Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FF3347ADAFB11EF98693F5F762E951A.roa
File: 4FF3347ADAFB11EF98693F5F762E951A.roa (raw, json)
Hash identifier: SeXCYzs1Qk3k4qi6/tahseAeIKEYKM1EvIDdl+6TC8o=
Subject key identifier: 47:79:F7:57:0F:2B:F7:39:BC:EF:01:21:E1:4E:D8:84:44:C7:71:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01119F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FF3347ADAFB11EF98693F5F762E951A.roa
Signing time: Sat 25 Jan 2025 09:03:59 +0000
ROA not before: Sat 25 Jan 2025 09:03:55 +0000
ROA not after: Sun 23 Feb 2025 09:03:55 +0000
asID: 48031
IP address blocks: 156.246.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70047 (0x1119f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:03:55 2025 GMT
Not After : Feb 23 09:03:55 2025 GMT
Subject: CN=6794a8fe-0267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c0:46:3d:90:19:6f:31:cd:e9:f6:32:9f:61:
2d:43:15:1f:ad:c3:74:51:4c:cf:4e:6f:dc:3d:78:
f3:ac:09:0e:5d:8b:38:e4:73:da:d6:b9:6c:37:78:
44:c0:72:2b:81:42:20:97:a3:f9:15:bc:2c:e8:19:
9b:07:e2:76:6e:ca:f6:5f:c3:8b:73:86:f6:ca:ab:
e5:11:13:c3:69:20:ef:a6:1c:01:b3:46:ec:45:9c:
43:a5:a3:6d:73:73:e6:83:94:53:ea:5a:e4:cd:3c:
a7:94:3a:e2:1b:7f:dc:c3:a8:d4:7f:a6:d5:cd:e9:
8c:22:92:5c:0b:82:31:fe:1f:86:e0:e5:36:20:64:
d8:fa:2e:c1:f9:3c:e2:5f:2f:c8:71:3e:4f:7b:6c:
5a:e9:8e:33:98:f0:50:4d:b7:ae:92:0e:ec:30:eb:
45:17:2f:4d:c1:03:a3:81:34:6f:fe:7f:b0:5e:5b:
dc:09:92:eb:d9:cf:24:af:37:d1:cf:ea:60:e3:3b:
29:f4:b1:f3:ec:29:b8:ce:d0:d0:93:ca:94:27:22:
5f:fe:d9:50:0c:dc:27:dd:55:94:53:b9:1a:96:2d:
72:47:fd:55:b7:3d:1a:62:b1:95:44:ab:13:e3:69:
35:56:7e:f3:a8:bc:21:b6:7f:0e:95:c2:1b:3b:52:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:79:F7:57:0F:2B:F7:39:BC:EF:01:21:E1:4E:D8:84:44:C7:71:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FF3347ADAFB11EF98693F5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.130.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:37:0a:c1:03:ab:b4:91:6b:e0:ac:25:d4:a0:ca:8e:56:ec:
e4:84:ee:ef:c5:4e:18:e7:80:f3:1b:70:3a:4d:93:5d:0d:68:
48:6d:92:37:a2:0b:0d:57:c4:1e:13:49:bc:16:5b:63:a2:1a:
4d:fe:65:96:9d:d5:39:66:b0:c5:92:9c:ac:f9:de:82:b0:fb:
03:a3:30:e0:55:cb:2a:ae:5e:3f:a4:52:75:3c:a8:db:9c:96:
bd:df:7d:97:15:3c:b0:8b:8c:01:bd:77:c5:b3:ec:e7:02:b5:
45:b9:56:9b:55:2a:a4:aa:d5:d3:9e:28:70:6a:f6:38:83:13:
00:8d:70:54:f8:9a:25:73:ee:47:62:19:4c:cd:13:db:60:37:
be:8f:9e:93:c0:42:3a:8d:1c:3a:27:c0:16:bb:23:04:a0:6b:
7b:7a:eb:79:cf:35:b5:01:e0:39:b8:02:c3:21:ec:0c:31:0b:
88:37:4d:35:b5:f8:80:7b:ec:5b:0f:56:cb:c0:50:3e:c4:b1:
91:46:ee:56:ad:55:bf:ce:02:7a:64:09:c7:11:c5:7c:8b:10:
56:b2:ec:de:62:4a:20:42:3d:b4:d0:81:d8:31:18:53:33:1b:
8b:5d:c7:32:08:d5:cc:99:f0:68:3b:dd:9a:39:39:14:70:d4:
11:75:5a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:49 2025 by rpki-client