27:0f:98:f0:23:
95:b3:c7:ca:61:28:aa:2e:be:de:46:2c:df:b1:80:
28:d8:4d:a4:13:4f:e5:7d:68:0c:83:d3:7a:76:b4:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E1:69:AE:FE:4E:C0:85:8C:8D:CB:22:C0:F3:A1:59:AE:1A:5A:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3BCE082DAFE11EFB84D4277762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.142.0/24
Signature Algorithm: sha256WithRSAEncryption
40:7e:fd:a8:2e:fa:01:e9:be:c1:c4:a7:d4:78:67:f9:28:c2:
0b:69:e0:fe:a7:3f:c9:2c:8f:b7:7c:aa:e8:55:8d:88:3e:22:
cd:21:77:75:68:ae:30:67:e5:b4:31:f6:bd:d0:b6:ff:d1:0a:
90:49:96:fc:38:c7:8a:6d:49:56:be:2b:6c:0b:d9:33:c1:fc:
fd:20:6f:2d:f0:f4:12:9f:18:8a:1f:c3:a3:6d:ac:19:53:99:
6c:fb:07:31:85:8c:0c:a2:2a:50:21:9f:18:ac:08:bc:32:3b:
1e:75:48:bd:3b:1e:4f:89:27:55:b0:8a:73:f0:8e:d1:e1:16:
e3:77:a8:13:a0:c5:c3:8b:e0:5f:32:80:94:9c:93:63:f7:fe:
15:85:2e:4f:ab:6c:d3:c3:21:6e:4d:9c:36:45:ad:2c:18:20:
cd:d7:c2:ff:15:85:de:3c:59:89:89:a6:10:67:95:1b:80:75:
47:72:59:10:8d:95:2d:a0:48:92:b7:25:6d:72:f2:e3:d4:e3:
8f:d4:77:a2:79:5b:c8:9f:73:c9:7d:f3:11:48:1a:d1:15:7b:
6d:86:5f:95:ab:0f:39:2d:32:8a:c3:f0:63:4c:20:d3:1f:88:
43:e5:16:ca:95:fa:0e:e6:29:10:52:b2:eb:dd:cd:98:e3:51:
8c:04:e6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:58:56 2025 by rpki-client