Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F95BEF42DA8911EF93B4FF59762E951A.roa
File: F95BEF42DA8911EF93B4FF59762E951A.roa (raw, json)
Hash identifier: DTQc0CAenUxfzVuT66puHVl24QxxELwkHXfOZxmECHo=
Subject key identifier: A1:58:6F:C5:AB:49:3A:96:E2:12:61:EE:11:14:FD:C2:38:D0:63:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01104A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F95BEF42DA8911EF93B4FF59762E951A.roa
Signing time: Fri 24 Jan 2025 19:32:40 +0000
ROA not before: Fri 24 Jan 2025 19:32:36 +0000
ROA not after: Tue 25 Feb 2025 19:32:36 +0000
asID: 44559
IP address blocks: 156.246.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69706 (0x1104a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 19:32:36 2025 GMT
Not After : Feb 25 19:32:36 2025 GMT
Subject: CN=6793ead8-3830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:65:a2:10:de:4d:8c:cd:45:1b:2c:a1:bf:
7e:76:20:37:86:c3:eb:7d:a0:b4:35:72:2c:e7:6d:
5a:2d:89:fc:3c:d8:b7:43:db:da:f8:58:bd:2c:ba:
4a:8d:25:81:42:8c:21:ad:bf:e8:74:94:3c:0a:ed:
da:3c:23:86:c9:31:6e:96:fb:d7:c2:0d:a2:1c:c1:
16:e2:45:24:9c:aa:30:ef:91:eb:5e:a0:f4:42:f3:
cf:93:0f:53:f9:4b:b8:c9:02:8f:cb:21:28:6c:ff:
90:43:f2:6a:12:a3:ef:57:94:31:a8:a3:c6:87:25:
99:f9:59:e2:bc:7d:9b:31:d1:26:d5:a2:63:48:96:
9d:b3:ab:a7:69:72:54:62:af:fe:16:2d:6a:e2:13:
58:c0:28:ca:48:a7:44:39:10:9b:38:f8:5a:ec:d3:
0a:7d:32:10:d5:84:59:55:cc:16:fb:7f:07:58:9c:
1f:81:d9:12:90:2f:8f:e8:1d:69:1d:10:3a:b8:f4:
7a:85:6b:14:95:7a:a7:99:79:9c:74:70:af:bf:28:
78:af:5a:a7:87:cf:ed:02:bf:cd:51:40:19:4e:cb:
47:a6:9d:eb:09:13:c5:77:51:42:07:ae:89:ba:d2:
60:0d:78:26:1e:37:84:69:ff:da:0f:27:40:25:56:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:58:6F:C5:AB:49:3A:96:E2:12:61:EE:11:14:FD:C2:38:D0:63:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F95BEF42DA8911EF93B4FF59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2f:12:54:a9:9c:d4:e2:b7:6b:d0:a7:32:36:f0:5a:a9:d8:
4b:6b:8c:55:9f:2e:fa:56:f3:6c:05:53:bb:19:b0:ed:16:06:
49:22:dc:c6:93:f7:d2:16:49:50:c6:66:f5:71:9a:2f:64:a3:
f8:47:10:cc:15:6a:e8:88:86:f7:59:87:f9:fc:81:fd:94:7c:
50:12:02:b7:0a:8b:8f:df:54:b9:a5:88:ba:45:65:38:b1:67:
f5:0b:f6:c9:33:e1:d9:4f:d6:3d:79:25:93:ba:29:e0:d1:22:
68:00:f6:1c:b3:5d:44:b9:0c:d3:1a:71:f4:17:8a:49:04:06:
b5:01:5b:5e:9e:6b:3b:c0:34:71:25:28:58:01:6a:1f:b8:a7:
75:93:ed:ab:3f:95:92:7f:37:1f:0d:a0:b9:e1:15:92:ea:fb:
e9:4a:c7:9a:0b:8d:42:12:05:98:37:98:a8:fd:d9:19:0b:4a:
b3:cc:62:5a:04:a6:80:08:df:97:08:d9:5e:87:25:e6:ce:02:
c2:4a:cd:48:06:61:21:ea:fb:de:79:33:d3:c6:9d:a4:38:97:
f8:84:ca:0e:56:7c:b5:22:ea:e1:e5:a9:7a:65:10:cf:8f:56:
05:12:17:e9:e9:3f:f5:04:fb:f9:35:ca:3e:8f:3d:81:3b:df:
09:94:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:19:45 2025 by rpki-client