Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7DDA426D7FB11EF92260CBC762E951A.roa
File: E7DDA426D7FB11EF92260CBC762E951A.roa (raw, json)
Hash identifier: XsCSzlOOoV1wHk/Sb5Cqkkk8llfR/dZIWd6GCdgDzDI=
Subject key identifier: 78:50:01:47:B4:DD:AD:2C:97:66:4C:8F:03:C3:FD:BF:DF:67:B5:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7DDA426D7FB11EF92260CBC762E951A.roa
Signing time: Tue 21 Jan 2025 13:30:40 +0000
ROA not before: Tue 21 Jan 2025 13:30:36 +0000
ROA not after: Sat 01 Feb 2025 13:30:36 +0000
asID: 48031
IP address blocks: 156.246.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69082 (0x10dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:30:36 2025 GMT
Not After : Feb 1 13:30:36 2025 GMT
Subject: CN=678fa180-693d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:6c:ad:15:2c:ba:a1:74:38:b9:72:6a:b2:
68:ec:02:59:ff:aa:14:a2:6e:12:12:2b:c6:6c:f1:
3a:3f:7c:ff:74:d6:c2:41:44:42:5c:ff:3e:79:d2:
2d:4b:1d:f2:03:63:84:e7:45:44:b1:80:3a:32:98:
19:8e:34:f5:37:17:7f:97:16:b6:4e:da:9f:af:23:
81:e8:8a:03:ef:12:dd:d7:05:a6:8a:5f:c7:58:93:
6f:ae:d9:c6:27:3f:63:9d:51:bb:af:f5:4e:d1:fe:
44:2c:0b:94:48:24:e2:17:21:44:9a:c3:d0:c9:1c:
36:81:30:33:68:38:44:93:3c:cb:6e:69:c7:71:32:
a3:95:ae:7f:75:64:86:71:d1:69:d8:6e:b0:1b:c3:
dd:e8:57:32:15:df:a0:0c:74:e2:71:71:8d:86:01:
f1:79:e1:e7:10:05:70:63:01:e5:1e:8d:f9:4d:cf:
bf:d5:33:51:7c:27:78:cd:d2:81:65:2d:3b:b4:0c:
fb:2e:3c:34:41:d0:28:18:4b:6b:ec:b7:49:04:34:
63:6d:a2:a9:8a:f3:b4:72:ae:7b:62:69:81:b4:88:
3d:e6:68:9f:de:00:52:0d:6c:18:62:ca:b3:4b:ca:
9c:8c:e7:00:88:42:d8:3d:50:2f:06:61:ce:92:1c:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:50:01:47:B4:DD:AD:2C:97:66:4C:8F:03:C3:FD:BF:DF:67:B5:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7DDA426D7FB11EF92260CBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:00:7e:37:d3:05:fe:46:67:ae:df:32:d4:73:64:3c:70:92:
8a:7a:1a:14:4f:66:52:63:20:a6:f9:b7:d7:4b:f4:e4:ef:e1:
4c:66:68:ed:54:eb:0a:0e:27:f8:2f:65:2e:f1:75:30:84:8f:
ef:ce:be:c4:42:ab:83:71:28:4c:12:c1:a7:49:74:fe:d3:f8:
7c:76:5a:d2:b6:e5:76:46:b2:2b:e4:37:13:0e:63:db:40:31:
ed:29:2f:65:ee:86:85:b6:6b:07:52:90:5d:d2:fb:d4:fc:18:
3b:2d:37:c2:81:82:e3:2e:19:10:61:44:e4:76:b2:14:50:ff:
2b:ea:e1:cc:34:be:fb:6c:f1:f7:1c:b9:33:ab:4e:a1:59:de:
47:29:04:a5:de:4d:60:45:a9:51:4c:b5:2b:45:b5:bb:07:6d:
7f:04:e7:42:7d:49:ce:b8:c7:78:e2:c4:8a:48:fa:dc:78:05:
32:33:02:50:00:07:ed:79:18:03:91:c7:b9:f2:6f:5d:de:9d:
57:3b:c2:b9:86:e4:1b:7c:60:ef:24:63:e0:40:ee:ab:99:c0:
5f:5b:91:75:82:cf:55:60:b2:5f:2e:91:5b:c4:12:55:d8:f0:
a7:6f:31:19:3b:4d:55:2b:bc:8c:f8:32:16:89:09:8e:27:ca:
02:5f:ba:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:13:26 2025 by rpki-client