Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0FD3212DAF611EF8E47E642762E951A.roa
File: F0FD3212DAF611EF8E47E642762E951A.roa (raw, json)
Hash identifier: uN9pGAXDTBKHPvv6oDaEAG7qAnkVGjO8NGDnhL8TCPU=
Subject key identifier: AD:92:10:EC:BB:7F:DD:3B:43:9A:AC:C6:B9:80:9F:52:64:97:86:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011181
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0FD3212DAF611EF8E47E642762E951A.roa
Signing time: Sat 25 Jan 2025 08:32:41 +0000
ROA not before: Sat 25 Jan 2025 08:32:37 +0000
ROA not after: Sun 23 Feb 2025 08:32:37 +0000
asID: 44559
IP address blocks: 156.246.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70017 (0x11181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:32:37 2025 GMT
Not After : Feb 23 08:32:37 2025 GMT
Subject: CN=6794a1a9-7a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f2:a2:3f:5c:3d:fa:5c:cb:57:da:6f:b2:bf:
6b:9a:20:48:18:ab:d4:e6:7c:bc:a3:41:d2:71:4c:
24:df:7b:f0:c5:f1:a6:bb:14:f8:71:34:e8:fc:72:
c3:15:75:4f:29:0f:43:6d:e5:3c:d6:bf:12:94:e8:
c2:a7:8e:fc:e0:75:19:e5:b0:77:0e:73:47:bd:39:
74:1a:d7:3c:3f:13:a5:43:6c:7d:c2:03:64:8d:74:
ed:45:5c:93:93:9a:e9:16:b7:72:a9:d5:3e:0f:19:
5e:a6:90:ff:34:5e:c8:4d:24:7e:ca:f4:d1:74:1f:
c4:de:05:04:eb:37:e0:25:c0:36:99:2f:33:3b:c3:
cb:5c:3a:f0:06:07:df:97:69:aa:d5:1d:20:9b:00:
48:da:f0:f6:6d:85:2d:ec:27:e5:6f:7e:87:d2:75:
ba:49:10:f1:b6:6a:46:9b:c1:db:68:fd:fe:e9:d8:
d2:fe:56:3e:41:50:70:02:04:e5:05:86:5d:8a:52:
98:ed:07:b9:27:8b:11:77:1c:be:f0:8c:04:b3:0a:
49:c2:3c:dd:78:34:7a:0e:33:f6:63:15:71:e2:9a:
28:a5:d4:d8:70:f2:c7:fe:07:90:c7:2d:cb:04:0d:
dd:97:48:cf:c9:68:6a:f0:34:99:1d:4d:0b:c8:cb:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:92:10:EC:BB:7F:DD:3B:43:9A:AC:C6:B9:80:9F:52:64:97:86:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0FD3212DAF611EF8E47E642762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.243.0/24
Signature Algorithm: sha256WithRSAEncryption
79:81:89:a5:94:ca:fc:b7:29:d3:4e:36:5c:2a:f6:97:a9:f3:
b4:1c:4a:a0:22:d9:20:31:8f:c9:c1:8f:33:e9:0e:59:10:30:
bf:a0:07:d8:26:e3:f0:e5:89:4a:b2:78:29:31:94:06:8f:90:
60:e7:6a:80:46:4f:be:30:8c:88:9a:ae:04:ae:8c:12:93:c3:
4b:28:72:e1:01:d1:6c:51:5c:64:14:18:9d:c6:81:0f:9d:c2:
bf:9a:ca:54:24:e8:76:ae:4a:9b:fc:54:1e:81:55:59:0b:8d:
16:6e:19:68:c2:c0:31:35:95:70:ab:5a:24:e3:58:ea:15:bc:
53:9a:40:ef:7b:a0:76:6c:78:92:3b:70:a9:72:d9:76:c1:d8:
1e:70:7c:c6:10:bc:74:94:4d:d7:fb:46:10:3b:46:ec:80:3c:
02:69:8d:65:92:5c:02:0b:5c:85:9e:9c:29:16:c9:2e:95:92:
58:e2:f2:80:10:72:ef:ab:a0:c1:ee:a4:29:11:84:c0:eb:64:
a7:0f:c9:32:9a:dc:0a:8d:79:48:51:5a:eb:44:bd:65:48:88:
37:3f:6b:cc:65:83:81:49:93:df:82:47:20:88:ab:01:e2:7b:
cc:a7:4c:f3:6c:4f:96:e2:99:76:92:0b:4f:a7:a7:53:fc:96:
32:f6:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:25:02 2025 by rpki-client