Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4F15312D50611EFADF16F57762E951A.roa
File: F4F15312D50611EFADF16F57762E951A.roa (raw, json)
Hash identifier: m5VtyVlqxJsJ3ruPZPWdX4NvXOJFBehyx9Oh+tOIS5k=
Subject key identifier: 8E:98:29:5D:EB:F0:A4:F6:5F:F8:3F:74:1C:33:C5:A9:06:D9:D9:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4F15312D50611EFADF16F57762E951A.roa
Signing time: Fri 17 Jan 2025 19:12:13 +0000
ROA not before: Fri 17 Jan 2025 19:12:09 +0000
ROA not after: Sat 22 Feb 2025 19:12:09 +0000
asID: 54801
IP address blocks: 156.240.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68204 (0x10a6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 19:12:09 2025 GMT
Not After : Feb 22 19:12:09 2025 GMT
Subject: CN=678aab8d-50a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:cb:7d:7d:3d:7e:33:f6:a0:69:6a:7e:ca:
56:d6:38:ee:8d:dc:58:fe:f5:9c:2f:8d:e0:1a:6f:
f2:a2:19:ca:40:69:59:01:cb:82:a3:28:0b:7e:ed:
1a:94:ee:ce:3f:18:b8:ee:f7:84:cd:17:1e:fa:af:
d9:c0:08:77:a3:49:53:6c:7b:93:7c:45:d0:61:34:
57:e1:92:49:ff:d2:b7:a7:18:ea:76:84:5c:75:48:
39:cb:92:d0:8e:78:11:e4:f7:bd:4b:fb:68:44:aa:
3c:3f:46:b5:d7:98:4e:a0:a2:54:9d:22:5e:55:ae:
74:62:02:75:67:b3:06:2b:ac:20:76:80:b7:91:11:
0d:47:58:01:7b:aa:e9:6a:af:5c:c2:49:0f:6a:1f:
2b:a8:01:34:e1:8a:ab:d8:3a:d7:a1:68:b2:a4:b7:
af:34:ab:fc:a8:c5:35:27:f3:5b:b0:4c:f6:33:c9:
1d:4a:d3:f9:26:b1:e4:39:b9:2d:5a:2e:09:f4:bf:
af:f0:6f:0d:db:5f:5b:0f:b6:49:a8:cd:f6:db:28:
76:6f:fa:21:43:c4:63:f6:74:4d:76:0f:c3:de:ed:
9e:94:34:f6:b0:f1:12:4f:6d:15:42:c9:79:2f:56:
b3:77:21:b5:27:f4:8c:d5:d2:23:58:09:78:5c:80:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:98:29:5D:EB:F0:A4:F6:5F:F8:3F:74:1C:33:C5:A9:06:D9:D9:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4F15312D50611EFADF16F57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.48.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:f4:04:01:40:0d:75:88:93:24:30:75:24:58:a9:31:39:d3:
0f:5a:a8:f8:26:4e:50:e1:e5:1e:4b:70:58:63:74:c3:69:73:
e2:51:ec:88:e7:9f:ba:a6:4c:7b:e7:5a:94:10:43:8d:b1:1e:
bd:bc:4f:fa:f9:89:d4:44:b5:15:c1:8c:31:62:7c:dc:f9:70:
f7:37:b7:85:a8:94:b8:60:f8:e2:a4:db:3b:33:68:f6:33:f1:
13:46:1d:98:f6:77:12:9f:5a:fc:be:42:92:39:32:96:e8:c3:
c2:de:09:ff:9b:05:b8:19:cc:3e:8a:75:7e:6a:f2:63:a2:a5:
ab:3c:ad:8b:b2:ed:78:34:bb:43:6f:c2:cc:7b:89:4a:e4:3f:
fa:bb:ec:66:9f:70:2b:9a:53:27:be:a3:b4:be:e3:84:11:f1:
f2:e6:88:39:b7:a2:29:8b:1d:6c:21:f1:57:da:75:28:e3:75:
9c:f3:15:be:8c:2b:ee:b0:15:ff:1a:11:b6:ad:a5:bc:49:75:
5a:42:15:c6:d0:92:1b:59:5b:b8:02:7f:65:d9:83:17:ba:5e:
d9:9d:62:74:35:f8:31:fa:88:cc:e3:9a:db:ed:80:33:b6:ed:
ff:ac:e9:55:dc:70:64:48:05:28:cd:5f:52:79:eb:7c:09:a1:
83:7d:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:31:59 2025 by rpki-client