Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A731DDED7C611EF9AD34160762E951A.roa
File: 1A731DDED7C611EF9AD34160762E951A.roa (raw, json)
Hash identifier: rGUNKxqPj6x1hpcZEWO8P6OyzcKl5qqiZxZakH6KxAw=
Subject key identifier: 5E:96:3A:60:82:C0:93:AA:3F:54:C0:39:B4:DC:96:BD:E2:FA:B9:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CB0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A731DDED7C611EF9AD34160762E951A.roa
Signing time: Tue 21 Jan 2025 07:05:32 +0000
ROA not before: Tue 21 Jan 2025 07:05:29 +0000
ROA not after: Tue 18 Feb 2025 07:05:29 +0000
asID: 61461
IP address blocks: 156.255.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68784 (0x10cb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:05:29 2025 GMT
Not After : Feb 18 07:05:29 2025 GMT
Subject: CN=678f473c-df84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f2:a7:86:65:1a:7c:11:c6:53:93:c3:8c:d2:
ae:ab:73:fa:af:a8:39:48:ca:06:b4:9d:b7:5d:dc:
e9:67:e6:f2:03:17:b7:eb:a7:32:18:f1:e2:5f:58:
d1:cf:cb:3b:1d:eb:80:50:65:16:6e:71:79:e1:e0:
ff:46:8e:e8:e0:8e:49:73:92:34:5f:cd:32:fb:05:
d6:b1:a5:39:11:07:29:90:a6:92:ba:ad:04:d6:17:
1b:bc:55:96:b2:6a:30:d4:4e:42:e7:1b:8e:57:7b:
3e:27:67:5f:f3:81:66:f4:97:92:7e:06:90:37:7a:
4e:76:ef:c7:5a:05:67:60:04:f0:50:a5:f6:85:a3:
8f:8c:b5:9d:25:ed:fb:b6:9c:aa:99:4d:8d:b3:31:
70:0c:ec:63:b9:3a:ac:98:b9:ea:54:12:b1:3d:3f:
12:21:69:eb:11:51:c2:33:0f:5d:30:50:17:b8:84:
30:2f:c0:c0:9c:e1:fc:9b:6c:95:aa:38:53:f3:91:
c5:8d:56:a6:01:92:51:8c:ba:c7:39:36:01:78:1c:
c8:04:c8:d4:77:74:5a:67:77:de:df:33:84:c0:a7:
89:a0:da:30:e9:3a:7a:cc:4c:cb:3c:15:ff:be:6f:
f4:9e:25:36:a8:5b:3f:c0:2c:ed:97:04:57:82:11:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:96:3A:60:82:C0:93:AA:3F:54:C0:39:B4:DC:96:BD:E2:FA:B9:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A731DDED7C611EF9AD34160762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.128.0/17
Signature Algorithm: sha256WithRSAEncryption
82:13:89:ac:4e:80:54:4a:56:32:b0:51:e0:8b:68:5c:b5:8e:
73:c5:1f:9c:2d:12:16:a6:5b:db:c6:b9:b3:ac:8c:c5:61:84:
9c:61:0e:90:d3:62:80:35:95:3c:63:a1:8b:44:57:b4:8c:b6:
b8:78:c0:9b:21:b5:4e:2f:a7:53:ce:a2:95:ef:69:79:53:e7:
a3:bb:a8:b8:2f:7a:a1:84:67:89:b6:da:c0:69:b2:c0:46:cd:
d3:99:2e:ca:c2:24:65:70:6b:f8:9c:7b:73:7a:7d:e9:66:17:
6f:a7:14:2a:3c:20:f7:0e:38:6d:c8:7b:4e:a2:db:4c:2b:e4:
dd:18:b7:0d:2f:2e:93:a3:7e:c2:e6:6d:14:bc:70:da:f9:f8:
d1:70:87:88:de:fd:3b:8b:9d:31:1c:88:b7:f7:67:ee:a5:ac:
b6:92:ea:49:5f:e1:19:d8:51:73:20:1d:63:26:f1:d3:fd:52:
aa:94:dd:c6:40:bc:6c:67:ff:fd:d8:96:34:03:9a:58:c4:fb:
c9:27:01:c7:d5:f4:7a:07:30:43:b7:b4:79:0b:e7:0d:89:29:
0e:d3:72:fd:fa:92:7d:e9:24:56:73:8e:33:a1:b5:6e:4c:31:
a2:50:2c:75:1e:32:49:16:c8:d8:a0:01:6d:ab:e5:9b:38:d9:
88:be:bc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:23:56 2025 by rpki-client