Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E17C843ADAFD11EF8C823F72762E951A.roa
File: E17C843ADAFD11EF8C823F72762E951A.roa (raw, json)
Hash identifier: FxWHp3MH1YSznmBMMrB4IP+A1pPQyttVjtOvlnVPDYA=
Subject key identifier: 73:75:E0:B9:73:AB:AF:06:51:7D:40:EC:50:38:B9:64:AA:ED:42:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E17C843ADAFD11EF8C823F72762E951A.roa
Signing time: Sat 25 Jan 2025 09:22:22 +0000
ROA not before: Sat 25 Jan 2025 09:22:18 +0000
ROA not after: Sun 23 Feb 2025 09:22:18 +0000
asID: 48031
IP address blocks: 156.246.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70065 (0x111b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:22:18 2025 GMT
Not After : Feb 23 09:22:18 2025 GMT
Subject: CN=6794ad4e-a6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:a8:03:d5:79:66:21:33:2e:15:4d:0e:a8:
0b:43:47:92:f3:42:8c:45:78:4d:6f:e5:7e:7a:e2:
1b:0a:5e:63:b2:51:bb:86:03:c0:3a:e7:04:f0:db:
4b:18:d4:0f:6d:1f:e9:43:b8:17:dd:cf:b7:09:26:
7f:8f:0e:c1:e2:d0:a6:c5:57:83:2f:a1:ed:06:db:
bd:2e:2b:76:93:3e:3f:57:5f:f4:cd:38:9f:6a:9c:
23:2b:75:26:48:ce:0e:ab:a3:08:96:5e:76:32:36:
e3:7e:a1:e9:eb:43:73:18:64:f2:df:62:29:8c:f8:
97:80:9a:29:f7:0e:6f:e5:ce:b7:68:e9:de:54:c6:
2a:98:61:18:6f:ae:f7:77:17:eb:03:04:4a:f8:2c:
4e:01:47:9a:b1:ce:d7:8e:25:7f:5a:c6:13:de:3a:
4d:13:c8:15:85:c5:80:e6:e5:10:8d:a9:bd:1d:be:
0d:ea:8b:f0:51:0e:dd:1e:97:3a:4d:d2:b4:ac:cb:
54:fd:3a:59:32:fd:0b:5f:f8:84:02:0e:3a:64:7f:
62:11:9a:4f:5a:26:d7:69:36:dc:47:d6:b4:c1:15:
f5:40:94:ed:09:ec:dc:6d:65:03:04:91:bd:81:b3:
6b:7d:34:2c:54:29:09:13:bb:12:99:e0:cb:f7:bb:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:75:E0:B9:73:AB:AF:06:51:7D:40:EC:50:38:B9:64:AA:ED:42:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E17C843ADAFD11EF8C823F72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a8:6c:a5:53:9f:7f:e4:7c:68:5a:ea:9c:8a:80:eb:9f:c7:
9f:0d:ea:d7:bd:f0:aa:d4:d3:4b:21:af:f1:f8:0f:86:e3:ac:
6f:bc:46:b2:99:5f:67:23:f7:7f:73:fa:af:26:6b:ca:c6:74:
a4:d8:a4:7b:4e:de:23:1a:bd:e6:b7:f0:93:96:56:63:97:d7:
11:77:bc:79:28:0c:67:34:d7:dd:6a:7e:99:c2:81:28:81:18:
fc:2e:61:d9:e6:9f:a2:da:0d:96:9f:a1:c4:29:2f:38:0b:5f:
77:fa:de:7b:d1:10:b1:b1:fb:10:2b:93:2b:d9:11:47:d5:16:
50:f4:fd:25:2c:68:3e:09:55:e7:41:47:8d:72:55:01:f2:96:
33:1e:e9:5d:f9:a2:92:c3:54:e3:72:9a:94:1e:1f:83:e4:7e:
58:81:8f:04:fe:9c:51:e5:31:83:06:f7:ef:16:63:6c:32:22:
bf:b5:ec:9a:16:75:18:aa:e6:e7:10:4d:cb:46:73:30:e2:49:
16:dd:02:92:55:7f:0b:ac:27:3b:f0:83:20:85:44:2f:ac:60:
c1:b3:55:4f:06:a7:8b:bb:fd:ed:33:7e:28:33:42:fe:a2:d2:
dd:e8:b1:e5:6b:52:24:1c:3e:3f:57:3c:6d:fe:88:67:12:ed:
80:c2:1a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:06:33 2025 by rpki-client