Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7B1E572D7CB11EF9A86C186762E951A.roa
File: F7B1E572D7CB11EF9A86C186762E951A.roa (raw, json)
Hash identifier: cGFlFVEEaUd5RMVSyK62SZpEdDVBaS6hOuoSR7Gbbs8=
Subject key identifier: 56:89:1F:98:69:02:E9:81:55:00:FE:41:07:CA:71:4A:49:DB:9A:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CD6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7B1E572D7CB11EF9A86C186762E951A.roa
Signing time: Tue 21 Jan 2025 07:47:31 +0000
ROA not before: Tue 21 Jan 2025 07:47:27 +0000
ROA not after: Sat 01 Feb 2025 07:47:27 +0000
asID: 44559
IP address blocks: 156.246.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68822 (0x10cd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:47:27 2025 GMT
Not After : Feb 1 07:47:27 2025 GMT
Subject: CN=678f5112-c996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:24:fa:a2:ef:7a:a2:d6:ff:65:c0:10:16:
f5:12:bd:94:77:c5:4b:09:5f:76:b6:50:bf:95:90:
a6:80:33:4c:05:4d:f6:1b:e9:e4:dc:24:03:14:02:
33:2b:bc:b4:2a:84:ec:f9:70:14:0f:77:bf:c1:0b:
7a:f8:ab:63:9d:8a:c7:a8:bc:21:4e:b2:0f:82:9c:
1b:1b:60:49:99:63:c6:91:cf:c9:4a:07:f5:2e:46:
b3:84:5b:8c:6b:35:ac:f2:51:09:22:e6:68:e3:c4:
d5:1e:8e:f6:09:a1:1e:ee:f7:e6:ba:84:6c:1b:a8:
97:5b:b8:26:c6:b4:8b:ce:34:ed:8a:a0:5b:85:4b:
88:bf:75:20:d8:da:ca:10:c3:9f:93:ff:b6:c4:81:
20:38:8c:6f:8a:d4:ef:09:73:8f:a0:fc:d6:7d:4e:
e6:53:e9:c6:90:bc:7d:8e:59:48:de:ca:2f:69:ee:
05:cf:3a:40:4f:60:15:6f:cb:f9:39:1d:78:38:93:
48:e9:56:87:93:41:a3:ac:6f:5c:63:8d:92:ff:b9:
62:57:95:6b:57:06:0f:68:f0:a7:14:8b:08:08:19:
a5:ec:9d:20:a7:42:b9:46:fc:e2:d3:d2:17:2a:eb:
f9:c0:84:1e:c2:3f:85:ed:72:d6:76:2b:c6:39:dd:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:89:1F:98:69:02:E9:81:55:00:FE:41:07:CA:71:4A:49:DB:9A:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7B1E572D7CB11EF9A86C186762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.191.0/24
Signature Algorithm: sha256WithRSAEncryption
10:14:87:50:50:84:cd:c4:8d:d4:de:e3:c0:33:d0:4b:21:46:
d1:58:e3:b4:7b:e8:bf:b4:58:f2:e5:e3:30:f4:2e:c8:b9:fd:
53:56:40:0a:9b:17:09:60:be:5b:c4:c2:da:74:02:da:af:59:
b5:df:31:be:2f:d9:14:49:43:5f:4e:5f:40:cc:8f:d7:63:1c:
90:86:b9:85:d0:2a:91:5d:fe:d9:69:4b:14:e4:dc:fe:04:90:
54:c2:62:3c:53:3a:02:a6:9d:67:64:4a:03:01:ea:3e:ee:93:
48:79:e7:31:06:91:ce:2a:aa:55:94:60:3d:39:5c:77:68:a0:
bc:42:40:0c:23:1e:41:b9:30:f9:20:c9:8e:2e:3d:56:b3:5c:
68:ed:12:f7:7c:c1:eb:7f:ad:30:fb:32:ba:77:de:4a:dc:eb:
45:b2:c6:59:82:06:88:5d:f7:a3:4f:48:ba:b4:aa:97:1a:5b:
3a:59:f3:60:0b:38:9b:1d:92:a9:b4:1f:f4:a8:c7:85:16:0e:
c5:62:d5:ed:d7:4d:fe:4f:89:cf:73:a8:00:70:9e:ad:97:49:
c5:08:d8:33:86:50:4c:6f:45:d6:de:6a:30:bf:d9:60:8e:e1:
6e:f2:d7:19:97:2e:75:1a:6c:85:69:dc:ce:3c:a0:d1:fe:72:
8a:44:f3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:13 2025 by rpki-client