Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6A17F6CD7E611EFAF6356B3762E951A.roa
File: D6A17F6CD7E611EFAF6356B3762E951A.roa (raw, json)
Hash identifier: +1EiT6vwjbxYuwHJPS+JScE1jgjfipdH5URMRTdHH1Y=
Subject key identifier: 02:8F:5D:6B:07:4F:33:E7:F7:72:F9:CF:62:C6:8C:00:55:6F:52:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D50
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6A17F6CD7E611EFAF6356B3762E951A.roa
Signing time: Tue 21 Jan 2025 10:59:51 +0000
ROA not before: Tue 21 Jan 2025 10:59:48 +0000
ROA not after: Sat 01 Feb 2025 10:59:48 +0000
asID: 44559
IP address blocks: 156.246.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68944 (0x10d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 10:59:48 2025 GMT
Not After : Feb 1 10:59:48 2025 GMT
Subject: CN=678f7e27-efd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:2e:49:2b:8b:9f:9a:42:08:29:ad:45:f8:
23:e7:36:c1:b5:79:68:47:df:49:cd:7c:85:70:7e:
7d:b5:da:22:ee:77:71:3e:a3:46:68:8c:16:dc:ad:
41:99:cd:6c:58:4b:bf:2f:2c:86:6c:d4:84:7c:f0:
06:ab:56:31:05:5a:2f:ee:4a:29:f7:34:a7:d5:ba:
0b:68:bf:12:83:49:af:6d:5e:02:b9:b8:cb:36:21:
b3:14:14:bd:b9:28:76:12:73:37:e6:1d:c0:f2:9a:
2b:25:e4:30:4c:2e:a5:a8:4c:45:43:25:4e:85:a7:
32:1a:a4:c6:9a:c0:c4:b6:ae:be:ac:2b:c0:6a:92:
43:7e:9d:28:2e:f3:30:9c:75:c3:ab:28:6f:62:f5:
28:c8:2d:01:ec:c5:92:f8:0c:d6:23:d8:b2:ca:e5:
a9:ef:5d:1b:0f:5e:4e:8e:ac:dd:ac:27:9b:06:d5:
14:e9:2a:84:f8:50:5c:e7:32:89:1f:2e:fe:a4:1e:
45:5f:6d:a1:4c:7a:3b:bc:a0:13:2e:2b:9d:c7:b5:
3a:3b:a0:69:cb:f0:79:a2:0a:99:b8:c2:bd:f8:df:
0e:1c:15:d9:03:6b:48:79:9a:46:44:8d:b9:61:de:
a9:c9:60:6e:81:c1:c1:67:f4:b9:d3:5f:f9:89:2a:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8F:5D:6B:07:4F:33:E7:F7:72:F9:CF:62:C6:8C:00:55:6F:52:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6A17F6CD7E611EFAF6356B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.201.0/24
Signature Algorithm: sha256WithRSAEncryption
47:31:91:6b:52:be:eb:0a:8a:30:93:95:90:fc:af:36:a2:00:
4d:0d:fa:a0:9a:ce:b7:61:b5:80:e5:1b:c3:8e:e4:fc:46:11:
67:07:e7:bd:0f:52:ea:40:7b:96:ea:cb:3d:e2:56:98:59:af:
eb:73:ef:cc:40:d6:fe:1f:04:d0:94:4f:84:05:23:65:7e:e3:
c8:8f:b0:cf:41:39:77:de:35:34:75:34:4b:35:94:73:0c:14:
28:8b:12:a6:6b:b7:56:f7:ba:f8:ea:0e:b6:a2:9d:0d:36:59:
dc:8a:5e:20:1e:ed:73:af:3a:c7:c8:82:0f:e6:22:b6:eb:b3:
82:43:60:b0:4d:2a:93:f0:ed:b0:83:42:ff:3b:16:7a:5f:97:
09:f8:9e:fa:41:00:76:ab:10:7f:a4:0e:95:10:a8:77:d5:68:
c3:76:9a:0f:41:af:61:1a:07:e7:25:f1:b2:6b:8f:51:ca:c6:
7f:f6:58:b7:36:4a:f6:c3:d2:5b:3c:74:2d:80:e5:f9:cf:fc:
dc:c9:a6:ae:54:e0:56:62:8a:5d:0d:bc:20:92:ba:da:4f:b9:
d3:6d:be:51:4f:06:3e:bd:da:07:f0:67:70:17:ac:23:13:77:
dd:dd:41:3a:45:a7:71:59:2c:4d:fd:df:1c:8b:b2:80:96:c0:
51:72:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:27:25 2025 by rpki-client