Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBCFEFBEDAFB11EFADD0CF63762E951A.roa
File: EBCFEFBEDAFB11EFADD0CF63762E951A.roa (raw, json)
Hash identifier: 7V25ged+Vsk4AQcVdHNFF86zdqROEx2E9DTo59zFOr8=
Subject key identifier: 32:3A:00:DC:14:B6:6F:DE:77:1D:4B:16:DB:85:DC:78:FA:3C:F6:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBCFEFBEDAFB11EFADD0CF63762E951A.roa
Signing time: Sat 25 Jan 2025 09:08:20 +0000
ROA not before: Sat 25 Jan 2025 09:08:16 +0000
ROA not after: Sun 23 Feb 2025 09:08:16 +0000
asID: 48031
IP address blocks: 156.246.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70051 (0x111a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:08:16 2025 GMT
Not After : Feb 23 09:08:16 2025 GMT
Subject: CN=6794aa04-f17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:11:6f:45:ad:3d:08:ad:b6:b4:d2:16:b4:
1e:6e:c5:60:f4:64:a4:5b:c3:0d:51:8a:1f:06:ed:
fb:6e:00:78:94:6a:a4:07:e6:cb:0e:e4:7d:72:3f:
ec:c2:a6:59:5e:f9:1c:f6:2c:96:2a:45:ff:c9:89:
7a:6c:89:e8:5e:01:b2:47:90:48:12:ab:47:5f:d6:
e6:9c:99:c3:26:5d:f7:54:c4:bd:b8:26:e6:12:99:
af:8e:3f:62:24:da:e3:ba:5e:08:b3:10:5e:69:41:
10:f5:62:70:92:bf:f4:49:db:4b:ce:82:1b:75:52:
24:6f:65:e5:d6:03:bc:61:b8:83:de:5c:89:c2:81:
ac:b7:5d:d8:8e:7d:c1:c8:a9:db:67:70:67:f9:f2:
2e:5f:81:a7:39:3b:56:78:bb:df:8b:9a:6d:4d:d3:
62:a7:45:d1:51:81:cf:b9:fc:ca:bd:6c:5b:84:6c:
35:49:d7:13:34:a2:91:2f:fa:b5:4b:49:61:89:d1:
6e:c4:b0:53:a4:79:65:b4:12:8b:2d:b4:e9:41:59:
3e:d7:86:47:0b:ed:88:db:ce:9c:f9:84:03:85:6b:
38:f8:c8:b4:db:08:a6:79:38:66:8a:71:06:21:b1:
98:29:e7:47:1b:f7:4f:37:c5:5e:0c:01:2c:79:a0:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3A:00:DC:14:B6:6F:DE:77:1D:4B:16:DB:85:DC:78:FA:3C:F6:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBCFEFBEDAFB11EFADD0CF63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.132.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1b:6f:d2:ca:fd:09:a3:d2:e7:ab:cb:ad:1b:18:9b:a1:c1:
0f:d8:8d:d8:4c:ab:c3:3f:d5:17:0f:d0:53:a3:ae:3a:2c:f5:
33:49:6f:05:92:ff:97:3f:8b:cb:62:87:83:57:08:c4:8a:03:
f3:cd:f2:0b:7d:d5:48:a1:08:40:8d:ff:1a:86:4e:fd:cc:b6:
ab:c3:10:49:93:c0:53:c5:56:ac:9b:5f:a7:d2:9b:87:ad:02:
ef:45:38:e1:44:b1:7d:2e:3d:96:98:8f:be:04:70:50:d2:70:
8f:39:02:32:aa:d8:64:c4:29:e9:c6:0b:df:0d:91:99:e9:d7:
bb:df:ef:06:d0:c6:e2:1a:01:7d:f2:2c:a1:4b:74:31:83:d3:
f5:77:06:97:2e:8d:9d:19:af:3e:4a:f1:1b:59:a6:19:a7:95:
d8:bb:35:8b:01:2a:6e:8c:12:67:8f:a3:9e:f6:44:50:36:1e:
62:d3:a3:dd:9f:0d:62:11:1a:35:23:f5:99:a3:51:68:7f:04:
28:8e:0a:b7:1e:32:e3:ae:c2:3f:03:f5:bf:27:95:66:0e:e8:
3c:1f:7f:bf:35:59:54:12:a5:35:27:3a:32:94:31:23:8e:3e:
43:04:0f:8d:76:10:5b:89:b3:41:11:ef:4b:ac:4c:dd:8c:e7:
4d:f7:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:43 2025 by rpki-client