Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7B9C4E6D7DF11EFA8897A87762E951A.roa
File: E7B9C4E6D7DF11EFA8897A87762E951A.roa (raw, json)
Hash identifier: lFwJMg7oGcYhJG5suU9xE+zUy3Yi2OrD+mWGRgVqa64=
Subject key identifier: 91:45:EC:BB:08:44:D5:6E:4C:5F:70:A5:BF:F4:89:18:7C:15:44:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D20
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7B9C4E6D7DF11EFA8897A87762E951A.roa
Signing time: Tue 21 Jan 2025 10:10:14 +0000
ROA not before: Tue 21 Jan 2025 10:10:10 +0000
ROA not after: Sat 01 Feb 2025 10:10:10 +0000
asID: 44559
IP address blocks: 156.246.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68896 (0x10d20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 10:10:10 2025 GMT
Not After : Feb 1 10:10:10 2025 GMT
Subject: CN=678f7286-8e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:c6:1f:cd:16:c1:d5:ba:23:e1:1f:ff:07:
0d:5f:21:04:f6:b0:ee:8d:1e:6e:d1:d7:9f:c8:b1:
ea:a9:a7:9f:f2:07:0c:09:46:2a:69:fe:2a:4f:76:
e4:e7:51:3d:c2:bc:9e:d3:50:c7:4f:aa:4e:b6:63:
45:7a:94:d9:aa:f9:75:09:a7:a6:fc:12:a3:46:aa:
54:3a:3c:53:b1:27:f8:54:47:6f:c0:bc:3c:3d:9a:
88:31:c0:65:1d:46:13:e2:e2:e2:26:64:6e:3e:c8:
e4:c7:f6:90:a8:05:be:a6:d2:53:e0:33:41:06:c8:
3f:49:b6:26:03:f5:40:9b:41:c6:b3:0e:8a:4a:fc:
64:22:d8:e4:3a:5c:ca:46:db:18:cb:cf:80:5d:0f:
78:59:23:56:0a:84:ea:0b:58:e6:6f:f3:71:59:1e:
f8:21:0f:79:6e:1d:72:a2:1a:f0:c1:35:e8:4e:d0:
7f:f5:9d:11:fc:e5:b4:5e:c7:37:23:44:c9:04:5c:
ca:ce:64:c6:2b:2a:81:d4:be:52:8e:21:c8:ad:61:
05:08:53:b0:39:f3:8d:7b:30:d7:9b:cb:df:90:31:
dc:ec:ed:22:7d:92:e0:59:d6:a6:12:31:22:55:c9:
80:da:cd:23:e8:53:ab:0e:b5:be:ea:ab:e4:7a:10:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:45:EC:BB:08:44:D5:6E:4C:5F:70:A5:BF:F4:89:18:7C:15:44:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7B9C4E6D7DF11EFA8897A87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.171.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b4:e4:11:ee:73:c9:71:25:3e:bf:4b:45:a2:e4:5f:1a:ad:
62:5b:45:78:ae:32:66:33:ca:90:ba:76:a1:93:cb:ba:6d:64:
d1:8f:e0:01:f8:0f:71:13:6b:c4:35:16:04:e0:7f:15:d3:47:
3c:4b:89:27:04:dc:25:03:3c:cc:63:b8:d3:89:92:21:20:29:
1a:83:a1:66:27:de:75:17:46:c1:54:2d:bc:97:50:18:6d:13:
15:b7:ca:42:14:6f:bb:62:01:d6:12:5e:26:93:b4:0e:20:c0:
89:87:74:d0:e2:1a:45:40:27:a3:2d:34:c0:05:f9:36:fe:01:
13:f7:bb:d7:8d:d2:03:00:e5:7f:8b:ec:68:4e:33:4b:d4:f6:
93:d7:d6:a4:77:e0:4c:a0:e8:62:6e:3a:9f:9d:72:9d:41:1d:
b9:da:49:01:45:31:83:5f:a0:c4:c4:b2:83:1f:66:17:f6:f3:
59:31:b3:ad:a0:76:76:44:1a:0a:d2:18:78:48:c3:bc:58:99:
bc:5d:43:09:6b:c6:f4:f9:b0:fc:17:54:fa:56:ab:29:93:c9:
22:22:4c:bd:62:ff:4c:70:7f:a5:1d:48:2f:a9:5d:c3:e1:0b:
3f:6d:d8:75:6d:bc:a6:79:cb:44:15:4d:8c:fd:dc:c3:7b:bc:
e6:cd:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:56 2025 by rpki-client