Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/431B51C0D7F811EFBAB06BA5762E951A.roa
File: 431B51C0D7F811EFBAB06BA5762E951A.roa (raw, json)
Hash identifier: XmZv2YjBFLtBPBPnAzKyvliNFQufH130dtiHfKNlBzc=
Subject key identifier: 26:99:20:81:65:E6:B2:57:13:ED:99:E5:E0:73:72:BF:F0:55:DF:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/431B51C0D7F811EFBAB06BA5762E951A.roa
Signing time: Tue 21 Jan 2025 13:04:35 +0000
ROA not before: Tue 21 Jan 2025 13:04:31 +0000
ROA not after: Sat 01 Feb 2025 13:04:31 +0000
asID: 48031
IP address blocks: 156.246.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69058 (0x10dc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:04:31 2025 GMT
Not After : Feb 1 13:04:31 2025 GMT
Subject: CN=678f9b63-a699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:ee:4c:6f:13:f5:ee:4c:07:f2:17:d9:a9:
98:bc:db:c8:29:fc:69:3f:c2:a1:4b:74:a9:ba:d7:
d4:30:ac:de:17:c8:8e:a4:2d:f6:71:b2:2d:b0:5a:
03:8d:d3:a9:df:66:2e:90:97:64:5c:43:8e:5b:a0:
2e:18:63:36:02:70:c9:bc:ad:60:e1:f2:76:69:8a:
91:29:5e:21:aa:c9:e2:c3:eb:b5:d5:a5:51:d6:cf:
44:02:1e:3a:3c:85:8d:a7:88:85:05:4c:b1:d4:c7:
01:b8:48:49:89:a8:ae:c9:00:04:9a:2c:c1:7e:46:
7e:aa:77:5d:96:0d:40:80:1c:20:c6:95:bc:58:a7:
cd:38:92:d8:a9:51:e6:97:97:b2:ba:06:b9:c4:0b:
dd:ad:84:fc:4e:38:47:57:c8:c7:19:d7:7f:53:fe:
f0:88:6b:0c:cc:ee:27:15:7b:0d:e0:3e:55:10:b6:
40:8d:b3:7b:b9:5d:4f:d6:77:d1:06:0f:c8:f0:4f:
9d:5d:c1:cc:25:aa:a9:af:f8:0f:8e:f3:ef:c0:8d:
26:2f:f7:19:eb:59:4e:60:70:9e:4e:fb:ea:18:cf:
0d:cc:80:25:2b:d5:54:87:88:68:6a:a5:ba:1a:49:
43:bd:84:3e:31:93:b7:3c:7f:a4:0a:c9:52:ea:65:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:20:81:65:E6:B2:57:13:ED:99:E5:E0:73:72:BF:F0:55:DF:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/431B51C0D7F811EFBAB06BA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:13:cd:99:fe:7c:1b:24:92:bf:1c:8f:63:e7:85:f3:05:c8:
88:e0:eb:63:99:40:7b:4c:5b:c9:4d:ba:31:39:f6:36:10:58:
4f:e2:ad:8b:a4:23:f3:6a:c0:c1:14:12:80:6f:da:4d:dc:53:
14:cb:14:30:25:77:14:eb:a4:15:6d:4a:94:51:e8:2d:5c:ee:
22:29:d3:50:ba:2a:ff:b0:3c:c4:1f:e4:58:7e:07:50:32:53:
3c:7c:a9:3b:24:df:14:3e:0b:2e:64:33:21:28:f4:8b:81:eb:
bf:cd:7f:a8:dc:c0:25:be:bf:26:58:e4:5b:d7:66:cf:17:cd:
34:24:2f:42:d5:0b:0b:5c:97:92:26:d3:c0:33:7b:0d:23:10:
98:1b:e7:5b:11:dc:11:3c:44:ff:d1:fb:e4:a8:86:45:11:ed:
8f:f4:bf:75:36:e4:34:26:a1:bc:59:96:d7:7b:38:5a:d9:d6:
f0:8a:2d:fb:30:6d:ee:0b:9a:88:34:3d:40:26:4c:15:7a:78:
8d:e0:b0:00:d6:6e:69:05:3e:1f:e7:9d:d0:d1:4a:fd:d0:61:
0a:1a:3d:67:5f:7a:58:9a:55:93:85:7f:d7:1a:49:6b:71:a2:
4b:35:b4:7e:65:64:3c:5e:88:df:bd:d7:fc:c0:f0:28:90:36:
9d:3b:be:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:21:24 2025 by rpki-client