Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04B787BCDAFC11EFB259D963762E951A.roa
File: 04B787BCDAFC11EFB259D963762E951A.roa (raw, json)
Hash identifier: vWmi7nLi6m7VjyYrlVFENy8rAsKCsVnFww8yD1KQnwk=
Subject key identifier: A8:1F:65:80:74:94:60:77:77:E0:74:64:1C:0F:5B:D2:B5:52:2D:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04B787BCDAFC11EFB259D963762E951A.roa
Signing time: Sat 25 Jan 2025 09:09:02 +0000
ROA not before: Sat 25 Jan 2025 09:08:58 +0000
ROA not after: Sun 23 Feb 2025 09:08:58 +0000
asID: 48031
IP address blocks: 156.246.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70053 (0x111a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:08:58 2025 GMT
Not After : Feb 23 09:08:58 2025 GMT
Subject: CN=6794aa2e-5a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:69:b9:62:ae:ea:8e:2f:0b:cc:3b:5b:77:
1a:78:39:ae:f9:ea:28:a4:1a:f3:dc:d3:d0:b2:56:
91:ed:69:63:cd:bc:c8:de:e1:b8:b7:3c:d5:52:41:
b3:87:e7:70:b4:c0:65:42:74:d2:33:69:bb:84:ec:
ca:db:4a:00:6d:cd:73:24:cf:70:53:c3:60:82:c2:
e3:93:01:31:3d:e1:67:49:ef:55:e1:49:7a:51:20:
a6:7c:bd:f4:50:13:23:c5:44:72:df:b6:5b:65:3c:
08:06:6f:25:2c:15:6d:93:97:a0:0f:63:fb:29:65:
6f:91:d5:fc:cc:52:76:95:2c:6e:f7:ee:0f:95:73:
dc:fb:f4:0a:e8:d9:63:70:98:ff:e5:89:09:a0:40:
af:97:61:2b:26:c2:5d:a6:50:16:c5:6c:4e:16:d1:
7b:93:dd:11:ee:69:95:67:34:7f:57:5c:cf:69:7d:
b0:9c:7f:bb:c6:f9:96:1f:93:8c:f9:f3:bd:3d:85:
fd:26:bb:83:09:b9:fc:7a:c3:e5:41:72:93:ea:2f:
5a:f3:e8:f3:70:d3:ee:b1:80:9d:55:78:19:95:1f:
27:c8:ea:db:89:e4:ef:f5:38:10:0a:af:5c:fa:db:
86:2f:52:00:46:30:79:03:be:48:eb:00:81:ae:c6:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1F:65:80:74:94:60:77:77:E0:74:64:1C:0F:5B:D2:B5:52:2D:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04B787BCDAFC11EFB259D963762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.133.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0d:d3:cf:0c:97:fb:05:a5:5e:2a:44:8f:72:45:3c:2a:f1:
74:e4:5a:aa:86:16:21:a4:b7:4b:21:89:08:c8:3b:fe:84:e5:
3b:2c:67:97:eb:0e:e1:f6:f1:15:3a:bf:53:e4:67:be:40:c5:
93:ea:0b:4d:4f:51:ca:71:d5:81:7b:9e:42:50:bd:40:84:f5:
19:36:84:a2:1b:e1:b8:ff:2c:21:0d:b0:30:36:29:58:e2:2a:
23:a5:88:28:f2:48:9c:a8:3d:37:e8:ea:40:d2:91:ec:be:44:
86:73:ce:d0:ce:2b:e8:9b:a8:bb:0a:ed:e9:72:ee:00:c2:ad:
cf:66:b4:db:fb:91:c9:0b:4a:4e:37:b8:22:c3:a8:13:91:bd:
24:3b:00:de:a1:2f:13:8a:f9:25:9b:6b:fe:7e:85:6c:43:20:
02:38:f0:c9:d3:36:ea:7e:42:10:62:0d:b9:a9:d9:0e:d1:30:
bd:c6:d4:9f:a7:a1:53:0f:b0:59:4c:3c:c4:ba:67:aa:40:2c:
a1:d2:b8:5c:50:c8:7a:1e:a0:d2:64:d9:e2:4b:ff:0d:3f:f4:
f1:17:33:5a:f7:b1:48:7d:8f:92:b9:1e:8a:cc:e3:30:3d:bf:
cb:5f:40:36:ec:04:8a:d6:58:9f:91:90:61:5f:f0:8a:b9:71:
63:14:47:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:24:35 2025 by rpki-client