Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E693B9FCDA7B11EF99D9A67B762E951A.roa
File: E693B9FCDA7B11EF99D9A67B762E951A.roa (raw, json)
Hash identifier: TN2rZqtuLaXDyf9TmbW5zrfPi+9XTNfbN+GpCn9Iutg=
Subject key identifier: B9:E9:47:F8:FC:6F:21:1E:50:58:6E:C5:E6:15:45:74:CC:07:B2:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FEE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E693B9FCDA7B11EF99D9A67B762E951A.roa
Signing time: Fri 24 Jan 2025 17:51:56 +0000
ROA not before: Fri 24 Jan 2025 17:51:52 +0000
ROA not after: Tue 25 Feb 2025 17:51:52 +0000
asID: 44559
IP address blocks: 156.246.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69614 (0x10fee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:51:52 2025 GMT
Not After : Feb 25 17:51:52 2025 GMT
Subject: CN=6793d33b-9888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fc:5b:13:49:f2:a9:f1:b0:e7:64:06:f8:ae:
a6:3a:b2:81:d5:34:54:09:7b:41:72:b1:3b:4e:fd:
f9:de:9a:b7:be:37:93:f7:af:f3:72:48:29:b8:70:
21:38:92:ac:2c:1f:9d:74:3e:b0:b8:54:a7:27:67:
cd:69:22:5a:de:99:09:d6:ab:a2:f3:db:0a:2f:bf:
57:00:77:97:21:b9:20:63:17:9e:b8:5e:4f:fd:9e:
67:17:9b:33:de:f4:05:df:4f:71:f1:8e:00:1f:49:
58:f3:cc:7b:ca:0b:46:d9:27:d3:3e:35:24:8f:95:
09:63:d8:4a:8b:8b:b3:f3:45:90:9e:1c:e0:49:ab:
50:bf:57:74:6b:af:0b:91:6a:6e:c2:7c:79:97:20:
28:58:7a:04:bc:cc:a9:c0:ba:27:1f:c7:b1:fd:a2:
65:f6:4f:31:b3:15:b5:e9:ad:1c:36:27:f1:2c:c0:
7a:6b:73:fc:da:01:b6:dc:01:7f:7c:01:31:f6:0f:
92:90:16:fe:6d:3a:f1:d1:37:21:48:85:11:83:92:
2a:fa:40:67:aa:45:96:0d:e1:20:be:bf:f7:e7:6a:
ca:42:27:09:2b:a4:23:57:28:1e:9d:c7:de:d8:67:
b5:d4:59:d4:e2:27:ff:77:ab:c9:fc:9b:5e:27:c3:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E9:47:F8:FC:6F:21:1E:50:58:6E:C5:E6:15:45:74:CC:07:B2:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E693B9FCDA7B11EF99D9A67B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.150.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2f:a6:7e:2c:32:23:71:a4:32:88:13:4e:40:1f:3e:5e:89:
d1:90:f2:00:31:a1:10:f6:bd:c5:b5:f2:f1:33:5e:8f:20:aa:
80:db:bc:53:72:ed:91:45:d1:0c:11:e3:69:f6:ac:01:ad:c8:
fd:c8:72:5f:f3:d6:43:0f:ca:66:57:42:3b:b4:a4:0e:8b:81:
4e:43:6c:25:8e:a0:93:a0:fc:5f:9a:e3:56:9d:73:28:76:88:
74:e9:6d:9c:b0:65:dd:ed:aa:32:2d:af:06:02:04:99:a2:4a:
75:60:9c:3f:e9:85:2f:22:ba:e9:78:cc:1d:5e:7e:a8:a9:eb:
cd:12:9b:45:f0:33:a8:0f:77:f5:2d:62:dd:0b:4c:bf:c7:e5:
ab:9f:8c:5b:b2:76:00:69:44:60:96:33:ce:a7:e7:ff:2e:fa:
fd:f6:f3:58:fd:e8:1b:7f:27:80:74:30:95:db:f4:0d:96:c9:
b0:e6:5a:f4:2c:68:c6:d8:a8:98:2b:82:ed:45:be:49:d1:5a:
87:05:75:16:30:df:8e:0b:44:1d:16:0d:e2:3e:12:d3:34:8a:
97:0d:cf:59:c9:67:c9:d7:83:e2:6e:4a:c5:93:06:5c:fd:9d:
25:63:72:6c:d0:57:08:65:47:ae:a0:68:17:96:ea:af:9c:2f:
6e:f8:fe:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:30:35 2025 by rpki-client