Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE8478B6D7EF11EFBD6E4270762E951A.roa
File: DE8478B6D7EF11EFBD6E4270762E951A.roa (raw, json)
Hash identifier: zxN6ZlaGymvP9QL9M2S8QWbnSVPJdKPDjyF8MPFxxAI=
Subject key identifier: C2:0E:EE:84:80:66:E0:A7:DB:2B:33:83:B1:E4:AB:6C:D3:0E:B3:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE8478B6D7EF11EFBD6E4270762E951A.roa
Signing time: Tue 21 Jan 2025 12:04:30 +0000
ROA not before: Tue 21 Jan 2025 12:04:27 +0000
ROA not after: Sat 01 Feb 2025 12:04:27 +0000
asID: 44559
IP address blocks: 156.246.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69004 (0x10d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:04:27 2025 GMT
Not After : Feb 1 12:04:27 2025 GMT
Subject: CN=678f8d4e-112e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:73:e7:e0:6b:cf:14:a8:5d:3e:15:e3:d0:
78:a2:d9:4f:99:07:8b:34:95:60:37:dd:66:fb:42:
12:50:2e:50:e1:f0:c9:1f:2e:6e:22:2d:cc:52:cd:
39:0c:f7:b7:c7:5d:53:fd:e6:21:91:13:3c:2f:d3:
6f:ce:65:97:43:1f:19:8e:94:69:5d:27:8a:78:f0:
f7:b0:d7:f2:9f:a2:4f:dd:64:e7:f8:37:9b:8f:d5:
c4:f2:0e:5c:c8:ef:45:d3:30:cf:36:7c:03:2b:4a:
0f:b1:12:97:ba:dc:33:4f:26:d2:af:29:d2:31:5d:
3b:24:78:fe:b7:31:c6:c9:ae:39:10:24:df:f3:34:
21:0d:bd:b3:b7:f7:17:3e:52:e8:c5:09:63:bb:b0:
59:f0:b7:29:37:82:2a:79:48:5b:ec:d6:2c:ee:c1:
ff:45:7a:b9:55:b1:9e:3c:7b:4b:fb:b4:c6:0a:69:
0d:4a:97:80:17:4b:7b:23:47:cd:92:cf:5a:b9:8e:
c9:99:01:ae:25:be:f0:25:ac:f9:f9:96:ca:ce:1d:
10:8a:79:bb:14:c7:00:19:3c:be:83:66:b6:b1:21:
55:43:2c:49:7f:1d:6d:ab:6b:9f:11:f0:8e:cc:13:
9c:e5:30:29:6c:46:00:8d:cf:7c:d7:13:5b:e0:00:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0E:EE:84:80:66:E0:A7:DB:2B:33:83:B1:E4:AB:6C:D3:0E:B3:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE8478B6D7EF11EFBD6E4270762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9d:6f:24:ac:97:23:f5:f7:a5:ac:fd:5d:03:5c:7d:01:00:
50:17:1a:43:f3:f2:de:0c:95:44:00:18:d3:a6:fd:01:84:99:
69:79:ad:ab:04:09:d1:87:f0:0d:4b:4f:13:43:74:18:dc:76:
32:22:07:96:59:62:d5:00:e0:47:c7:57:23:23:87:14:81:90:
56:b8:44:be:25:22:9f:ab:f7:54:0b:09:63:cd:ed:42:f4:77:
d3:47:69:9f:f1:bc:b5:62:72:ea:d9:8d:01:aa:35:7b:bc:62:
ef:c8:f8:b5:b5:38:18:db:41:54:27:35:47:18:b0:e8:02:40:
01:17:79:e0:25:d0:29:31:0f:a5:e1:cc:63:a5:de:34:b3:67:
84:62:2f:59:49:fc:e7:75:66:19:c2:96:ff:65:ee:50:f3:b2:
c2:03:3d:4a:4c:0b:73:13:39:a1:6d:d2:8e:ba:68:1a:05:3a:
f5:5a:3a:09:3b:2e:91:8c:19:c4:36:6f:4a:fd:7e:f8:24:76:
de:40:37:27:fd:0b:cd:30:56:73:c7:11:d8:09:b2:35:10:0c:
3f:71:a8:33:d2:18:d2:5c:01:18:8e:2a:bd:b0:5d:7f:ad:6c:
4f:57:f2:ef:ed:3e:f0:f9:6e:a2:a4:95:93:50:62:fe:31:10:
1b:97:73:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:41 2025 by rpki-client