Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EA4D88CF35711EF9BE4468D762E951A.roa
File: 6EA4D88CF35711EF9BE4468D762E951A.roa (raw, json)
Hash identifier: EgT+Keh6k3iYNPtIz5o1ZSpEpgqd8Ly4kHKMJIz/I6o=
Subject key identifier: E2:4F:E1:E6:A7:AD:30:9B:12:6A:47:3D:27:E0:96:D9:B1:BC:31:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DF6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EA4D88CF35711EF9BE4468D762E951A.roa
Signing time: Tue 25 Feb 2025 09:03:52 +0000
ROA not before: Tue 25 Feb 2025 09:03:48 +0000
ROA not after: Sat 19 Feb 2028 09:03:48 +0000
asID: 17561
IP address blocks: 156.249.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77302 (0x12df6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 09:03:48 2025 GMT
Not After : Feb 19 09:03:48 2028 GMT
Subject: CN=67bd8777-133e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:60:bd:3b:74:68:ad:a6:a6:e2:aa:d4:fa:10:
74:6a:54:f8:f5:f3:67:6b:6d:f0:7d:c9:c0:ec:33:
e9:21:a3:5c:34:b5:58:62:bd:e8:2f:98:8e:41:91:
45:b8:c3:dd:7f:54:78:38:b6:a9:b0:65:35:c9:d6:
2a:b5:1c:e1:ee:e4:a1:0b:16:24:2a:e9:49:a8:9f:
26:81:88:d3:ca:05:6a:7b:2c:29:39:51:1e:be:8b:
1d:15:b5:04:15:0a:a8:23:5d:a0:7a:d2:db:46:78:
77:1f:2a:4a:53:0f:f7:56:d0:74:9c:71:2c:ae:09:
4b:3e:ce:e0:a0:8e:a3:22:07:ee:11:b4:97:46:79:
09:c0:48:11:38:58:b1:97:de:00:43:f2:ca:64:5d:
85:20:4f:65:fe:7b:a3:b3:5c:fa:5a:45:e6:32:b3:
dc:38:5b:36:86:52:b4:a3:15:66:6b:ee:9a:27:dc:
7a:b3:dc:b3:70:be:1e:14:a1:90:92:71:c8:41:20:
06:a9:2d:99:6b:1b:61:c9:b9:39:4b:75:a1:a9:b8:
53:66:1d:dc:dc:18:8c:77:ad:af:54:41:9d:fe:a6:
09:45:f4:46:01:b5:9d:ff:b3:b5:96:3a:f4:1d:fa:
64:d6:c5:7e:bc:18:66:ae:5c:79:ce:8a:4f:07:2a:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4F:E1:E6:A7:AD:30:9B:12:6A:47:3D:27:E0:96:D9:B1:BC:31:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EA4D88CF35711EF9BE4468D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.248.0/24
Signature Algorithm: sha256WithRSAEncryption
94:26:1b:1a:ff:0b:2b:d8:56:f4:ed:57:04:fa:e5:55:2f:cc:
77:15:96:02:01:71:d7:6d:32:bf:f0:d0:ad:ad:e8:37:12:34:
07:9d:6f:cd:50:1e:6e:ad:73:23:b5:82:60:6a:a8:be:34:13:
df:e8:01:af:35:48:ce:4c:7c:1b:3b:1d:75:1c:bd:0e:62:bf:
fe:0d:30:95:32:07:1b:18:6e:a3:b6:12:a6:12:7a:22:81:c3:
9c:c4:8b:5c:e9:56:db:9b:e0:29:e1:ed:b0:d2:45:09:b1:54:
03:10:36:af:f9:4f:9a:cc:f2:ca:ae:b3:f7:59:3c:e1:53:6f:
8c:c4:2f:7d:c9:fe:6a:e2:04:94:09:55:b3:c1:63:c2:47:58:
17:e9:39:e1:19:e8:fa:e0:63:41:e2:90:e6:b3:2c:90:76:ed:
9e:7f:06:02:bc:22:a8:ff:90:c8:d3:05:ab:a9:3f:70:9f:c9:
78:18:6d:ef:e6:37:77:8c:b8:dc:10:ce:f1:5c:9e:a5:c0:e6:
16:91:9d:ac:1e:06:1f:a1:e8:55:05:7b:1a:66:02:8b:03:af:
0b:96:70:28:ef:f0:4c:e0:97:04:19:e1:4a:3a:7f:5c:51:f1:
05:47:2b:b7:8e:2b:86:ca:b2:92:57:87:9b:dc:d3:60:0a:13:
e6:b1:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:43 2025 by rpki-client