Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA672EAD7D511EFAC5A7648762E951A.roa
File: EEA672EAD7D511EFAC5A7648762E951A.roa (raw, json)
Hash identifier: 1IQsQls+roovvYb3YCmZRf8n/kh/phnFbUDpcScs/r0=
Subject key identifier: 3F:2B:1C:34:E3:83:6E:BA:3B:1D:61:25:28:FF:62:07:35:78:FD:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA672EAD7D511EFAC5A7648762E951A.roa
Signing time: Tue 21 Jan 2025 08:58:50 +0000
ROA not before: Tue 21 Jan 2025 08:58:46 +0000
ROA not after: Sat 01 Feb 2025 08:58:46 +0000
asID: 44559
IP address blocks: 156.246.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68894 (0x10d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 08:58:46 2025 GMT
Not After : Feb 1 08:58:46 2025 GMT
Subject: CN=678f61ca-5c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:2f:a6:14:2d:61:e2:e9:28:85:1b:cb:60:
ee:93:84:4a:a2:e0:e4:4d:07:88:e5:c1:e4:db:97:
41:8e:7c:4d:0d:02:cb:0f:76:7c:98:a3:db:8e:c3:
d8:f9:37:65:56:cf:2e:bc:00:93:6e:89:aa:b1:8a:
82:ee:ee:9e:7a:50:3c:ca:45:02:7b:ce:2a:9c:0d:
8b:d7:55:bd:f3:2f:64:a4:1c:3f:86:f1:f8:02:72:
3c:93:3a:8b:5b:cc:7d:94:36:78:3e:77:a1:5c:88:
c2:26:02:41:65:fd:7e:66:64:17:7b:07:a0:78:fa:
ce:72:85:47:54:6e:e4:0a:4a:ee:5d:c2:b5:0a:1d:
93:9b:9b:9e:0e:7c:af:5e:b0:78:97:0f:f6:fa:80:
45:54:71:0b:25:14:40:7e:b5:92:12:2d:36:04:c3:
8c:f3:64:5d:b5:f8:58:e4:28:4a:f9:0b:c7:60:8d:
23:82:55:6e:5f:6d:8d:dd:5c:77:53:00:94:77:5c:
c2:6d:64:47:bc:98:e1:0a:e4:9b:cd:c4:d5:c7:3f:
23:dd:cd:6d:62:10:6a:11:1e:ef:4d:de:83:7a:3e:
c9:28:5a:42:f5:b1:9a:5c:08:8e:d8:c4:7b:26:1d:
b4:2f:05:bd:ec:ca:4e:10:cf:a0:27:34:0d:4d:0a:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2B:1C:34:E3:83:6E:BA:3B:1D:61:25:28:FF:62:07:35:78:FD:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA672EAD7D511EFAC5A7648762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e6:20:ec:b3:a9:f7:6c:45:08:57:ca:3d:eb:c0:59:f4:95:
fe:72:4b:3d:4d:99:3c:f4:d8:a1:ac:38:41:29:af:c7:20:f0:
16:80:02:e6:82:92:a8:dd:b1:3f:57:d3:ce:1b:ec:4a:a5:46:
81:19:e9:7f:ab:eb:c1:d0:70:0e:77:5e:e4:2b:0b:fa:92:60:
d9:49:09:96:25:7c:04:a9:ea:67:4b:d0:cf:21:b4:24:1d:25:
2a:17:01:0b:54:f6:b2:be:5d:8e:60:e6:cc:e1:a4:99:b4:8a:
91:74:ad:7e:2a:89:90:66:f3:22:10:8f:65:82:6d:17:0d:88:
d5:fd:3e:45:af:4b:cc:2f:43:52:4d:02:1f:72:e8:df:78:4d:
5b:45:f8:65:99:12:4c:75:3a:f8:53:9b:a5:79:15:e7:f3:c9:
37:77:ac:b7:ec:07:e7:b1:62:97:5f:86:4e:e3:8a:f9:2e:da:
f5:5c:83:18:eb:5b:91:8f:bf:7f:00:75:2d:ab:d1:12:22:9c:
16:41:41:7b:72:f0:5a:5b:ac:8d:fd:54:37:43:9c:9e:d9:e3:
fb:1c:57:8b:2b:ec:a1:6b:69:f3:83:be:48:3f:c4:02:61:66:
5e:7c:10:a6:88:6c:ae:8d:66:53:b7:95:9e:84:f2:76:e1:d6:
57:25:2d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:23 2025 by rpki-client