Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE0102B4D70811EF8A326C88762E951A.roa
File: FE0102B4D70811EF8A326C88762E951A.roa (raw, json)
Hash identifier: OiZLHDQolaQhMrEXhi7QNPPJ4b+bmKqhaPKUmV4Yb2I=
Subject key identifier: 16:95:C5:81:00:C4:93:B2:31:6F:66:07:35:53:12:BF:49:82:19:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE0102B4D70811EF8A326C88762E951A.roa
Signing time: Mon 20 Jan 2025 08:31:49 +0000
ROA not before: Mon 20 Jan 2025 08:31:46 +0000
ROA not after: Sat 01 Feb 2025 08:31:46 +0000
asID: 44559
IP address blocks: 156.246.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68601 (0x10bf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:31:46 2025 GMT
Not After : Feb 1 08:31:46 2025 GMT
Subject: CN=678e09f5-2144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:27:a1:a5:9e:e5:ac:b4:ed:1b:fd:2e:65:
1e:a7:62:c7:d5:ff:a0:23:fe:f9:18:88:98:eb:ab:
61:c9:89:d6:4d:1d:c1:dd:58:c4:9a:2a:e3:23:ce:
be:a4:06:7c:c7:dd:b5:8d:58:d7:cd:94:29:51:a2:
19:ad:5f:8b:a4:86:08:35:5b:e2:e5:f0:2e:6e:96:
da:d9:d6:3e:5a:74:7e:5e:42:9e:ca:8d:f9:94:63:
5e:a9:4e:95:c0:e3:36:11:3e:31:51:d5:9e:c2:8a:
4a:c0:9c:ac:75:a1:24:f7:8f:5a:f1:c8:ab:8c:de:
fc:e2:a6:4f:fd:86:7f:a5:ba:5f:77:3e:f3:40:c8:
77:5a:77:81:a9:f3:04:55:55:43:fe:7b:a5:12:39:
37:cd:b7:f4:f4:45:92:f5:89:f4:37:f0:21:04:03:
c6:2d:cc:e2:53:b4:db:95:e6:5a:b8:43:7b:66:0e:
fe:9c:78:67:24:f6:27:b1:29:1c:ec:69:f5:61:05:
75:4f:70:29:c2:93:78:52:03:3b:e4:d6:47:21:b7:
58:60:f3:4b:dd:2b:f0:9d:06:c6:67:5b:d1:bb:3c:
e0:98:00:cf:cc:db:5f:f2:c5:5c:f9:0b:93:98:ab:
b7:23:5b:d9:51:5c:ea:71:ac:c1:26:43:10:bd:00:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:95:C5:81:00:C4:93:B2:31:6F:66:07:35:53:12:BF:49:82:19:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE0102B4D70811EF8A326C88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.150.0/23
Signature Algorithm: sha256WithRSAEncryption
75:cc:df:dd:c4:4f:2e:d0:ef:28:65:86:e6:3e:60:f0:42:53:
a5:17:53:ca:15:c5:d9:ba:f7:76:d9:be:1a:87:8c:68:05:23:
6f:5e:16:38:75:eb:ba:58:8a:05:dd:d6:3d:88:66:09:ec:c1:
f7:37:73:23:08:49:38:a5:4b:f6:b0:18:9d:4a:69:00:ad:39:
f1:2d:fb:a9:53:44:7d:98:f8:a9:96:df:cd:ce:59:81:47:e1:
f8:a7:0e:ec:5a:96:04:0f:be:e1:49:77:11:f5:cf:78:6c:8a:
6d:a7:5d:9d:99:3e:48:df:ee:ab:d8:72:e4:5d:c7:ff:31:e9:
fc:cc:6e:c5:3e:30:65:9d:8c:25:30:f1:f3:46:ee:49:ab:80:
8d:fe:8d:be:00:73:81:b3:79:fb:8d:08:69:ca:2b:4b:e1:c2:
03:f2:bd:be:ac:c0:a0:f8:d1:50:3f:5d:2e:87:11:31:ac:64:
aa:b1:1a:c4:49:9e:f1:00:d9:0a:37:b3:bf:7d:d0:91:38:8a:
23:ef:84:24:46:05:af:12:1e:3d:8b:96:bc:2a:75:7c:22:6c:
f5:3a:f5:f4:39:1f:15:c8:c6:ad:18:36:19:e2:4c:b4:08:46:
d5:f1:a6:2e:3d:95:d1:37:38:55:dc:a0:66:03:50:b5:a6:cf:
0b:60:9c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:28:08 2025 by rpki-client