Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8B549E8DA8511EFB3094DBD762E951A.roa
File: F8B549E8DA8511EFB3094DBD762E951A.roa (raw, json)
Hash identifier: xPm2vVcybi0NHggSzi5I1KBvdFlJEkoOtvcaJ9TgzxU=
Subject key identifier: 5E:1B:8B:8E:1E:83:FA:F5:9B:3C:51:32:A1:CA:3B:17:85:0D:24:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011030
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8B549E8DA8511EFB3094DBD762E951A.roa
Signing time: Fri 24 Jan 2025 19:04:01 +0000
ROA not before: Fri 24 Jan 2025 19:03:57 +0000
ROA not after: Tue 25 Feb 2025 19:03:57 +0000
asID: 44559
IP address blocks: 156.246.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69680 (0x11030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 19:03:57 2025 GMT
Not After : Feb 25 19:03:57 2025 GMT
Subject: CN=6793e421-d7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:38:85:18:95:fe:01:fe:a3:0a:76:07:c2:
cb:e5:88:62:d9:8f:f5:ce:c2:ae:4c:ff:ce:b7:6b:
9c:f6:de:3e:4a:5a:cc:51:9c:56:fd:bc:cf:d8:0f:
dc:bd:a4:b8:4c:a1:4a:28:e3:c6:b1:5a:5f:a6:5a:
7c:37:1a:ab:2d:61:03:74:69:51:48:3a:f6:f1:0b:
c3:5a:78:d3:8b:ec:50:96:da:60:1a:db:a2:0e:2c:
69:95:27:79:12:a2:ad:f4:28:be:5c:78:d4:3f:4b:
09:25:18:f6:66:d6:a9:29:9b:5b:a8:6e:fd:04:d8:
47:c9:c8:c8:31:90:0a:b7:3c:68:d3:0e:2d:d5:5a:
22:17:46:11:06:d2:32:b5:b0:91:bf:2d:bb:34:46:
96:4a:42:c9:37:a4:8b:a6:65:6c:92:1a:3b:87:6b:
f3:63:a4:ff:4b:7c:45:ba:a7:2f:bc:44:e9:7d:03:
85:bc:9c:4a:1c:9d:63:06:e8:11:0e:d4:56:c6:9b:
32:bd:2f:1a:0b:e0:2f:78:77:ee:db:2e:5d:fe:3a:
20:f1:63:26:53:be:0b:40:7d:0e:c6:42:fa:1f:fe:
b3:44:13:24:35:63:48:94:ea:22:af:44:24:d4:ea:
51:69:cc:e2:b0:3f:56:a2:10:34:1e:53:e6:15:c3:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1B:8B:8E:1E:83:FA:F5:9B:3C:51:32:A1:CA:3B:17:85:0D:24:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8B549E8DA8511EFB3094DBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.192.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f3:bc:56:67:9f:bd:cf:6d:d0:bc:e1:a9:8e:4b:0b:ef:14:
84:cc:a3:66:86:12:0c:61:e4:dc:ed:7a:2e:92:9c:cf:60:be:
4e:93:c0:fc:84:82:d6:6c:3e:93:8a:c9:4e:31:08:68:0b:3d:
2f:db:2e:d9:a9:26:26:24:ff:15:b4:c3:05:47:b0:83:cd:b4:
c1:05:a5:0e:db:1a:f4:d2:db:ca:e5:5f:fb:69:58:fb:40:5e:
89:c5:fa:5f:ea:67:fe:32:10:a5:4e:2e:e1:d5:61:5f:35:e9:
7a:d4:7e:f1:7b:df:00:61:44:e1:0c:80:3b:02:aa:bf:e9:a0:
4a:ac:e0:08:a0:3d:4e:ad:03:6d:a5:6e:1b:29:34:25:b5:87:
57:43:69:8e:df:6c:1d:2f:52:da:13:e0:8c:2b:e0:34:d0:3e:
22:be:e8:95:ef:58:b6:73:90:db:b8:43:00:a0:0f:49:b4:b9:
91:bc:b8:57:45:8e:4d:d9:ec:c9:51:d0:24:4e:3b:9e:ee:cf:
d9:2f:b3:6e:d3:71:89:22:92:58:35:a5:35:be:8e:b8:3c:73:
7e:34:0c:46:e9:91:fa:ef:30:d3:2e:b3:a8:a0:8f:f9:9a:4e:
3e:a7:70:ce:62:fe:1c:b1:c8:f2:c6:d1:6b:08:c9:ce:db:ce:
0a:10:54:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:33 2025 by rpki-client