Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD137C14DA8D11EF82BF6274762E951A.roa
File: FD137C14DA8D11EF82BF6274762E951A.roa (raw, json)
Hash identifier: 9z6j12IzpSdU2kQ5aJNIWwGVXl1Hal77xcnkHMrg3QI=
Subject key identifier: 83:B7:10:A8:C4:4F:98:3E:ED:30:3D:FC:E5:34:B1:AB:42:8E:D6:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011064
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD137C14DA8D11EF82BF6274762E951A.roa
Signing time: Fri 24 Jan 2025 20:01:24 +0000
ROA not before: Fri 24 Jan 2025 20:01:20 +0000
ROA not after: Tue 25 Feb 2025 20:01:20 +0000
asID: 44559
IP address blocks: 156.246.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69732 (0x11064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:01:20 2025 GMT
Not After : Feb 25 20:01:20 2025 GMT
Subject: CN=6793f194-c34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:70:f7:9a:a5:b5:66:61:ce:91:2a:52:fd:
61:b3:75:c4:ee:43:ed:a7:ed:9e:f5:3c:7d:85:41:
f7:08:5b:5b:15:ae:e4:d5:2c:72:08:e0:a5:3b:9a:
2e:e3:d1:9e:c2:5c:66:ad:14:37:a4:aa:3d:06:8c:
da:e3:2d:8e:a3:43:60:1d:51:a3:9e:6e:e8:01:d7:
77:5d:72:d0:0c:43:a5:3b:93:92:26:bf:32:a0:da:
ab:91:03:0b:78:a7:3d:03:a2:5d:9a:2c:05:5d:fa:
04:d8:2b:6c:22:55:2d:89:b3:67:c5:98:4d:57:40:
49:1a:a3:28:cb:c5:78:9c:cc:a6:46:9f:02:7c:07:
c6:85:ff:ed:14:f7:e4:59:f1:f9:cd:c1:41:3a:c8:
d1:e0:e5:ba:1a:5c:07:6a:0e:e3:49:9d:32:4a:49:
5d:93:46:2f:13:74:b3:00:0d:e6:ce:36:da:7a:25:
b6:6f:8a:f7:dd:55:9c:37:24:ae:6f:83:05:1e:17:
59:a7:86:39:32:81:0f:97:9d:fb:d5:dd:34:22:e3:
6f:4d:2a:00:8f:49:10:b1:7c:66:49:55:9b:45:f8:
51:a3:fa:48:3f:1f:9c:5f:0b:a4:ec:db:a6:2d:a6:
a7:78:83:5b:ce:1f:9b:55:ab:cd:21:eb:69:b1:e2:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B7:10:A8:C4:4F:98:3E:ED:30:3D:FC:E5:34:B1:AB:42:8E:D6:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD137C14DA8D11EF82BF6274762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.216.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c8:0f:94:b4:b3:6d:bb:dc:e8:78:5e:b9:a7:9a:7b:a9:46:
59:72:b8:49:dc:a4:11:35:8a:b0:8b:ee:f5:21:86:e9:7a:3e:
d1:72:65:8b:a2:98:25:90:ac:a7:a5:18:f6:83:1e:65:d7:08:
fe:9b:de:62:df:d2:21:2c:2e:a6:f0:c4:79:74:0c:4b:e7:4a:
74:20:9b:55:6b:4c:21:a8:29:45:d8:73:b2:72:c9:23:3d:6d:
d9:d2:78:2b:b9:a1:90:f1:d3:a5:c0:35:ee:9b:05:6a:f4:ad:
15:3d:9d:86:19:db:b9:7c:e4:02:28:2f:b3:9b:e3:a4:c3:0c:
a9:03:5f:9d:e4:af:d7:a4:3b:ed:d8:83:e5:7a:2f:3a:12:0a:
11:24:a0:0d:f2:6f:50:3e:e1:14:3f:6d:df:44:ac:b1:f7:f8:
db:bd:95:9c:29:4a:5d:cd:7c:80:db:93:bf:6f:ef:c9:d9:a4:
c6:4e:0c:9c:6f:16:c2:cf:cc:cb:e7:aa:2a:c4:1c:1e:10:10:
43:bf:fe:cd:02:03:8a:bb:d4:c7:85:da:95:5c:cc:8f:29:dd:
81:30:bd:23:8a:57:46:35:54:33:ce:7d:51:0e:e8:63:a5:19:
58:92:e5:60:32:2e:e3:a2:4e:e1:88:f3:af:e6:57:4a:e6:23:
79:cd:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:31 2025 by rpki-client